Privacy Policy
Parsebay takes your data seriously. This page explains, in plain language, what we collect, why, and how long we keep it. The legalese version lives in our Terms of Service.
What we collect
When you sign up, we collect your name, email address, and (if you upgrade) your billing details. Payments are handled by our payment processor; your card number never touches our servers.
When you upload documents, we receive whatever's in those documents. We process them to extract structured data and then store both the original file and the extracted output in encrypted form.
How long we keep things
- Documents you upload: deleted as soon as extraction finishes — usually within minutes. Anything left behind by an interrupted job is removed automatically within 3 days. We don't keep an archive of your original files.
- Extraction results: a finished job stays available for about 8 hours, then it's deleted. Download your results, or save them to your library, to keep them.
- Your library: documents you explicitly save are kept until you ask us to remove them — that's the point of the library. It holds the extracted data and your edits, not the original file. Ask us through the contact page to delete any of it, or your whole library, and we'll do it.
- Account info: kept while your account is active, and deleted within 30 days of you asking us to close it. See Your rights below.
- Billing and security records: kept for up to 600 days. Card payments can be disputed for up to 540 days after the charge, so we keep enough of a record — sign-in times, purchase events, IP addresses — to answer a dispute. We're also required to retain some billing records for tax purposes.
Why we're allowed to process your data
Under the GDPR and similar laws we rely on:
- Performance of a contract — your account, your uploads, and the extraction you asked for. Without this data we can't provide the service.
- Legal obligation — keeping tax and billing records.
- Legitimate interests — keeping the service secure, preventing abuse, and defending payment disputes. We've weighed these against your privacy and limited what we keep accordingly.
Parsebay doesn't make automated decisions that produce legal or similarly significant effects about you. The AI reads your documents; it doesn't judge you.
Where your data goes
Our servers and storage run in Google Cloud's us-central1 region in the United States, so if you're in the EEA, UK or India your data is transferred outside your country. Those transfers rely on the Standard Contractual Clauses in Google's Cloud Data Processing Addendum, which we've accepted.
Who we share with
Nobody, with these exceptions:
- Google Cloud — hosting, storage and the Vertex AI model that performs extraction, under Google's Cloud Data Processing Addendum. Google does not use Vertex AI customer data to train its models.
- Dodo Payments — our merchant of record. They handle checkout, cards and tax, and receive your name and email for billing. We never see or store your card details.
- Supabase — authentication and account records.
- Law enforcement, if legally compelled. We'd tell you first when we can.
We don't sell your data, and we don't use it to train models.
Data Processing Addendum
If you need a DPA for your own compliance, get in touch through our contact page and we'll sort one out with you.
Your rights
You can ask us to export everything we hold about you, or to delete your account and its data. Get in touch through our contact page — we handle these by hand today, and we'll confirm within 30 days as the law requires. Usually much sooner.
Deleting your account removes your profile, documents and extracted data from our systems. Billing records are kept longer where we're legally required to retain them, and payment records held by Dodo Payments are governed by their own policy.
You also have the right to object to processing, to ask us to restrict it, and to receive your data in a portable format. If you think we've handled your data badly, please tell us first — but you can complain to a data protection authority directly. In the EEA that's the regulator where you live or work; in the UK it's the Information Commissioner's Office; in India it's the Data Protection Board.
Complaints
If you're unhappy with how we've handled your data, tell us through our contact page. We'll acknowledge within 48 hours and resolve within 30 days.
You can also complain directly to a data protection authority — in the EEA, the regulator where you live or work; in the UK, the Information Commissioner's Office; in India, the Data Protection Board.
Cookies
We use essential browser storage to keep you signed in. That's it — no analytics, no ad trackers, no third-party tracking cookies. If that ever changes we'll update this page first.
Questions?
Get in touch through our contact page. A real person reads it.