Privacy Policy

Information we collect

• Account information. When you create an account we collect your email address and the password you choose (stored only in hashed form by our authentication provider). If you sign in with Google instead, we receive your name and email address from Google. You may also share your school and networking goals when you sign up.
• Your profile. To write emails that sound like you, OfferPath uses the profile you fill in: your name, school, year, major, recruiting track, a line about what draws you to it, and when you are free to talk, with your time zone.
• Information you add. OfferPath is a tracker, so you enter details about the people you network with: names, firms, roles, office locations, contact details, notes, dates, and status. It also stores the email drafts you write or paste in, and your resume if you upload one, so it can be attached to emails you send through Gmail. This content is yours; we store it so we can show it back to you.
• Billing information. If you upgrade to Pro, our payment processor (Stripe) collects and processes your payment details. We never see or store your full card number.
• Usage and device data. Like most websites, our hosting and security tools may record basic technical information such as your IP address, browser type, and the pages you visit, to keep the service running and secure. We also use Vercel Web Analytics to count page visits; it does not use cookies.
• Email engagement. Our email provider may record whether an email we send you, such as the follow-up digest, was delivered or opened.
• Referrals. If you use the referral program, we record who referred whom and whether each referral qualified. The school leaderboard shows only totals by school, never names.

How we use your information

• To provide the tracker, dashboard, follow-up reminders, recruiting calendar, email drafting, and Script Vault.
• To write email drafts. When you use one-click AI drafting, we send your profile details and that contact's details, including your notes on them, to our AI provider so it can write the draft.
• To read a reply you paste. If you paste an email you received into OfferPath, we send that text to our AI provider once to extract the reply's outcome and any proposed call times, then discard it. Only the outcome and times you confirm are saved to your contact.
• To process payments and manage your subscription.
• To send you account and transactional emails, including the follow-up digest (weekly on the free plan, every weekday on Pro) and notices about referral rewards.
• To understand, in aggregate, how OfferPath is used, so we can improve it.
• To respond to your questions and provide support.
• To keep OfferPath secure and to detect or prevent abuse, including referral abuse.

We do not sell your personal information, and we use your contacts, including those saved from the browser extension, only to provide OfferPath to you and, unless you turn it off in Settings, for Warm Paths as described below.

Warm Paths (shared outcomes)

Your contacts, notes, drafts, emails and outreach history are never visible to other users. Warm Paths uses one kind of fact from your tracker, without your name: that you reached out to a person and whether you recorded a reply, a scheduled call or a completed call. To recognize the same person across students, it also keeps a shared record of that person: their name, firm, group, role, office city and work email, and a coded form of their profile link that cannot be turned back into the link. We combine those facts with the same facts from other OfferPath users about the same person, and show aggregate signals such as ‘has replied to students before.’ A signal only appears once at least three students have contacted the same person, we never show that someone did not reply, and no signal ever names a student. Your school is used only in aggregate, for lines like ‘students from your school got replies at this firm.’ Warm Paths is on by default. You can turn it off in Settings; when it is off, nothing you record is included and you do not see shared signals. Deleting your account removes everything you contributed. Professionals who have been added by a student can ask to be removed at any time on our For Professionals page, and removal is permanent. A bounce you report is kept with the email address, not the person, to improve the Email Finder.

How we share information

We share information only with the service providers that make OfferPath run, and only as needed:

• Supabase for our database and authentication
• Stripe for payments
• Resend for transactional email, such as the follow-up digest
• Kit for our newsletter, if you sign up for updates
• Vercel for hosting and page-visit analytics
• Anthropic to write email drafts when you use one-click AI drafting, and to read a reply you paste in. It processes that text under its commercial terms, which do not allow it to train its models on it.
• Google if you sign in with Google, or connect Gmail and Google Calendar (see below)

These providers process data on our behalf under their own security and privacy commitments. We may also disclose information if required by law or to protect the rights and safety of OfferPath and its users.

Google Account Access (Gmail and Calendar)

If you choose to connect your Google account, OfferPath requests permission to send email on your behalf through the Gmail API (the gmail.send permission), and to see the email address of the connected Google account so we can show you which account is linked. We use this access solely to send the networking emails that you compose, review, and explicitly choose to send from your own Gmail account.

We do not read, access, store, or delete the contents of your inbox, and we do not request any other Gmail permissions. No email is ever sent without your explicit action, and we do not send bulk or automated messages on your behalf.

We store the identifiers Gmail assigns to messages you send through OfferPath so that your follow-ups stay in the same email thread. The identifiers contain nothing from the message itself.

When you connect your Google account, OfferPath also requests permission to see when you are busy on your primary Google Calendar (the calendar.freebusy permission). This returns only the start and end times of busy periods. We cannot see event titles, descriptions, attendees, or locations, and we do not request any other Calendar permissions. We use it solely so that, when we draft an email that suggests times for a call, we do not suggest a time you are already busy.

Busy periods are read at the moment a draft is generated, used only to work out which times to suggest, and are never stored. Only the resulting suggested times appear in your draft. When you use one-click AI drafting, those suggested times are included in the text we send to our AI provider to write the email for you. We do not use Google user data, or anything derived from it, to train or improve AI models.

To provide these features, we securely store the authorization tokens Google issues. These tokens are stored securely, are never sold or shared with third parties, and are used only to send emails you initiate and to check your busy times when you draft an email. You can disconnect your Google account at any time within OfferPath or at https://myaccount.google.com/permissions, which immediately revokes our access.

OfferPath’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Browser extension

The OfferPath extension reads the professional profile you are looking at only when you click the OfferPath icon or press its keyboard shortcut, and parses it in your browser. If we switch the extension to paste mode, it reads nothing from the page and parses only the profile text you copy and paste into it after clicking Paste Profile. The page text is held in your browser’s memory only until the preview is built, and is never written to disk or sent anywhere. When you click Save, it sends the fields in the preview (name, firm, role, group, email, location) and the profile’s link to your tracker, and nothing else. If you leave the email blank and OfferPath has the firm’s email pattern on file, it fills in its pattern guess when it saves the contact, as it does for a contact you add by hand. It never reads any other page, never saves without your click, and never sends messages or connection requests on your behalf.

A contact saved from the extension is treated exactly like a contact you add by hand, so the rest of this policy applies to it, including one-click AI drafting if you use it and Warm Paths if you leave it on. You can disconnect the extension at any time in Settings.

Services you open from OfferPath

Some buttons hand your work to another service you choose. Open in ChatGPT, Claude, Gemini, or Copilot passes that service the drafting prompt, which includes your profile details and the contact’s details: either inside the link, or copied to your clipboard for you to paste. Open in Gmail or Outlook puts your draft inside the link. Text carried in a link can also appear in your browser history.

Once you are on that service, what you share there is governed by its own privacy policy, not this one. OfferPath never sends anything to these services on its own: nothing is shared until you click.

Cookies and similar technologies

We use a small number of essential cookies to keep you signed in and to keep the site secure, and your browser’s local storage to remember small preferences, such as which email app or AI you use. We do not use advertising cookies. The video on our homepage is served by YouTube, which may set its own cookies if you play it.

Your choices and rights

• Access and update. You can view and edit your contacts and profile anytime inside the app.
• Email preferences. Every digest and newsletter includes a one-click unsubscribe link.
• Delete your account. You can ask us to delete your account and associated data by emailing us. We will remove your data unless we are required to keep some of it, such as basic billing records.
• Turn Warm Paths on or off in Settings.
• Depending on where you live, you may have additional rights over your personal data, such as the right to access, correct, or delete it. Contact us and we will help.

Data retention

We keep your information for as long as your account is active. If you delete your account, we delete your tracker data; some limited records, such as payment history, may be retained as required for legal or accounting reasons. Shared outcome signals older than three recruiting seasons are deleted.

Children

OfferPath is intended for university students and others who are at least 16 years old. It is not directed to children under 16, and we do not knowingly collect their information.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date above, and significant changes will be communicated through the app or by email.

Contact

Questions about privacy? Email us at support@joinofferpath.com.