Privacy Policy
Last updated: September 14, 2026
NextPath Workforce Solutions operates Pathfinder, a candidate portal that provides candidates with access to application information, interview preparation, resume assistance, work-style tools, and related recruiting resources.
This Privacy Policy explains the information Pathfinder collects, the sources of that information, how the information is used and disclosed, how information is retained and protected, and the choices and rights that may be available to you.
This Privacy Policy applies to Pathfinder and related Pathfinder services. Other NextPath websites, recruiting activities, applicant tracking systems, communications, and services may be governed by separate privacy notices or policies.
Information Pathfinder Collects
Pathfinder may collect or receive several categories of information depending on how you use the service.
Information received from NextPath
If you are a candidate working with NextPath, Pathfinder may receive information from NextPath’s applicant tracking system, Bullhorn, through automated notifications, integrations, or other authorized processes.
This information may include:
- Name
- Email address
- Telephone number
- Job title
- Employer or prospective employer
- Job location
- Application status
- Submission status
- Interview information
- Placement information
- Recruiting status
- Other information associated with your recruiting relationship that is made available to Pathfinder
Pathfinder is designed to display applicable recruiting information. Pathfinder does not use the portal to modify candidate application records in Bullhorn.
Information you provide
Depending on the features you use, you may provide information including:
- Resume content
- Employment history
- Education information
- Skills and qualifications
- Career interests
- Answers to interview practice questions
- Responses to work-style questionnaires
- Resume drafts
- Feedback requests
- Practice results
- Preferences
- Check-in information
- Other information you voluntarily submit to Pathfinder
Do not submit information through Pathfinder that you do not want processed for the feature you are using.
Information collected automatically
Pathfinder may collect technical information necessary to operate, secure, and maintain the service.
This information may include:
- IP address
- Browser type
- Device and operating system information
- Session information
- Authentication information
- Login attempts
- Verification events
- Security events
- Error and diagnostic information
- Service logs
- Information necessary to detect abuse or unauthorized access
Pathfinder does not use this technical information for behavioral advertising.
Cookies and Similar Technologies
Pathfinder uses a strictly necessary session cookie to maintain authenticated sessions.
The cookie may use security attributes including HttpOnly, Secure, and SameSite protections.
Pathfinder does not use advertising cookies.
Pathfinder does not use analytics or tracking cookies unless those technologies are added and this Privacy Policy is updated to describe the applicable collection and use.
Pathfinder may use other technologies that are technically necessary to provide security, authentication, fraud prevention, or core service functionality.
Sources of Information
Pathfinder may receive information from:
- You
- NextPath’s applicant tracking system
- NextPath personnel acting within their recruiting responsibilities
- Service providers that operate Pathfinder
- Authentication and email service providers
- Artificial intelligence service providers
- Security and infrastructure providers
- Other sources when permitted by law and necessary to provide Pathfinder
How Information Is Used
Information collected through Pathfinder may be used to:
- Provide and operate Pathfinder
- Display recruiting and application information
- Provide interview practice
- Generate interview feedback
- Provide resume assistance
- Generate resume feedback
- Generate work-style results
- Save information and preferences you choose to retain
- Authenticate users
- Maintain account sessions
- Respond to requests
- Provide customer and technical support
- Maintain service reliability
- Detect and prevent fraud, abuse, and unauthorized access
- Investigate security incidents
- Monitor and maintain system security
- Troubleshoot technical problems
- Maintain appropriate business records
- Comply with applicable legal obligations
- Respond to lawful requests
- Establish, exercise, or defend legal claims
- Protect the rights, property, safety, and security of NextPath, candidates, clients, service providers, and others
- Perform other purposes disclosed at the time information is collected or otherwise permitted by applicable law
NextPath does not sell personal information.
NextPath does not use Pathfinder personal information for behavioral advertising.
AI Processing
Certain Pathfinder features use artificial intelligence services provided by third-party technology providers.
When you use an AI-enabled Pathfinder feature, information necessary to provide that feature may be transmitted to the applicable AI service provider.
Depending on the feature, this may include:
- Resume content
- Interview answers
- Work-style questionnaire responses
- Questions or instructions submitted by you
- Other text or information necessary to generate the requested result
For example, when you request resume feedback, the resume information you submit may be transmitted to an AI service provider to generate the requested feedback.
AI service providers process information according to the services, configurations, agreements, and applicable terms under which NextPath uses those services.
Pathfinder does not use candidate submissions to train NextPath’s own artificial intelligence models.
Pathfinder does not represent that AI-generated content is accurate, complete, unbiased, or appropriate for every situation.
AI-generated information is provided as assistance and preparation. You should review AI-generated content before relying on it.
Use of Pathfinder’s AI tools does not by itself determine whether NextPath will submit, interview, hire, place, reject, or otherwise take action regarding a candidate.
Pathfinder is not intended to make final employment decisions solely through automated processing.
If an AI feature is used in connection with a process that is subject to additional legal requirements concerning automated decision-making, human review, employment decisions, or candidate evaluation, NextPath may apply additional procedures as required by applicable law.
AI Provider Data Practices
The privacy practices of an AI service provider may include processing, storage, security, and retention practices that are separate from Pathfinder.
NextPath will use applicable contractual, technical, and configuration controls intended to govern how information submitted to an AI service is processed.
Pathfinder does not make representations about a third-party provider’s practices beyond the terms and configurations that apply to the services NextPath actually uses.
If NextPath materially changes how Pathfinder information is provided to or used by an AI service provider, NextPath may update this Privacy Policy and provide additional notice or obtain consent when required by applicable law.
Third-Party Service Providers
NextPath may use service providers to operate Pathfinder and provide specific functionality.
Categories of service providers may include:
- Cloud hosting and infrastructure providers
- Database providers
- Authentication providers
- Email and communications providers
- Applicant tracking and recruiting technology providers
- Artificial intelligence providers
- Security providers
- Monitoring and logging providers
- Technical support providers
- Professional advisors and service providers
These providers may process personal information on behalf of NextPath when necessary to provide their services.
NextPath may require applicable service providers to use personal information only for authorized purposes and to maintain appropriate security and confidentiality protections.
Third-Party Disclosures
Personal information may be disclosed when necessary to:
- Provide Pathfinder
- Provide requested services
- Operate NextPath’s recruiting processes
- Process information through authorized service providers
- Protect Pathfinder and its users
- Prevent fraud and abuse
- Investigate security incidents
- Comply with applicable law
- Respond to lawful legal process
- Establish, exercise, or defend legal claims
- Complete a corporate transaction, such as a merger, acquisition, financing, restructuring, or sale of assets, subject to applicable law
NextPath does not sell personal information.
If Pathfinder’s data practices change in a manner that constitutes a sale, sharing, targeted advertising, or another regulated disclosure under applicable law, NextPath will provide the notices and choices required by that law.
Sensitive Personal Information
Pathfinder may receive or process information that could be considered sensitive personal information or sensitive data under applicable law if that information is voluntarily included in a resume, questionnaire response, interview response, or other submission.
Pathfinder does not require candidates to provide sensitive personal information unless the information is necessary for a particular feature or legally required.
Candidates should avoid voluntarily submitting sensitive personal information that is not necessary for the feature being used.
Sensitive information may be processed when necessary to provide the requested service, protect security, comply with law, or for another purpose permitted by applicable law.
Pathfinder does not use sensitive personal information for purposes inconsistent with applicable law.
Employment and Recruiting Information
Pathfinder may display information related to your recruiting relationship with NextPath.
Pathfinder does not guarantee:
- Employment
- An interview
- A job offer
- A placement
- Compensation
- Submission to a particular client
- Selection by a client
- Any other recruiting outcome
Information displayed in Pathfinder may come from NextPath’s applicant tracking system or other recruiting systems.
Pathfinder is separate from NextPath’s recruiting decision-making processes.
Information you provide to an AI feature does not automatically become part of your official application record.
Pathfinder does not represent that use of an AI feature will result in any particular employment outcome.
Data Retention
NextPath retains information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by applicable law.
Retention periods may vary depending on:
- The type of information
- The purpose for which it was collected
- Whether an account remains active
- Security requirements
- Legal requirements
- Dispute resolution
- Business recordkeeping requirements
- Backup and disaster recovery requirements
- Fraud prevention requirements
- Other legitimate operational requirements
Public AI Tools
If you use an AI-enabled Pathfinder feature without signing in, Pathfinder is designed not to associate the submitted content with a Pathfinder user account after the feature has been completed.
Temporary processing, security logs, technical records, backups, and processing by third-party service providers may occur as necessary to operate and secure the service.
Account Information
If you have a Pathfinder account, information associated with your account may be retained while the account remains active.
After account deletion or closure, certain information may remain for a limited period when necessary for:
- Security
- Fraud prevention
- Legal compliance
- Dispute resolution
- Enforcement of agreements
- Backup and disaster recovery
- Required business records
- Other purposes permitted by applicable law
Security and Authentication Records
Authentication records, session information, verification codes, login attempts, and security logs may be retained for periods appropriate to their operational and security purposes.
Some security information may expire automatically.
Applicant Tracking Records
Information maintained in Bullhorn or another NextPath recruiting system may be retained separately from Pathfinder.
Deleting information from Pathfinder does not automatically delete information maintained in Bullhorn or other NextPath systems.
Applicant tracking records may be retained according to NextPath’s recruiting, business, legal, and recordkeeping requirements.
Data Deletion
If Pathfinder provides an account deletion feature, you may use that feature to request deletion of information and content associated with your Pathfinder account.
Depending on the feature and applicable law, deletion may include:
- Saved work-style results
- Practice responses
- Practice scores
- Resume drafts
- Resume feedback
- Saved preferences
- Check-in information
- Other user-created content stored in Pathfinder
Deletion does not necessarily remove:
- Bullhorn records
- Recruiting records
- Legal records
- Security records
- Fraud-prevention records
- Information that must be retained by law
- Information required to establish, exercise, or defend legal claims
- Information contained in backups until those backups are naturally overwritten according to applicable retention procedures
When deletion is requested, NextPath will process the request according to applicable law.
Data Correction
You may request correction of inaccurate personal information maintained by Pathfinder.
Because some candidate information originates from Bullhorn or other NextPath systems, corrections to those records may need to be made through the applicable recruiting system.
If information displayed by Pathfinder is inaccurate, contact NextPath using the contact information provided below.
Privacy Rights
Depending on where you live and which privacy laws apply, you may have rights concerning your personal information.
Depending on applicable law, these rights may include:
- Right to know or access personal information
- Right to request correction
- Right to request deletion
- Right to obtain information about categories of personal information collected
- Right to obtain information about sources of personal information
- Right to obtain information about purposes for processing
- Right to obtain information about categories of third parties receiving personal information
- Right to opt out of certain sales or sharing
- Right to opt out of certain targeted advertising
- Right to limit certain uses of sensitive personal information
- Right to data portability
- Right to appeal certain privacy request decisions
- Right to non-discrimination for exercising applicable privacy rights
Not every right applies in every jurisdiction.
Certain legal exceptions and limitations may apply.
Submitting a Privacy Request
You may submit a privacy request by contacting:
NextPath may require reasonable information to verify your identity before completing certain requests.
Verification information will be used for the purpose of processing and securing the privacy request and will be handled in accordance with applicable law.
NextPath will not discriminate against you for exercising a privacy right where prohibited by applicable law.
Privacy Request Appeals
If applicable law gives you a right to appeal a decision concerning a privacy request, you may request an appeal by contacting:
The appeal request should identify the original request and explain why you believe the decision should be reconsidered.
NextPath will process appeals within the time period required by applicable law.
California Privacy Rights
California residents may have additional rights under the California Consumer Privacy Act, as amended.
These rights may include the right to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal treatment for exercising applicable rights.
California residents may submit applicable requests using the contact information provided above.
NextPath does not sell personal information.
If NextPath engages in an activity that constitutes sharing or another regulated disclosure under California law, applicable notices and opt-out mechanisms will be provided as required.
California residents may also use legally recognized privacy preference signals, such as the Global Privacy Control, where required by applicable law.
Other State Privacy Rights
Residents of states with applicable comprehensive privacy laws may have additional rights.
Where required, NextPath will provide the applicable rights, notices, opt-out mechanisms, appeal procedures, and other protections required by the laws applicable to the individual.
Global Privacy Control and Opt-Out Signals
Where required by applicable law, Pathfinder may recognize legally recognized universal opt-out mechanisms, including the Global Privacy Control.
The availability and effect of a particular signal may depend on the user’s jurisdiction and the data practice to which the signal applies.
Do Not Track
Pathfinder does not currently use browser Do Not Track signals to create advertising profiles.
Because Do Not Track technology is not uniformly implemented across browsers and websites, Pathfinder does not treat a browser’s Do Not Track signal as a universal opt-out from all data processing.
Children
Pathfinder is intended for individuals seeking employment and is not directed to children under 18.
Pathfinder does not knowingly collect personal information from children under 18 through the service.
If NextPath becomes aware that personal information from a child under 18 was collected in a manner requiring deletion under applicable law, NextPath will take appropriate steps to delete the information.
If a particular Pathfinder feature becomes available to minors or is directed toward minors, additional notices and protections may apply.
Account Security
Pathfinder uses security measures designed to protect personal information.
Depending on the service configuration, security measures may include:
- Encrypted connections
- Access controls
- Authentication protections
- One-time verification codes
- Secure session management
- HttpOnly cookies
- Secure cookies
- SameSite cookie protections
- Logging and monitoring
- Rate limiting
- Content security controls
- Cache protections
- Access restrictions
- Security testing and maintenance
No electronic transmission, storage system, or security measure can guarantee absolute security.
Pathfinder will respond to security incidents in accordance with applicable law and NextPath’s incident-response procedures.
Passwords and Authentication
Pathfinder uses the authentication method configured for the service.
If Pathfinder does not use passwords, Pathfinder does not require or store conventional account passwords.
Where one-time email verification is used, authentication codes and related security records may be temporarily stored and expire according to the service’s security configuration.
International Data Processing
Pathfinder and its service providers may process or store information in the United States or other jurisdictions where NextPath or its service providers operate.
Where applicable law requires additional protections for cross-border transfers or processing, NextPath will use applicable safeguards.
Data Breach Response
If NextPath determines that personal information has been accessed, acquired, disclosed, or otherwise compromised in a manner requiring notification under applicable law, NextPath will provide notices and take other required actions within the time and manner required by law.
Legal and Regulatory Compliance
Pathfinder may process, retain, or disclose information when necessary to comply with applicable federal, state, or local laws, regulations, court orders, subpoenas, or other lawful processes.
Information may also be retained or disclosed when reasonably necessary to establish, exercise, or defend legal rights or claims.
Corporate Transactions
If NextPath or Pathfinder is involved in a merger, acquisition, financing, reorganization, bankruptcy proceeding, sale of assets, or similar transaction, personal information may be transferred as part of that transaction where permitted by law.
Any successor or acquiring entity may become responsible for information subject to the applicable transaction and privacy requirements.
Changes to This Privacy Policy
This Privacy Policy may be updated periodically to reflect changes to Pathfinder, NextPath’s data practices, service providers, applicable law, or security practices.
The Last Updated date identifies the date of the most recent revision.
If a material change affects how personal information is collected, used, disclosed, retained, or otherwise processed, NextPath will provide notice or obtain consent when required by applicable law.
NextPath will not rely on a policy update to retroactively authorize a materially different use of previously collected information when applicable law requires additional notice or consent.
Accessibility
NextPath intends for this Privacy Policy and Pathfinder privacy information to be reasonably accessible.
If you need this policy in an alternative format or need assistance submitting a privacy request, contact:
Contact
Questions about this Privacy Policy, privacy requests, correction requests, deletion requests, or privacy rights may be directed to:
NextPath Workforce Solutions