1. Who we are
Parlo is operated by Maria Meeting (the “Company”, “we”, or “us”). You can reach us at contact@tryparlo.com for any privacy question or to exercise the rights described below.
2. What we collect
Account information
- Phone number — used as your account identifier and to verify you via SMS one-time code.
- Display name — what you tell us to call you.
- Voice security PIN — stored as a one-way hash; we never see the cleartext value.
Call data
- Voice audio — captured while a call is active and streamed to our backend so the AI can understand and respond.
- Transcripts and call summaries — generated by the AI to recap what happened on each call you place.
- Call metadata— duration, time, and the outcome of each call (e.g. booking confirmed, message left).
Device + delivery data
- Push-notification token (FCM / APNs) — required so we can ring your device when an AI agent calls you back with a result. Stored only as the opaque vendor token; we never read other notifications.
- Approximate location— only when you opt in for a specific call (e.g. to find a restaurant near you). Never sent off-call.
- Device language and OS version — used to format dates, route to the right voice model, and rule out version-specific bugs.
3. What we do not collect
- We do not access your device contacts.
- We do not access your photos, files, or microphone outside of an active call.
- We do not collect advertising IDs.
- We do not sell or rent your data to anyone.
- We do not use your voice audio to train third-party models.
4. How we use it
- To place calls on your behalf and surface their results.
- To authenticate you (phone-number verification + voice PIN).
- To deliver push notifications when an AI-initiated call is ready for you.
- To investigate abuse, fraud, and policy violations.
- To meet legal obligations (e.g. valid law-enforcement requests).
5. Subprocessors
We share data with a small set of vendors strictly to operate the service. Each is bound by a written processing agreement.
- Google Firebase — authentication, push delivery (FCM), and crash reporting.
- Amazon Web Services — application hosting and encrypted storage of call data (region: us-east-1, with the photo binaries bucket in us-east-2).
- Twilio — placing the outbound calls and the telephony media bridge.
- OpenAI — speech-to-text, language understanding, and text-to-speech for the voice agent. Audio is processed on a zero-retention basis.
6. How long we keep it
- Call recordings: up to 30 days after the call ends, then deleted unless you saved a transcript.
- Account profile: retained while your account exists; deleted within 30 days of account deletion.
- Push-notification tokens: rotated on every app launch; stale tokens are purged within 60 days.
- Aggregated, non-identifying analytics: kept indefinitely.
7. Your rights
Regardless of where you live, you can:
- Request deletion of your account and everything associated with it.
- Request deletion of specific data (e.g. a single call recording) without closing your account.
- Export a copy of your data — email contact@tryparlo.com with the phone number on your account.
- Object to processing or withdraw consent for optional features at any time inside the app.
EU/UK residents additionally have the rights described in GDPR Articles 15–22; California residents have the rights described in the CCPA/CPRA. Use the same email above to exercise any of them. We respond within 30 days.
8. Security
Data in transit is encrypted with TLS 1.2+. Data at rest is encrypted with AES-256. Access to production systems is limited to a small number of engineers and audited via CloudTrail. We’ll notify affected users without undue delay if a breach materially affects their data.
9. Children
Parlo is not directed to children under 13 (or 16 in jurisdictions that require it). We do not knowingly collect data from children. If you believe a child has signed up, contact us and we will delete the account.
10. International transfers
Our servers are located in the United States. If you use Parlo from outside the US, your data is transferred there under Standard Contractual Clauses or an equivalent legal mechanism.
11. Changes to this policy
We’ll post any material change to this page with a new effective date and notify active users in-app. Continued use after the effective date counts as acceptance of the updated policy.
12. Contact
Questions, complaints, or requests: contact@tryparlo.com.