Privacy Policy

Our Principle

Parlei is built on a simple principle: your data is yours. Your Parlei learns from your interactions to represent you better — but that intelligence belongs to you, not us. You can see it, export it, or delete it at any time.

We don't sell your data. We don't use it to train AI models. We don't aggregate it across users. We don't profile people who aren't on the platform. When you leave, everything is destroyed.

1. What We Collect

1.1 Account Data

When you sign up via Google or LinkedIn OAuth, we receive your name, email address, and profile photo. For email/password sign-up, we collect the email and password you provide.

1.2 Profile Data

Everything you add to your Parlei: display name, bio, slug, section items, links, greeting, conversation style, what you're looking for, what you can offer, avatar, and theme preference.

1.3 Conversation Data

Messages exchanged between visitors and your Parlei, fit evaluations, conversation highlights, and visitor-provided contact information (name, email, phone, location, best time to reach).

1.4 What Parlei knows

The patterns and preferences your Parlei learns over time — which matches you pursue, your collaboration style, your communication rhythm, topics you engage with most. This is the living model that makes your Parlei more accurate over time.

1.5 Match & Interaction Data

Match history, handshake records, fit scores, and trust tier progression.

1.6 Venture & Agent Data

Product profiles, operational metrics, and agent decision logs for the ventures you run on Parlei.

1.7 Payment Data

Stripe handles all payment processing. We store your Stripe customer ID and subscription status. We never see or store credit card numbers.

1.8 Usage Data

Page views and conversation counts via Vercel Analytics. No tracking cookies. No cross-site tracking. No advertising networks.

1.9 Wishlist Submissions

Anyone — with or without a Parlei account — can submit a brand name and optional question to the public wishlist at parlei.to/wishlist. We store: the brand name, the optional question text, an IP-hash for throttling (we never store raw IPs), and a timestamp. We never store names, emails, or other identifying information about wishlist submitters.

Submissions enter a moderation queue and may be approved for display in the public bubble visualization. Approved submissions are aggregated by category and shown as anonymous totals — never attributed to individual submitters.

We may use aggregate wishlist data to reach out to brands consumers are asking about. The brand sees the aggregate signal (counts and categories), never individual submissions.

1.10 Connected Accounts

If you connect an email account (Google, Microsoft, or any account over IMAP/SMTP), a Google Drive, or GitHub, we store which account it is, its settings (such as how many messages Parlei may send a day and your signature), and where the last look stopped. The credential itself (a token or, for IMAP/SMTP, the password you typed) is stored encrypted in a vault, is never shown to anyone, is used only by our servers, and is deleted the moment you disconnect. Nothing is read or sent until you click “Let Parlei use it”.

1.11 Mail Parlei Reads and Sends

For a connected email account, Parlei reads new messages that arrive from the moment you connect it. It never reads older mail. It keeps each message it looked at, how it sorted it (a person writing to you, a reply, a notification, a bounce, or not for Parlei), and any reply it sent. Replies go out only from your own address, only inside the rules you set on “What Parlei may do”, and never above the daily limit you set for that account.

1.12 Files Parlei Reads

For Google Drive and GitHub, Parlei reads only the folders or repositories you pick, and re-reads a file only when it changed. What it reads becomes part of “What Parlei knows”, private to you until you say otherwise.

1.13 People You Bring

If you give Parlei a list of people to reach out to, we store their name, email address, organisation, and any note you add, marked as brought by you and with your confirmation that they know you or contacted you. We also keep a list of addresses Parlei must not write to: anyone who asked it to stop, and any address that bounced.

1.14 Quotes and Payments

When Parlei sends a quote on your behalf, we store the person's email, the offering, the listed price, when it expires, and whether and when it was accepted and paid. Payment is taken on your own Stripe account, not ours: you are the merchant, the money goes to you, and Stripe gives the person their receipt. We store the Stripe session and payment ids, never card details.

1.15 The Record

Everything Parlei does or holds for you is written to a record: when, on which channel, what it did, why, what it relied on, which of your rules it checked and how that came out, and what you decided if it asked you. The record cannot be edited after the fact; it is deleted with your account.

2. How We Use Your Data

• To power your Parlei — matching, conversations, graduated trust
• To improve your Parlei's accuracy over time via what Parlei knows (only your own)
• To let Parlei act for you and your ventures, inside the rules you set
• To send email notifications you've opted into
• To show you what Parlei did and what needs you
• To process payments and manage subscriptions
• To read and answer mail on the accounts you connected, inside the rules you set
• To send quotes on your behalf and record when they are accepted and paid
• To keep the record of what Parlei did so you can read it or ask about it

3. How We Don't Use Your Data

• Never sold to third parties
• Never used to train AI models (Anthropic's API does not train on API inputs)
• Never aggregated across users for insights or analytics
• Never shared with advertisers
• Never retained after account deletion
• Never used to build profiles of people who don't have accounts. Where you turn Find on, Parlei keeps one record per person it found, from public information only, for the reasons in section 8
• Wishlist submissions are never attributed to individual submitters when shared with brands or displayed publicly
• Mail, files, and contacts from connected accounts are never used for advertising, never sold, and never used to train models
• Parlei never writes to anyone on its own. It writes first only to people you brought, or to people it found when you turned Find on, and only after you approved the exact note
• If you turn on your newsletter, people can ask for your notes on your page. Parlei keeps their address, the name they gave, and when they asked, confirmed, and stopped. Nobody is added who did not ask and confirm from their own inbox; every issue waits for your approval, goes from your own address, and has a one-click way to stop

4. What Parlei Knows

Parlei knows what you paste or upload, what it reads from the folders and repositories you pick, your answers to questions visitors asked, and readings it makes from all of that. Every item carries where it came from, when, whether it is something you stated or Parlei's reading of it, and who may hear it.

Parlei can know far more than it may say: a reading is never less private than what it came from, and rewording private material never makes it public. You can see, change the privacy of, or remove any item on “What Parlei knows”. Deleting your account deletes all of it.

5. Parlei-to-Parlei Exchange

When you connect your Parlei to another user's Parlei (a “handshake”), both parties' Parleis exchange context to produce a mutual brief. The brief is delivered to both parties via email and stored in each party's dashboard. Information shared during a handshake includes profile content you've made visible — your display name, bio, the sections you've published, what you're looking for, and what you can offer — along with a synthesized read of fit, intent, and timing.

Handshake briefs do not include material marked private, conversation history with other users, or any data marked private. Each user controls what their profile makes visible.

6. Third-Party Services

We share data with these services solely to operate Parlei:

• Anthropic (Claude API) — Messages, mail, and the material you gave Parlei are sent to generate replies. Anthropic does not train on API inputs.
• Stripe — Your Parlei subscription; and, if you connect your own Stripe account, taking payment on quotes directly into that account (Stripe Connect)
• Resend — Transactional email delivery
• Supabase — Database hosting with encryption at rest (Americas region)
• Vercel — Application hosting
• Google (Gmail, Drive) — Sign-in, and, only if you connect them, reading new mail and sending replies, and reading the folders you pick
• Microsoft (Outlook, Microsoft 365) — Only if you connect it: reading new mail and sending replies
• GitHub — Only if you connect it: reading the repositories you pick
• LinkedIn — Sign-in only

7. Connected Accounts and the Rules We Follow

When you connect an account, you decide what Parlei may do with it, and you can pause or disconnect it at any time from “Connected accounts”. Disconnecting deletes the stored credential immediately.

Google. Parlei's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain words: we use Gmail and Drive data only to provide the features you turned on (reading new mail that arrives, sending replies you allowed, reading the folders you picked); we do not use it for advertising; we do not sell it; we do not let people read it except with your permission, for security, or where the law requires; and we do not use it to train models.

Microsoft and GitHub. The same commitments apply to mail read through Microsoft and to repositories read through GitHub: only for the features you turned on, never for advertising, never sold, never used to train models, deleted when you disconnect.

Any email account over IMAP/SMTP. The password you type is tested once, stored encrypted, never shown again, and deleted when you disconnect. Use an app password where your provider offers one.

Assistants you connect. You can let an assistant you use, such as Meta's Muse, reach your Parlei with a token you create on Settings. It can do only what you ticked there: see your Parlei, decide items for you, answer questions and add to what Parlei knows, or ask for drafts. Everything it does goes through the rules you set and is written on your record with its name. What it reads from Parlei is handled by that assistant's provider under their own policy. Revoking the token on Settings stops it at once.

People you bring. Parlei writes to them only if you confirmed they know you or contacted you, only inside the “reach out first” rule you set, at most three times, and it stops the moment they reply, ask it to stop, or the address bounces. Anyone can stop Parlei by replying with a request to stop; we keep that request so it is never overridden.

8. Finding People (Find)

What it is. Find is off by default. You turn it on per thing Parlei speaks for. Once a week, or when you ask, Parlei looks for people whose stated needs match your work and holds each one for you. It never contacts anyone from a search on its own.

What is searched. Public web pages, through the search provider configured for Parlei, and public Bluesky posts. Nothing behind a login, and nothing from your connected accounts.

What we store about a person who has no Parlei account. Their public name, handle and organisation as the page shows them; the address of what they wrote and a short excerpt of it; a public email address only when the page itself shows one; a country guess from what the page says; Parlei's reason for the match, in its own words; and what you decided. We keep this so the same person is never surfaced twice inside ninety days, and so every note carries its reason.

How long. While your account is active, or until you remove the thing Parlei speaks for. A person you never said hello to is never contacted; their record is kept only to prevent a repeat.

What the person receives. Only a note you approved, sent from your own address or your own account, never from Parlei's. Every note says it came through Parlei, links to your page with a line explaining why they are seeing it, and gives one click to never hear from any Parlei user again. That request is honoured across every Parlei account. Where the law where they are requires consent for a first email, Parlei does not email; it points you to where they posted instead.

The search provider. Your queries and their results pass through the provider configured for Parlei (for example Exa or Brave) under that provider's own policy. Parlei sends it no data about you or about the people you know.

Their rights. Anyone can ask us to remove what Parlei holds about them by writing to the address in section 14. We do, and their address stays on the opt-out list so no Parlei user writes to them again.

9. Data Sovereignty Rights

You have the following rights, available at any time from your dashboard:

• View — See everything we store about you, including what Parlei knows
• Export — Download a complete copy of your data in open JSON format
• Delete — Permanently destroy all data within 24 hours (see section 10)
• Consent — Revoke consent for specific data processing at any time
• Portability — Your exported data is in open formats (JSON) you can use elsewhere
• Disconnect — Remove any connected account at any time; the credential is deleted immediately
• Stop outreach — Set “reach out to someone first” to Never, or remove people from your list, at any time

10. Retention & Deletion

When you delete your account, we delete everything. Not archive. Not anonymize. Delete. Within 24 hours of confirmation, your profile, conversations, what Parlei knows, match history, and all associated data are permanently destroyed.

A 24-hour grace period lets you cancel in case of mistake. After that window, deletion executes: Supabase data is removed via cascading deletes, Stripe subscriptions are cancelled, storage files (avatars, exports) are removed, and a confirmation email is sent. Then we have nothing. That's how it should be.

• Conversations: retained for 30 days by default (configurable per page)
• Account data: retained while active; destroyed within 24h of deletion
• What Parlei knows: destroyed completely on account deletion
• Consent log: retained alongside account data; destroyed on deletion
• Mail Parlei read or sent: retained while the account is connected; deleted at once when you disconnect, and with your account
• Contacts, quotes, and payments: retained while your account is active; deleted with your account
• The record: retained while your account is active; deleted with your account
• Connected-account credentials: deleted the moment you disconnect
• People who asked for your notes: retained while your account is active; one who stops keeps only the record that they stopped; deleted with your account or the represented thing
• People Parlei found for you: retained while your account is active; deleted with your account or the represented thing; the opt-out list outlives both
• The free preview on Build your Parlei: the text read from the links you gave, or the text you pasted, is kept for 7 days and then deleted, unless you create a Parlei from it, in which case it becomes what your Parlei knows and is removed from the preview

11. Cookies

• Session cookies for authentication (essential, cannot be disabled)
• No tracking cookies
• No advertising cookies
• No third-party analytics cookies beyond Vercel Analytics

12. Children

Parlei is not intended for users under 13 (or 16 in EU/UK). We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email and require explicit re-consent. Continued use of Parlei after changes constitutes acceptance of non-material updates.

14. Contact

Questions about this policy? Email privacy@parlei.to or use our contact form.