Privacy Policy

1. What we collect and why

When you visit the website

Our host Vercel receives the technical details every browser sends: IP address, the page you asked for, date and time, the page you came from, and your browser and operating system. Vercel also tells us your approximate location (country, region, city) from your IP address. We use this to deliver the site, keep it secure, stop abuse, fix errors and decide whether to show you the cookie banner. We do not use it to identify you.

Images come from Sanity’s image network (cdn.sanity.io) and videos from DigitalOcean Spaces, so those services also see your IP address when your browser loads them. Our fonts are hosted on our own site.

When you send a form

Our contact and enquiry forms ask for your name, work email, company stage, budget range, the services you are interested in and your message. The AI adoption guide form asks for your name and email. We store what you send in our database (Supabase) and email it to our team (via Resend) so we can reply.

With each form we also store how you found us and some technical details: the campaign tags in the link you clicked (utm_source, utm_medium, utm_campaign, utm_term, utm_content), a Google Ads click ID (gclid), the site you came from, your first and latest visit source, the first page you saw, how many visits and pages you viewed, the page you sent the form from, your device, operating system, browser, IP address, approximate location (country, region, city and rough coordinates from your IP address) and how long the form took to fill in.

We check submissions for spam automatically (for example: sent within 3 seconds, a throwaway email domain, many links, or known spam words). Suspected spam is kept for review but not emailed to us. A hidden “honeypot” field catches bots; anything that fills it is thrown away.

If you are in the EU, EEA, UK or Switzerland and have not accepted analytics, the “how you found us” details are kept only in memory for your current visit and are never written to your device.

When you book a call

Our booking calendar is provided by Cal.com (on the contact page, the floating “Intro call” button on blog posts and in the chat). What you enter there (name, email, notes, time zone) goes to Cal.com and to us. We also pass Cal.com the same “how you found us” details as our forms, and the page you booked from. Cal.com’s own privacy policy applies to its service.

When you use Ask Parallel (chat)

The chat answers questions using content from this website. Your messages in the conversation are sent to Anthropic, which runs the Claude AI model that writes the answers. Anthropic processes them on our behalf under its commercial terms.

For each question we log: the question, a random chat ID stored in your browser (key “ask-parallel-session-id”), the page you asked from, your IP address and browser, and simple labels (for example whether we found an answer or whether you were offered a call). We use this to stop abuse, to see which questions we can’t answer yet and to improve the site. Please don’t share sensitive or confidential information in the chat.

When you apply for a job

Job listings and applications on our careers page are run by Recruitee. The list of open roles is loaded through a small Cloudflare service. When you apply, your application (CV, contact details, answers) goes to Recruitee and to our hiring team, and Recruitee’s privacy policy applies.

Analytics and advertising

On www.parallelhq.com we use Google Tag Manager to load these tools:

• Analytics: Google Analytics 4, Microsoft Clarity and FullStory. They show us which pages people visit, how they move through them, where they get stuck, and (Clarity and FullStory) record clicks, scrolling and mouse movement as session replays and heatmaps. Text you type into forms is not meant to be captured.

• Advertising: Google Ads (conversion tracking and remarketing), LinkedIn Insight Tag and Meta Pixel. They tell us which ads led to a visit or enquiry and let us show our ads to people who visited the site.

These tools set their own cookies, see your IP address and device details, and may combine this with what they already know about you under their own policies. Today all of them load together through one tag manager, so we only load it when both analytics and advertising are allowed. See section 4 for how to control this.

Embedded content

Some pages show videos from Vimeo and YouTube and a post from X (formerly Twitter). When those load, the provider sees your IP address and may set its own cookies, under its own privacy policy. Links to other websites (for example Kit, which sends our design sprint PDF) take you to services we don’t control.

2. Our legal reasons (EU, EEA, UK)

• Consent: analytics and advertising cookies and similar storage, and the “how you found us” details saved on your device. You can withdraw at any time.

• Steps before a contract / our legitimate interest in replying: handling your enquiries, bookings and job applications.

• Legitimate interests: running and securing the site, stopping spam and abuse, server logs, chat logs, and keeping a record of your cookie choice. We have balanced these against your rights; you can object (section 6).

• Legal obligation: keeping records the law requires and answering lawful requests from authorities.

In India we process your personal data for the purpose you gave it to us for, or with your consent, under the Digital Personal Data Protection Act, 2023.

3. Who we share data with

We don’t sell personal data for money. We share it only with the services that run this website for us, each bound by its own terms and data protection commitments:

We may also disclose data if the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of our business (you would be told).

Under some US state laws, letting advertising tools like Google Ads, LinkedIn and Meta collect data on our site can count as “sharing” for targeted advertising. You can opt out of that at any time (section 4).

4. Cookies and your choices

Cookies are small files a website stores in your browser. We also use your browser’s local storage, which works in a similar way. Here is how your choice works:

• EU, EEA, UK and Switzerland: you see a banner. Nothing for analytics or advertising runs until you click “Accept” or turn categories on in “Preferences”. “Reject” is as easy as “Accept”.

• Everywhere else: analytics and advertising are on by default and you can turn them off with “Privacy choices” in the footer.

• Global Privacy Control: if your browser sends this signal, advertising is switched off automatically (and because the tools load together, so is the tag manager).

You can change your mind any time with “Privacy choices” in the footer of every page. When you turn something off we delete the tracking cookies and stored “how you found us” details we can reach, and reload the page without those tools. We keep an anonymous record of each choice (a random ID, your country, your choices, whether your browser sent Global Privacy Control, the banner version, the page and the time, but not your IP address) to show we asked properly.

Providers can change their cookie names and lifetimes; the durations above are their usual maximums. You can also block or delete cookies in your browser settings.

5. How long we keep data

• Form submissions and notification emails: 24 months after our last contact with you, unless you become a client (then for as long as the law requires us to keep business records).

• Suspected spam: 90 days.

• Chat logs: 12 months.

• Cookie-choice records: 3 years, so we can show what you chose.

• Job applications: 12 months after the role is filled, unless you agree we can keep them longer.

• Server logs: kept by Vercel for a short period, normally days, then deleted.

Analytics and advertising providers keep data according to their own settings and policies.

6. Your rights

Depending on where you live, you can:

• ask for a copy of your personal data, and get it in a portable format

• ask us to correct or complete it

• ask us to delete it

• object to or ask us to restrict how we use it, including for direct marketing

• withdraw consent at any time (this doesn’t affect what happened before)

• opt out of the sale or sharing of personal data for targeted advertising (California and other US states)

• in India, nominate someone to use your rights if you die or can’t act yourself, and have your grievance answered

Write to hello@parallelhq.com to use any of these. We may need to confirm who you are, and you can use an authorised agent. We reply within one month (45 days for US state requests, and within the time set by the Indian rules), and we won’t treat you differently for using your rights.

If you are unhappy with our answer you can complain to your data protection authority: in the EU your local authority, in the UK the Information Commissioner’s Office, in Switzerland the FDPIC, and in India the Data Protection Board of India (after first contacting our Grievance Officer).

Grievance Officer (India)

For questions or complaints about your personal data under Indian law, contact our Grievance Officer at hello@parallelhq.com with the subject line “Grievance”. We will acknowledge your complaint and resolve it within the time required by law.

7. International transfers

We are based in India and the USA, and most of our service providers are in the USA. Your data may therefore be processed outside your country. When we transfer personal data from the EU, EEA, UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (and the UK and Swiss equivalents), or on the provider’s certification under the EU–US Data Privacy Framework where it has one.

8. Security

We use HTTPS everywhere, keep our database closed to the public (only our server can read or write it), limit staff access with passwords, and rate-limit our forms and chat. No system is perfectly secure, so we can’t promise that data will never be exposed; if a breach affects you, we will tell you and the authorities where the law requires.

9. Children

This website is for businesses and adults. We don’t knowingly collect personal data from anyone under 18. If you think a child has sent us personal data, write to us and we will delete it.

10. Changes to this policy

We will update this policy when the website or the law changes. The date at the top shows the latest version. If a change affects how we use data you already gave us, we will tell you, and we will ask for your cookie choice again where needed.

11. Contact

Questions about this policy or your data: hello@parallelhq.com. You can also read our Terms of Use.