Privacy policy

What Parlour stores

• Your account. Your name and email address, and the workspace you belong to. Sign in is handled by Clerk, so your password is never stored by Parlour.
• What you capture. Voice recordings, text, images and links, along with anything produced from them: transcripts, image descriptions, summaries and tags.
• Connected social accounts. If you connect one, Parlour stores the access token, the account handle and display name. Tokens are encrypted before they are written down.
• Usage records. What each piece of processing cost, so a workspace can see its own spend against its budget.

Who else processes it

Parlour uses other companies to do the work. Each one only receives what it needs for its job.

• ClerkAccounts and sign in
• NeonThe database your content is stored in
• Cloudflare R2Audio and image files
• VercelHosting
• Trigger.devRuns the processing jobs
• ElevenLabsTurns voice notes into text
• OpenRouterTidies up transcripts, reads images, suggests tags
• OpenAITurns your content into search embeddings
• Amazon SESSends the emails you have turned on

Parlour does not sell your data, does not use it for advertising, and does not share it with anyone outside this list.

Connected social accounts

When you connect an account, Parlour asks that platform for permission to post on your behalf and for enough of your profile to know which account it is. It does not ask to read your feed, your messages or your followers.

Parlour only ever publishes posts that someone in your workspace wrote and scheduled. You can disconnect an account at any time from Settings, which deletes the stored token. You can also revoke access from the platform's own settings.

A post that has already been published is a permanent record. Disconnecting an account does not remove anything that went out, and Parlour never deletes a post from the platform on your behalf.

Deleting a connected account

When you connect a Facebook Page, an Instagram account or any other platform, Parlour stores three things: the account’s name, its id on that platform, and an access token, encrypted. It does not read your posts, your followers, your comments or your messages.

There are two ways to remove that, and either is enough.

In Parlour, open Settings and press Remove next to the account. The record and its token are deleted at once, and nothing is kept in a trash.

On Facebook, open Settings and privacy, then Settings, then Apps and websites, and remove Parlour. That withdraws the permission at Meta’s end.

You can also email hello@parlour.fyi and we will do it for you and confirm when it is done, within 30 days.

One thing removing an account does not do: a post that already went out stays on the platform. Parlour keeps its own record of what it sent and never deletes a live post on your behalf.

How long it is kept

Your content stays until you delete it. Deleting an item removes its database rows and its stored files. A cancelled or failed post sits in the trash for 30 days and is then deleted for good.

If your workspace stops using Parlour, email us and we will delete its content.

Your rights

You can ask for a copy of what Parlour holds about you, ask for it to be corrected, or ask for it to be deleted. Email hello@parlour.fyi and we will reply within 30 days.

Reporting a security problem

If you have found a security issue, email security@parlour.fyi or hello@parlour.fyi. The same details are at /.well-known/security.txt. We will not take legal action against anyone who reports a genuine issue in good faith, gives us reasonable time to fix it, and does not access, change or delete other people’s data.

Changes

If this policy changes, the date at the top changes with it. If the change affects what is stored or who processes it, we will tell workspace admins by email.