Privacy policy

Pathon is the controller of the personal data described in this policy, which means we decide how and why it is used.

Controller

Pathon

Run by

Ignas Galdikas

Country

Lithuania

Email

solutions@pathon.eu

WhatsApp

+370 602 71962

When you request a demo, using the form at the bottom of the homepage or the form that opens when you choose a plan, we receive:

• your name
• your email address
• your business name, if you give it
• your website or Instagram, if you give it
• the plan you chose, if you opened the form from a plan
• the language of the page and the page you sent the form from.

When you send the form, our server also uses your IP address to stop repeated or automated submissions. The form code keeps it only in the server’s working memory, uses it for a 10‑minute window and never saves it.

When you simply browse, we collect nothing ourselves. Our hosting provider processes the technical data every website needs to deliver its pages, such as your IP address and browser type (see Who processes your data).

When you email us, we receive your email address, your message and anything you choose to include.

When you message us on WhatsApp, we receive your phone number, the name on your WhatsApp profile and your messages. WhatsApp is run by WhatsApp Ireland Limited (Meta), which handles the messages under its own terms and privacy policy.

Replying to your request

We use your details to reply, arrange a call and prepare your demo. These are steps you ask us to take before a possible contract (GDPR Article 6(1)(b)).

Following up

We may write to you again about your request. This is our legitimate interest in answering business enquiries (Article 6(1)(f)). Ask us to stop and we will.

Protecting the form

Limiting repeated submissions by IP address protects the form and our inbox from abuse. This is our legitimate interest (Article 6(1)(f)).

Running the website

Processing technical data to deliver pages securely is our legitimate interest (Article 6(1)(f)).

None of this relies on your consent, so we do not ask for it. We do not sell your data, share it for marketing or use it for advertising.

You do not have to give us your details, but without a name and an email address we cannot reply to your request.

We do not make decisions about you by automated means alone, and we do not profile you.

We use a few service providers (processors). They handle your data only on our instructions.

Some of these providers are US companies or may process data in the United States. Where that happens, the transfer is covered, where applicable, by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

We do not share your data with anyone else unless the law requires it.

If you talk to a Pathon assistant on a business’s website, Instagram or Messenger, that business decides what happens with your messages and is the controller. Pathon processes the conversation on its behalf and on its instructions. The business’s own privacy policy applies, and you can contact it to use your rights; we will help it respond.

The providers involved in running the assistant are listed on EU hosting and data location.

• Demo requests, related emails and WhatsApp messages: up to 12 months from the date you send them, or until you ask us to delete them, whichever comes first. If you become a client, we keep the contract and accounting records for as long as the law requires.
• IP addresses used to limit form submissions: used for a 10‑minute window, in the server’s working memory only.
• Hosting logs: kept for a short period by Vercel under its own retention settings.

Under the GDPR you have these rights:

Access (Art. 15)

Ask whether we hold data about you and get a copy of it.

Rectification (Art. 16)

Have inaccurate data corrected and incomplete data completed.

Erasure (Art. 17)

Have your data deleted when we no longer need it or have no legal basis to keep it.

Restriction (Art. 18)

Ask us to keep your data but stop using it while a question about it is resolved.

Portability (Art. 20)

Receive the data you gave us in a common machine-readable format, or have it sent to another organisation, where this right applies.

Objection (Art. 21)

Object to processing based on our legitimate interest, including follow-up emails. We will stop unless we have compelling legitimate grounds.

Automated decisions (Art. 22)

Not to be subject to a decision based solely on automated processing that significantly affects you. We make no such decisions.

To use any of these rights, email solutions@pathon.eu. We reply within one month. If a request is complex or we receive many, we may extend this by two more months and will tell you why within the first month. Using your rights is free; we may ask you to confirm your identity.

If you think we have handled your data wrongly, please tell us first so we can put it right. You also have the right to complain to Lithuania’s State Data Protection Inspectorate (VDAI), vdai.lrv.lt, or to the supervisory authority where you live or work.

We update this policy when the way we handle data changes. The date at the top shows the current version, and the version history below lists what changed.