Privacy Policy
Last updated: March 16, 2026
1. Data Controller
Joint data controllers for the NextPath AI platform: Saranen Consulting Oy ModernPath Oy Address: Helsinki, Finland Email: privacy@nextpath.ai Data Protection Officer (DPO): dpo@nextpath.ai
2. Purpose of Data Processing
We process personal data for the following purposes:
- User account creation and management
- Personalization of learning paths and progress tracking
- Team formation and sprint management
- Matching companies and builders (for recruitment purposes)
- Platform development and analytics
- Communication and notifications
3. Personal Data Processed
We collect the following personal data:
- Name, email address, and contact information
- Professional background and skill profile
- Learning data and performance records
- Portfolio content and project information
- Usage logs and technical data
4. Legal Basis for Processing
Processing of personal data is based on contract performance (providing the service), consent (marketing), and legitimate interest (platform development and security).
5. Data Sharing
We share personal data only for recruitment purposes with the builder's consent, with service providers (Supabase, Vercel), and to fulfill legal obligations.
6. Data Retention Period
We retain personal data as long as the user account is active or as necessary to provide the service. After account deletion, data is removed within 30 days.
7. Data Subject Rights
You have the right to:
- Access your personal data
- Request rectification or erasure of your data
- Restrict or object to data processing
- Data portability
- Lodge a complaint with the Data Protection Ombudsman
8. Data Security
We protect personal data with appropriate technical and organizational measures. We use encrypted connections, access controls, and regular security audits.
9. Cross-Border Data Transfers
Personal data is primarily processed within the EU/EEA. Our service providers (Supabase, Vercel) may process data outside the EU, but only under EU Commission-approved Standard Contractual Clauses (SCCs) and other appropriate safeguards.
10. Contact
For data protection inquiries, please contact: Email: privacy@nextpath.ai Data Protection Officer: dpo@nextpath.ai You may also lodge a complaint with the supervisory authority: Office of the Data Protection Ombudsman (Finland) https://tietosuoja.fi