Privacy Policy

Who we are

FuturePaths is operated by Montgomery Software, Inc.. If you have a question or a request about your information, write to futurepaths@montgomerysoftware.com.

Information we collect

We collect what the service needs to work:

• Account: your email address, your legal name, a display name, the language you chose and, if you add one, a profile picture. Your password is kept by our sign-in provider, Supabase, and is not stored in our own database.
• Content you create: jobs, videos, blog posts, descriptions, images, comments, ratings, reports and edit suggestions you submit.
• Usage: records of what you do on the service, such as viewing a job or video, rating, commenting, reporting, uploading, and seeing, clicking or dismissing a recommendation. For signed-in people these records are linked to the account.
• Self-assessment questionnaires: if you complete one, the answers and the details you enter, which can include name, student ID, year of birth, gender and email address.
• Technical: your IP address is used briefly to limit abusive traffic, and our server may keep standard access logs.

Google sign-in

If you choose Continue with Google, Google tells us your email address, whether Google has verified it, your name and your profile photo. We use this only to create your FuturePaths account or sign you in, to match you to an existing account that uses the same verified email address, to set your display name, and to set your profile picture if you do not already have one. We do not read your contacts, calendar, files or other Google data, and we do not keep your Google photo's link. If we set your picture from your Google photo, we store only our own processed copy, which you can replace in your settings. The details Google returns, such as your name and possibly a picture, may be kept by Supabase with your sign-in record. We never see your Google password.

FuturePaths' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, we do not sell it, and we share it only with the providers listed below that help us run sign-in, or when the law requires. People at FuturePaths read Google user data only when that is needed to provide the service, give you support, keep the service secure or obey the law. If Google sign-in is added to an account that already existed, we send an email to that address to tell you.

How we use information

We use information to:

• create and secure your account and sign you in;
• show your profile, your content and your comments, and credit approved edits to their authors;
• send service emails: confirmation links, sign-in links, password resets, email-change and account-deletion confirmations, and notices about changes to your sign-in methods. We do not send marketing email;
• recommend jobs and videos and measure how the service is used. You can turn personalization off in your settings;
• create subtitles for videos;
• review reports, prevent abuse and enforce our Terms.

We do not sell your personal information and we do not use it for advertising.

Who receives information

The providers in the table below receive information to run the service. We may also disclose information when the law requires it or to protect the safety of people or the service.

What other people can see

Public: your display name, your profile picture, your join date, your reputation score and badges, content you publish, your comments, and your name on edits that are applied.

Private: your email address, your legal name, your password, your drafts, private videos and your notification settings. The people who run the service can see account details, including your email address and legal name, to run the service, handle reports and protect people.

Cookies and browser storage

We set only first-party cookies. They keep you signed in, remember your language and complete sign-in. We do not use advertising or analytics cookies, so we do not show a cookie banner.

• futurepaths.access_token, futurepaths.refresh_token, futurepaths.email and futurepaths.supabase_user_id: keep you signed in.
• futurepaths.locale: remembers your language.
• futurepaths.google_pkce and futurepaths.google_redirect: used for 10 minutes while you sign in with Google, then deleted.
• futurepaths.session_id: a random identifier set for each browser for one year. It is not currently used to track or profile visitors.
• Your browser also stores drafts of posts and edit suggestions on your device (local storage) so you do not lose them. They stay on your device until you submit them or clear your browser data.

How long we keep information

We keep account information while your account exists. Usage records are kept while the service operates; we do not currently delete them on a schedule. Drafts with no finished video that are not changed for 7 days are removed automatically, incomplete upload files are cleaned up automatically, confirmation and sign-in links expire, and the Google sign-in cookies last 10 minutes. Backups and server logs may keep information for a limited time after it is deleted, depending on our hosting arrangements.

Deleting your account

You can delete your account in your settings. We email a confirmation link first. When you confirm, your sign-in is removed from Supabase, your email address is removed from your account record, and your jobs and videos are marked deleted and no longer shown. The uploaded files may stay on our servers until they are cleaned up; contact us if you want them removed sooner.

Some information is not erased automatically: your display name and legal name, and contributions such as comments, ratings, reports, edit suggestions and usage records stay in our database. If you want these deleted or anonymized, contact us and we will review your request.

Your choices

You can edit your profile, turn personalization off, choose which notifications reach you by email, delete your content and delete your account. Depending on where you live, you may also have the right to ask us to access, correct or delete your information, or to object to some uses. To make a request, write to futurepaths@montgomerysoftware.com.

Security

We use encrypted connections, we do not store your password ourselves, our sign-in cookies are not readable by page scripts, and we limit who can see account details. No system is completely secure, so we cannot guarantee absolute security.

Children

FuturePaths is for people who are 16 or older. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will review and delete it.

Changes to this policy

We may update this policy. We will change the date at the top, and if a change is significant we will tell you on the service or by email.