Privacy Policy

Last updated: July 11, 2026. Parola (“Parola”, “we”, “us”) operates parola.pro — a platform where freelancers and agencies find local businesses that need a website, generate one with AI, and publish it — and parola.site, where those generated sites are hosted. This policy explains what we collect, why, who touches it, and what you can do about it. We've written it in plain English because we expect you to actually read it. Questions: hello@parola.pro.

The short version

  • We collect what we need to run the product — no more.
  • We never sell your personal data. No advertising trackers, ever.
  • Card numbers go to Stripe and never touch our servers.
  • Site briefs are processed by an AI provider (Anthropic) to generate your sites; API data is not used to train their models.
  • Booking messages submitted on published sites are delivered to the site's owner — we're the courier, not the recipient.
  • Delete your account and we delete your data.

1. Information we collect

  • Account details: name, email address, password (stored as a hash by our authentication provider — we can't read it), and optional profile info such as your business name, niche, and territory.
  • Content you create: site briefs, generated and imported websites, edits, saved lead lists and notes, pitch drafts, and invoices you record in the Finance tab.
  • Billing records: your plan, credit balance, and a ledger of credit activity. Payments are processed by Stripe — we receive confirmation of what you bought, your Stripe customer reference, and the last state of your subscription, but never your card number.
  • Usage & device data: pages visited (via cookieless, aggregate analytics), feature usage such as credits spent, and standard server logs (IP address, browser type) kept for security and abuse prevention.
  • Support conversations: emails you send to hello@parola.pro.

2. Visitors of published sites & booking submissions

Sites published on parola.site belong to our users (or the clients they sell them to). When a visitor submits a booking or contact form on one of those sites, the submission — typically a name, phone number, email, and message — is stored by us and delivered to the email address the site owner designated. For that data, the site owner is the data controller and Parola is a processor: we store and forward it on the owner's behalf and don't use it for anything else. Visitors who want a submission corrected or deleted should contact the business the site belongs to, or email us and we'll help. We also count page views on published sites in aggregate (a number, not a profile).

3. AI processing & imagery

Site generation and chat edits are performed with AI models from Anthropic. The brief you write (and the site being edited) is sent to Anthropic's API to produce the result. Under Anthropic's API terms, this data is not used to train their models. Optional photography on generated sites is sourced from Pexels. Don't put sensitive personal information in a brief — it becomes part of a website by design.

4. Lead data

The Lead Finder surfaces business contact information (business name, category, address, business phone, website status) sourced from licensed, lawfully available business-data providers. It is professional contact data about businesses, not consumer profiles. We honor removal requests from listed businesses — see our Data Removal page, and our Acceptable Use & Lead Data policy for the rules users must follow when contacting leads.

5. How we use information

  • To provide the service — the contract we have with you.
  • To bill plans and credit packs and prevent payment fraud.
  • To send transactional email: signup confirmation, receipts, booking alerts, and important service notices. Marketing email only with your consent, and every one has an unsubscribe link.
  • To keep the platform safe: rate limiting, abuse prevention (including one-welcome-grant-per-person checks), and debugging.
  • To understand aggregate usage and improve the product.

6. Who we share it with

We never sell personal data. We share it only with the service providers that run the platform, each bound by their own privacy commitments: Supabase (authentication & database), Vercel (hosting & cookieless analytics), Stripe (payments), Anthropic (AI generation), Resend (transactional email), Pexels (stock imagery), Outscraper (business-lead data), and Google Workspace (our support mailbox). Beyond that, we disclose data only if the law requires it, or as part of a merger or acquisition (in which case this policy still applies to your data).

7. Cookies & tracking

Parola uses no advertising or cross-site tracking cookies. Signing in stores an essential authentication token in your browser so you stay logged in, and we measure page visits with cookieless, privacy-friendly analytics that don't identify you or follow you across the web. Because essential storage doesn't require consent banners under GDPR/ePrivacy guidance, we don't show one.

8. Retention & deletion

We keep your data while your account is active. Delete your account and we delete or anonymize your personal data within 30 days, except records we must keep longer (e.g. tax and payment records) and residual copies in encrypted backups that expire on schedule. Published sites are taken down when you delete them or your account. Booking submissions are deleted with the site they belong to.

9. Security

Data is encrypted in transit (TLS) and at rest. Database access is governed by row-level security so accounts can only read their own data; credit balances can only change through controlled server-side functions; payment fulfillment happens exclusively via signed Stripe webhooks. No system is perfectly secure — if we learn of a breach affecting your data, we'll notify you without undue delay.

10. Your rights

Depending on where you live (GDPR, UK GDPR, CCPA/CPRA and similar), you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Most of this is self-serve in Settings; for anything else email hello@parola.pro and we'll respond within 30 days. We don't discriminate against you for exercising these rights, and we don't “sell” or “share” personal information as those terms are defined in the CCPA.

11. Children

Parola is a business tool and is not directed to children. You must be at least 18 to create an account. We don't knowingly collect data from children; if you believe a child has provided us data, contact us and we'll delete it.

12. International users

Parola is operated from the United States and data is processed on infrastructure in the US. By using the service you understand your data is transferred to and processed in the US, with the safeguards described in this policy.

13. Changes to this policy

If we make material changes, we'll update the date at the top and notify you in the app or by email before the changes take effect. Continued use after that means you accept the updated policy.

Contact

Privacy questions, rights requests, or complaints: hello@parola.pro.