Privacy Policy

1. Who we are

PATH Collective Pty Ltd (ACN 684 047 078), trading as Path Collective, operates pathcollective.com, app.pathcollective.com and the associated Path Collective apps and services. In this policy, "we", "us" and "our" mean PATH Collective Pty Ltd. "You" means anyone whose personal information we handle: members, facilitators, and people who book as guests without creating an account.

Contact for privacy matters: support@pathcollective.com. This policy should be read with our Terms of Service.

2. What we collect

2.1 Everyone with an account

• Name, email address and password. Your password is held by our authentication provider; we never see or store it ourselves.
• If you sign in with Google, Facebook or Apple, the identity information that provider returns to us.
• Profile details you choose to add: pronouns, prefix, biography, phone numbers, job title, company, website and profile photo, and your address where you give it.
• Your activity on the platform: events you save, attend, review or follow; facilitators you follow; PathCoins earned and spent; your referral code; and your notification preferences.
• Technical information: your device and browser, and the pages you visit.

2.2 Members going through onboarding

Our onboarding is a guided conversation. We collect the areas you select, the full text of what you write in that conversation (we keep the entire transcript), and information we derive from it using an automated language model: your stated challenges, goals and interests. What you write there is sent to a third-party AI provider; see section 5.

2.3 Facilitators applying to host

The application is more detailed. In addition to the above, we collect:

• Date of birth, phone number and full residential address.
• Professional title, qualifications, years of experience, biography, company name and logo, and social media handles and links.
• Uploaded documents: qualifications, insurance certificates and safety training certificates.
• Free-text answers to questions about sensitive subject matter: whether your offerings involve working with people in vulnerable states, touch or intimacy, plant medicines or altered states; whether you require participants to disclose personal history; your safety and inclusion practices; and details of any multi-day or residential retreats you run.

We treat these free-text answers as sensitive information. They may reveal health information, and they describe practices where a participant's safety is at stake. Section 5 explains what happens to them.

2.4 People who book as guests

If you book without an account we collect your name, email address, phone number, and your booking and payment records. Guests do not have a self-service account area. To access, correct, export or delete the information we hold about a guest booking, or to ask about a refund, email support@pathcollective.com from the address used for the booking and we will handle it manually.

2.5 Payments

We do not receive or store your card number. Card entry and storage happen entirely on our payment provider's hosted pages. We receive and store a record of the transaction: amounts, dates, the payment reference and the outcome. Facilitators receiving payouts complete a separate onboarding with our payment provider, which collects identity and bank details directly; those bank details never reach our systems.

2.6 Email

We record when we send you an email and its delivery status. Our email provider also reports whether a message was opened and whether links in it were clicked.

3. Why we use it

• To create and run your account, and to authenticate you.
• To take bookings, process payments, issue refunds and pay facilitators. Path Collective is the merchant of record for bookings made on the platform.
• To match you with events and facilitators, including automated personalisation (section 5).
• To review facilitator applications (section 5).
• To send you service messages about your bookings and account.
• To send you marketing where you have consented, and you can withdraw that at any time. At checkout the marketing and facilitator-contact boxes are pre-ticked and can be unticked before you complete the booking; every marketing message carries an unsubscribe link.
• To provide customer support.
• To detect and handle fraud, chargebacks and misuse.
• To meet our record-keeping obligations under Australian tax and corporations law (section 7).

4. Who we share it with

We use service providers in the following categories. Each receives only what it needs for its function.

If you sign in with Google, Facebook or Apple, that provider also learns that you signed in to our service.

Overseas disclosure. Our database and authentication are hosted in Australia, and our AI, payment, email and monitoring providers process data in the United States and other countries where they operate. By using the platform you acknowledge that your information may be handled in those countries. This policy is written for Australian privacy law; if you are in the European Union or the United Kingdom, contact us before using the platform.

5. Automated processing and AI

This section is deliberately specific, because the processing is more extensive than a general "we may use automated tools" clause would suggest.

5.1 What is sent to AI providers

We use third-party large language models. Depending on the feature, we send:

• Facilitator applications: the entire application, including your date of birth, phone number, address, every free-text answer described in section 2.3, and the names and types of your uploaded documents.
• Onboarding conversations: your name, your selections and the complete message history, resent in full on every turn.
• Matching and personalisation: your location, age, gender, and the challenges, goals and interests derived from your onboarding conversation.
• Event listings: facilitator-authored titles, descriptions and details.
• Support tickets, where that feature is switched on: the subject and body of your ticket, plus diagnostic context about your browser.

The information above is sent as it is held, without a separate redaction step. Which provider processes a given feature is a setting we can change, so you should treat our current AI providers as recipients of all of it. We do not permit our providers to use your information to train their models where their terms allow us to opt out, and we are working towards contractual guarantees on residency and retention with each of them.

5.2 Decisions made about you

Facilitator applications are assessed automatically. The model produces a recommendation and a risk assessment for each archetype you apply for. A member of our team makes the final decision on every application; the automated assessment informs it and does not replace it. If you believe an assessment was wrong, email support@pathcollective.com and a person will review your application.

6. Public information

Some things you provide are published:

• A facilitator's public profile: name, photo, biography, professional title, qualifications, languages, links and images.
• Events you publish, including their description and location.
• Reviews you write, alongside your name.
• Aggregate signals about a facilitator's activity, expressed as bands rather than exact figures.

Members can control parts of their own visibility in settings. By publishing a profile, an event, a review or an image you give us permission to display it on the platform, include it in emails and process it as described in section 5. To have a review or other public content removed, email support@pathcollective.com.

7. How long we keep it

Bookings, payments, refunds and disputes are kept for at least seven years, because Australian tax and corporations law requires it. This applies even after you delete your account (section 8.2). Our financial ledger is append-only and cannot be deleted by the application. Other information is kept while your account exists and removed when you delete it. We do not currently apply automatic expiry to information that is not deleted with an account. Information also persists in our backups for a period after it is deleted from the live system.

8. Your rights

8.1 Access, correction and complaint

You may ask us for a copy of the personal information we hold about you, ask us to correct it, and complain about how we have handled it. We will respond within a reasonable period. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner.

8.2 Deleting your account

If you have an account, you can export your data or delete your account from Privacy & data in your settings. When you delete your account, we erase:

• Your profile and contact details, and your address.
• Your reviews, follows, saved events, attendance records and notifications.
• Your PathCoins, referral code and onboarding answers.
• Your search and browsing history.
• Your facilitator profile, if you have one, including documents you uploaded, which are deleted from our file storage as well.
• Your support conversations. We keep a record that each conversation happened, but the subject, messages and attachments are removed, as are internal notes our team wrote about you.

Your login is removed, so the email address becomes available for a fresh signup. We keep your booking, payment and refund records. Instead of deleting them we de-identify them: your name, email and any contact details you gave when booking are replaced with a placeholder, so the records still show what was paid but no longer carry your details.

9. Cookies and tracking

We use cookies that are necessary to keep you signed in and to make the platform work. Our pages also load a marketing and analytics script from our CRM provider and a location-lookup service used for event search; these run when you visit, and the CRM script may set its own cookies. You can block them with your browser settings without affecting bookings. We will add a consent control for these before we expand their use.

10. Security

We protect your information with access controls, encryption in transit and restricted administrative access. Facilitator qualification, insurance and safety-training documents are stored privately and served through signed, expiring links rather than plain URLs. No system is completely secure, and we cannot guarantee absolute security.

11. Children

Path Collective is an 18+ platform. You must be at least 18 years old to create an account, apply as a facilitator or make a booking, and we do not knowingly collect information from anyone under 18. If you believe we hold information about a minor, contact us and we will remove it.

12. Changes and governing law

We may update this policy. Where changes are significant we will tell you before they take effect, and the version date at the top of this page will change. This policy is governed by the laws of Victoria, Australia.

Last updated: 2026-10-20