Privacy Policy

Our Principle

Parlei is built on a simple principle: your data is yours. Your proxy learns from your interactions to represent you better — but that intelligence belongs to you, not us. You can see it, export it, or delete it at any time.

We don't sell your data. We don't use it to train AI models. We don't aggregate it across users. We don't profile people who aren't on the platform. When you leave, everything is destroyed.

1. What We Collect

1.1 Account Data

When you sign up via Google or LinkedIn OAuth, we receive your name, email address, and profile photo. For email/password sign-up, we collect the email and password you provide.

1.2 Profile Data

Everything you add to your Parlei: display name, bio, slug, section items, links, greeting, conversation style, what you're looking for, what you can offer, avatar, and theme preference.

1.3 Conversation Data

Messages exchanged between visitors and your proxy, fit evaluations, conversation highlights, and visitor-provided contact information (name, email, phone, location, best time to reach).

1.4 Proxy Memory

The patterns and preferences your proxy learns over time — which matches you pursue, your collaboration style, your communication rhythm, topics you engage with most. This is the living model that makes your proxy more accurate over time.

1.5 Match & Interaction Data

Match history, handshake records, fit scores, and trust tier progression.

1.6 Venture & Agent Data

Product profiles, operational metrics, and agent decision logs for the ventures you run on Parlei.

1.7 Payment Data

Stripe handles all payment processing. We store your Stripe customer ID and subscription status. We never see or store credit card numbers.

1.8 Usage Data

Page views and conversation counts via Vercel Analytics. No tracking cookies. No cross-site tracking. No advertising networks.

1.9 Wishlist Submissions

Anyone — with or without a Parlei account — can submit a brand name and optional question to the public wishlist at parlei.to/wishlist. We store: the brand name, the optional question text, an IP-hash for throttling (we never store raw IPs), and a timestamp. We never store names, emails, or other identifying information about wishlist submitters.

Submissions enter a moderation queue and may be approved for display in the public bubble visualization. Approved submissions are aggregated by category and shown as anonymous totals — never attributed to individual submitters.

We may use aggregate wishlist data to reach out to brands consumers are asking about. The brand sees the aggregate signal (counts and categories), never individual submissions.

2. How We Use Your Data

• To power your proxy — matching, conversations, graduated trust
• To improve your proxy's accuracy over time via proxy memory (only your own)
• To support agent-assisted operations on your ventures
• To send email notifications you've opted into
• To display your analytics dashboard
• To process payments and manage subscriptions

3. How We Don't Use Your Data

• Never sold to third parties
• Never used to train AI models (Anthropic's API does not train on API inputs)
• Never aggregated across users for insights or analytics
• Never shared with advertisers
• Never retained after account deletion
• Never used to build profiles for people who don't have accounts
• Wishlist submissions are never attributed to individual submitters when shared with brands or displayed publicly

4. Your Proxy's Memory

Your proxy learns from every interaction — which matches you pursue, what collaboration styles work for you, how you build, what your ventures need. This intelligence makes your proxy more accurate over time.

But it belongs to you. You can view everything your proxy has learned in Settings → Data & Privacy → Proxy Memory. You can clear specific memories or all of them. If you delete your account, your proxy's memory is destroyed completely.

You can also turn off proxy learning entirely via consent revocation. Your proxy will still represent you based on your profile, but it won't accumulate new memory.

5. Proxy-to-Proxy Exchange

When you connect your Parlei to another user's Parlei (a “handshake”), both parties' proxies exchange context to produce a mutual brief. The brief is delivered to both parties via email and stored in each party's dashboard. Information shared during a handshake includes profile content you've made visible — your display name, bio, the sections you've published, what you're looking for, and what you can offer — along with a synthesized read of fit, intent, and timing.

Handshake briefs do not include private proxy memory, conversation history with other users, or any data marked private. Each user controls what their profile makes visible.

6. Third-Party Services

We share data with these services solely to operate Parlei:

• Anthropic (Claude API) — Conversation messages are sent to generate responses. Anthropic does not train on API inputs.
• Stripe — Payment processing
• Resend — Transactional email delivery
• Supabase — Database hosting with encryption at rest (Americas region)
• Vercel — Application hosting
• Google / LinkedIn — OAuth authentication only

7. Data Sovereignty Rights

You have the following rights, available at any time from your dashboard:

• View — See everything we store about you, including proxy memory
• Export — Download a complete copy of your data in open JSON format
• Delete — Permanently destroy all data within 24 hours (see section 8)
• Consent — Revoke consent for specific data processing at any time
• Portability — Your exported data is in open formats (JSON) you can use elsewhere

8. Retention & Deletion

When you delete your account, we delete everything. Not archive. Not anonymize. Delete. Within 24 hours of confirmation, your profile, conversations, proxy memory, match history, and all associated data are permanently destroyed.

A 24-hour grace period lets you cancel in case of mistake. After that window, deletion executes: Supabase data is removed via cascading deletes, Stripe subscriptions are cancelled, storage files (avatars, exports) are removed, and a confirmation email is sent. Then we have nothing. That's how it should be.

• Conversations: retained for 30 days by default (configurable per page)
• Account data: retained while active; destroyed within 24h of deletion
• Proxy memory: destroyed completely on account deletion
• Consent log: retained alongside account data; destroyed on deletion

9. Cookies

• Session cookies for authentication (essential, cannot be disabled)
• No tracking cookies
• No advertising cookies
• No third-party analytics cookies beyond Vercel Analytics

10. Children

Parlei is not intended for users under 13 (or 16 in EU/UK). We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email and require explicit re-consent. Continued use of Parlei after changes constitutes acceptance of non-material updates.

12. Contact

Questions about this policy? Email privacy@parlei.to or use our contact form.