Privacy Policy

Effective October 2, 2026. Applies to www.outcomespath.com, app.outcomespath.com, and every organization portal on a subdomain of outcomespath.com.

Short version: the organization that enrolled you controls your information and decides who on its staff can see it. OutcomesPath stores it securely, never sells it, never uses it for advertising, and shows it only to the people your organization authorized.

1. Who we are and the roles involved

OutcomesPath is case management software used by workforce boards, reentry programs, schools, nonprofits, colleges, unions, and employers ("organizations") to serve the people they enroll ("participants"). OutcomesPath is operated by [LEGAL ENTITY NAME], [ADDRESS], [STATE] ("OutcomesPath", "we"). For participant information, the organization is the data controller and OutcomesPath is its processor: the organization decides what to collect and why, and we store and process it on the organization's instructions.

2. Information we collect

Account information. Email address, name, role, and sign-in records for staff, participants, and partner contacts.
Case information entered by organizations. Participant names and contact details, program status, cohort, target trade, intake details, referrals, notes written by staff, outcomes such as credentials, employment, wages, and retention, and any other details an organization chooses to record.
Content you create. Messages between participants, staff, and partners; resumes, cover letters, and practice interview sessions created in the tools; tasks completed.
Activity records. Logins, logouts, messages sent, changes to records, exports, and tools opened, with the date, time, the person who acted, and the browser used. Organizations keep these records for accountability and funder reporting.
Technical information. Browser type, device type, and the pages loaded, through standard server logs and the hosting provider.

We do not collect payment card numbers in the application; payments are handled by Stripe. We do not use advertising trackers.

3. How information is used

To run the service for the organization: show each person the information they are authorized to see, deliver messages, track tasks and referrals, produce reports the organization needs for its funders, and keep an activity log. To keep the service secure and working. To respond to support requests. We do not sell information, use it for advertising, or use participant information to train artificial intelligence models.

4. Who can see what

Organization staff see participant information according to the permissions an administrator sets. An administrator can limit a caseworker to the participants assigned to them.
Participants see their own case: status, tasks, referrals, messages, and record.
Partner and employer contacts see only the referrals sent to them, the name and contact details of the referred participant, and the message thread for that referral.
OutcomesPath staff access information only to provide support, fix problems, or as required by law, and that access is logged.

5. Service providers

We use these providers to run the service, each under its own privacy terms: Supabase (database, authentication, and file storage, hosted in the United States), Netlify (web hosting), Google Fonts and public code libraries (page display), Stripe (payments). When a participant opens a tool, the tool loads from AdultSkilledTrades.com or YouthSkilledTrades.com, which we also operate, using the same database. Some free-site pages embed video from YouTube or audio from Spotify; those load only when a person chooses to play them.

6. Minors

Organizations serving youth may enter information about participants under 18. The organization is responsible for obtaining any consent required by law and its funders, including parental consent where applicable, and for complying with FERPA, state student privacy laws, and WIOA confidentiality requirements. We do not knowingly create accounts for children under 13. If you believe a child under 13 has an account, contact us and we will remove it.

7. Security

Information is encrypted in transit and at rest. Access is controlled by row-level rules in the database that enforce organization boundaries and roles. Staff permissions, logins, and record changes are logged. We review access and keep software current. No system is perfectly secure; if we learn of a breach affecting your information, we will notify the affected organization without undue delay so it can meet its own notice obligations.

8. Retention and deletion

Information is kept for as long as the organization keeps its account, plus the period the organization or its funders require. Organizations can delete participant records they no longer need; activity records are retained for accountability and are deleted when the organization's account is closed, unless law or a funder requires longer. Participants may ask their organization to correct or delete their information, and may contact us if the organization does not respond.

9. Your choices and rights

You may ask to see, correct, export, or delete your information. Participants should ask their organization first, since the organization controls the record; we will assist. Where state privacy laws give you additional rights, we honor them. We do not respond to browser "do not track" signals because we do not track people across other sites.

10. Changes and contact

If we change this policy in a meaningful way, we will post the new version here with a new effective date and notify organizations by email. Questions: info@outcomespath.com.