Privacy policy

Last updated: 24 September 2026. Replace all placeholders and obtain legal review before launch.

1. Controller

[LEGAL NAME], tax ID [ID], address [ADDRESS], privacy email parlochat@proton.me.

2. Data processed

Account and billing data, security/support logs and, because Parlo is a hosted chat service, data generated by end users such as usernames, messages, files, moderation records, sessions, IP addresses and approximate IP geolocation when enabled.

3. Purposes and legal bases

Service delivery and contract/subscription management; security and abuse prevention; legal obligations; and service communications. Marketing communications require an appropriate legal basis.

4. GDPR roles

Parlo is controller for the customer account and commercial relationship. For chat content and end-user data that a customer chooses to process, the customer will normally be controller and Parlo acts as processor. A Data Processing Agreement is available.

5. Providers

The service may use OVHcloud for hosting, Paddle for payments and billing, Resend for transactional email and KLIPY for GIFs where enabled. Keep this list and any international-transfer safeguards up to date.

6. Retention

Account records are kept for the relationship and applicable legal periods. Deleted chats are retained for 30 days for operational recovery and are then automatically purged unless a legal or security reason requires otherwise.

7. Rights

Access, rectification, erasure, objection, restriction and portability requests may be sent to parlochat@proton.me. You may also complain to the competent supervisory authority.

8. Security

Parlo uses HTTPS, access controls, per-chat logical isolation, backups, security logs and anti-abuse controls. No internet-connected system can guarantee zero risk.