PARIE ("we," "us," "our") is the data controller for personal information collected through parie.io. For enterprise deployments, we act as a data processor on behalf of your organization (which is the controller). Contact: hello@parie.io.
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the service — render portals, run AI calls, store documents | Contract |
| Authenticate users — sign-in, session management, password reset | Contract |
| Bill subscriptions — track usage against plan quotas | Contract |
| Detect abuse — brute-force lockout, rate-limiting, fraud prevention | Legitimate interest |
| Improve the product — aggregate, anonymized usage analytics only | Legitimate interest |
| Send transactional email — welcome, password reset, training reminders, billing receipts | Contract |
| Comply with law — audit-log retention, lawful disclosure orders | Legal obligation |
We do NOT:
We use a small set of vetted sub-processors to deliver the service. Each is bound by a Data Processing Agreement (DPA). Full list with purposes and locations: parie.io/subprocessors.
Summary:
We do not transfer personal data to non-vetted third parties without your explicit instruction (e.g. a Slack integration you enable).
Customer data is stored in Google Cloud regions in the United States (us-east1 for Storage, us-central1 for Firestore and Cloud Functions). EU and APAC region options are on the roadmap for Enterprise customers with data-residency requirements. For international transfers from the EU/UK, we rely on Standard Contractual Clauses (SCCs).
| Data type | Retention |
|---|---|
| Account data | Lifetime of subscription + 30 days after termination |
| Customer-uploaded documents | Until you delete them, or 30 days after subscription ends |
| Training records, quiz scores, certificates | 7 years (regulatory retention; can be shortened by request) |
| Audit logs | 7 years (immutable, append-only; SOC 2 / SOX requirement) |
| IP addresses | 30 days (abuse prevention) |
| Backups | 30 days rolling, then permanently deleted |
Wherever you live, you can:
To exercise any right, email hello@parie.io. We respond within 30 days.
EU residents: You also have the right to lodge a complaint with your local Data Protection Authority. We don't currently have an EU representative — Enterprise customers can request appointment of one as part of their MSA.
California residents (CCPA): We do not "sell" personal information as defined by CCPA. You have the rights to know, delete, and not be discriminated against for exercising your rights. To submit a request: hello@parie.io.
We follow industry-standard security practices, including:
Full security architecture: parie.io/trust. We will notify affected customers within 72 hours of becoming aware of a personal data breach involving their data.
PARIE uses only essential cookies required for sign-in sessions and security. We do not use advertising or analytics cookies. No cookie banner is shown because no consent is required for strictly necessary cookies under GDPR/ePrivacy.
PARIE is not directed at children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be announced by email at least 30 days before they take effect. Past versions are available on request.
Privacy questions, requests, or concerns: hello@parie.io.
For Data Processing Agreements (DPA) or Business Associate Agreements (BAA — HIPAA): include "DPA" or "BAA" in your subject line.