Privacy Policy

1. Overview

Parle is a business-to-business product used by organizations and the people working within them. Much of the information we process — your conversations, uploaded files, and project data — belongs to your organization and is described further in Section 9. This policy covers both that organizational use and the information we collect directly from visitors to our marketing site.

2. Information We Collect

• Account & identity information: name, email address, organization, and role, collected at sign-up or, if your organization uses single sign-on, from the profile fields (name, email, profile photo) shared by Microsoft Entra ID or Google Workspace under the permissions your identity provider grants.
• Your Content: the conversations, prompts, files, and other material you or your teammates submit to a project.
• Billing information: processed by our payment processor, Stripe; we retain plan, invoice, and subscription status, but Stripe — not us — stores your full payment card details.
• Usage & log data: audit log entries (who did what, when), spend and token usage against budgets, and standard technical data such as IP address, browser/device type, and timestamps.
• Cookies: we use functional, HttpOnly session cookies to keep you signed in. We don't use third-party advertising or cross-site tracking cookies.

3. How We Use Information

We use the information above to:

• Operate the Service — authenticate you, route conversations to the AI providers your organization configures, enforce project and organization budgets, and provide file storage and search;
• Process billing and manage subscriptions;
• Maintain security and the audit log, detect abuse, and enforce our Terms of Service;
• Communicate with you about the Service, including service and security notices; and
• Comply with legal obligations.

4. How Information Is Shared

We don't sell personal information. We share information with:

• Infrastructure providers — the Service runs on Microsoft Azure (database, file storage, secrets management, hosting, and transactional email delivery), which processes data on our behalf to operate the Service.
• Payment processing — Stripe, to process subscription payments.
• Contact form — Formspree, which receives what you enter in our website contact form (name, work email, company, seat estimate, and message) and forwards it to us by email. We use it only to reply.
• AI model providers — see Section 5.
• Enterprise storage providers — see Section 6, where your organization has connected one.
• Legal & safety — where required by law, legal process, or to protect the rights, property, or safety of Parle, our customers, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply to information transferred.

5. AI Model Providers

When you send a message in the Service, its content is transmitted to whichever AI model provider your organization has configured for that project — currently Anthropic, OpenAI, Google, or Azure OpenAI — in order to generate a response. We only send content to a provider your organization has actually connected; we don't route your conversations to providers you haven't configured. That provider processes the content under its own privacy and data-use terms in addition to this policy, which we encourage you to review, particularly if your organization supplies its own API keys (see our Terms, Section 5).

6. Enterprise Storage (SharePoint & Google Drive)

On eligible plans, your organization can connect a Microsoft SharePoint site or Google Drive shared drive as a project's file storage instead of Parle's own managed storage. In that case, your files are stored directly in your organization's own Microsoft 365 or Google Workspace tenant, not on Parle's infrastructure. We access that storage only through the least-privilege permissions your administrator grants (for example, access limited to the specific connected site or drive) to read, write, and search files as your use of the Service requires.

7. Data Retention

We retain Your Content for as long as your organization's account is active, or until it's deleted by an authorized user. Deleted files in Parle's managed storage are held in a recycle bin for 30 days before permanent deletion. Audit log entries are retained on an append-only basis for as long as your organization's account is active, to preserve an accurate compliance record, and are not individually editable or deletable. When your organization closes its account, we delete or anonymize personal information within a reasonable period, except where retention is required for legal, security, or legitimate business purposes (such as billing records).

8. Data Security

We use industry-standard safeguards, including encryption in transit and at rest, secrets management through Azure Key Vault, managed-identity-based access to infrastructure (minimizing long-lived static credentials), role-based access control, and an append-only audit log enforced at the core platform level. No system is perfectly secure, and we can't guarantee absolute security, but we work to protect your information using these controls. See Security & Compliance for more detail.

9. Data Controller vs. Processor

For Your Content — the conversations, files, and project data your organization and its members submit — your organization is generally the data controller (or equivalent), and Parle acts as a service provider / processor, handling that content on your organization's behalf and instructions. For account-level information we collect directly to operate our own business relationship with you (such as billing contacts and marketing-site inquiries), Parle acts as the controller. If your organization requires a data processing agreement, contact legal@parlehub.com.

10. International Data Transfers

Parle is a U.S. company and our infrastructure runs on Microsoft Azure. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and other countries where our infrastructure or service providers operate, which may have different data protection laws than your own country. Where your organization connects its own enterprise storage (Section 6), that data stays in the region your organization has configured with Microsoft or Google, independent of Parle's own infrastructure.

11. Your Rights & Choices

You can access, correct, or request deletion of your account information by contacting your organization's administrator or privacy@parlehub.com. Because much of the information in the Service belongs to your organization, some requests (such as deleting Your Content) may need to go through your organization's administrator rather than directly to us.

12. California Privacy Rights

If you're a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we've collected about you, request its deletion or correction, and opt out of its "sale" or "sharing" — we don't sell or share personal information for cross-context behavioral advertising. We won't discriminate against you for exercising these rights. To make a request, contact privacy@parlehub.com.

13. Children's Privacy

The Service is a business tool intended for use by working adults and isn't directed to children. We don't knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we'll take appropriate steps to delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We'll post the updated version here with a new effective date, and for material changes we'll make reasonable efforts to notify organization administrators.

15. Contact Us

Questions about this Privacy Policy or requests regarding your information can be sent to privacy@parlehub.com.