Privacy Policy
Effective July 14, 2026
This Privacy Policy explains how ParleHub LLC, a North Carolina limited liability company ("ParleHub," "we," "us"), collects, uses, and shares information in connection with the ParleHub shared AI workspace, including app.parlehub.com and this marketing site (together, the "Service"). It's meant to be read alongside our Terms of Service.
1. Overview
ParleHub is a business-to-business product used by organizations and the people working within them. Much of the information we process — your conversations, uploaded files, and project data — belongs to your organization and is described further in Section 9. This policy covers both that organizational use and the information we collect directly from visitors to our marketing site.
2. Information We Collect
- Account & identity information: name, email address, organization, and role, collected at sign-up or, if your organization uses single sign-on, from the profile fields (name, email, profile photo) shared by Microsoft Entra ID or Google Workspace under the permissions your identity provider grants.
- Your Content: the conversations, prompts, files, and other material you or your teammates submit to a project.
- Billing information: processed by our payment processor, Stripe; we retain plan, invoice, and subscription status, but Stripe — not us — stores your full payment card details.
- Usage & log data: audit log entries (who did what, when), spend and token usage against budgets, and standard technical data such as IP address, browser/device type, and timestamps.
- Cookies: we use functional, HttpOnly session cookies to keep you signed in. We don't use third-party advertising or cross-site tracking cookies.
3. How We Use Information
We use the information above to:
- Operate the Service — authenticate you, route conversations to the AI providers your organization configures, enforce project and organization budgets, and provide file storage and search;
- Process billing and manage subscriptions;
- Maintain security and the audit log, detect abuse, and enforce our Terms of Service;
- Communicate with you about the Service, including service and security notices; and
- Comply with legal obligations.
5. AI Model Providers
When you send a message in the Service, its content is transmitted to whichever AI model provider your organization has configured for that project — currently Anthropic, OpenAI, Google, or Azure OpenAI — in order to generate a response. We only send content to a provider your organization has actually connected; we don't route your conversations to providers you haven't configured. That provider processes the content under its own privacy and data-use terms in addition to this policy, which we encourage you to review, particularly if your organization supplies its own API keys (see our Terms, Section 5).
6. Enterprise Storage (SharePoint & Google Drive)
On eligible plans, your organization can connect a Microsoft SharePoint site or Google Drive shared drive as a project's file storage instead of ParleHub's own managed storage. In that case, your files are stored directly in your organization's own Microsoft 365 or Google Workspace tenant, not on ParleHub's infrastructure. We access that storage only through the least-privilege permissions your administrator grants (for example, access limited to the specific connected site or drive) to read, write, and search files as your use of the Service requires.
7. Data Retention
We retain Your Content for as long as your organization's account is active, or until it's deleted by an authorized user. Deleted files in ParleHub's managed storage are held in a recycle bin for 30 days before permanent deletion. Audit log entries are retained on an append-only basis for as long as your organization's account is active, to preserve an accurate compliance record, and are not individually editable or deletable. When your organization closes its account, we delete or anonymize personal information within a reasonable period, except where retention is required for legal, security, or legitimate business purposes (such as billing records).
8. Data Security
We use industry-standard safeguards, including encryption in transit and at rest, secrets management through Azure Key Vault, managed-identity-based access to infrastructure (minimizing long-lived static credentials), role-based access control, and an append-only audit log enforced at the database level. No system is perfectly secure, and we can't guarantee absolute security, but we work to protect your information using these controls. See Security & Compliance for more detail.
9. Data Controller vs. Processor
For Your Content — the conversations, files, and project data your organization and its members submit — your organization is generally the data controller (or equivalent), and ParleHub acts as a service provider / processor, handling that content on your organization's behalf and instructions. For account-level information we collect directly to operate our own business relationship with you (such as billing contacts and marketing-site inquiries), ParleHub acts as the controller. If your organization requires a data processing agreement, contact legal@parlehub.com.
10. International Data Transfers
ParleHub is a U.S. company and our infrastructure runs on Microsoft Azure. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and other countries where our infrastructure or service providers operate, which may have different data protection laws than your own country. Where your organization connects its own enterprise storage (Section 6), that data stays in the region your organization has configured with Microsoft or Google, independent of ParleHub's own infrastructure.
11. Your Rights & Choices
You can access, correct, or request deletion of your account information by contacting your organization's administrator or privacy@parlehub.com. Because much of the information in the Service belongs to your organization, some requests (such as deleting Your Content) may need to go through your organization's administrator rather than directly to us.
12. California Privacy Rights
If you're a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we've collected about you, request its deletion or correction, and opt out of its "sale" or "sharing" — we don't sell or share personal information for cross-context behavioral advertising. We won't discriminate against you for exercising these rights. To make a request, contact privacy@parlehub.com.
13. Children's Privacy
The Service is a business tool intended for use by working adults and isn't directed to children. We don't knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we'll take appropriate steps to delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We'll post the updated version here with a new effective date, and for material changes we'll make reasonable efforts to notify organization administrators.
15. Contact Us
Questions about this Privacy Policy or requests regarding your information can be sent to privacy@parlehub.com.