Privacy

Parly is a product of Blake, operated by Bratelement. For the data in your own account and settings we are the controller. For the email and attachments that flow through a mailbox you connect, we act as a processor, handling that content on your behalf and on your instructions.

• Account and workspace data: your name, work email, role, company, and the settings you choose.
• Mailbox content: the emails, headers, and attachments in the mailboxes you connect, processed to give you assignment, notes, status, search, the audit trail, and Slack mirroring.
• Activity and audit logs: the actions taken in your workspace, kept for the audit trail and security.
• Technical data: IP address and basic device information, used to keep the service secure and working.

To provide the service you have asked for (our contract with you), to keep it secure and accountable (our legitimate interest in security and the audit trail), and, for optional features like AI assist, only on the content you submit when you trigger them.

Parly is hosted in the EU (Ireland). Data sits in a Postgres database with per-tenant row-level security and an audit log on every privileged action. Full message bodies stay in the EU. When you use Slack snippet mode, only a short preview leaves to Slack while the full body stays in Parly.

We use a small set of providers to run Parly. We keep the list current and tell customers before it changes in a way that matters.

• Cloud hosting and database, in the EU region.
• Email delivery and IMAP/SMTP relay, to send and receive your mail.
• Slack, only for the integration you choose to connect.
• A third-party AI provider for the optional AI assist, used only on content you submit, never to train their models, and never to send anything on its own.

We keep workspace data for as long as your workspace is active. When a workspace is closed, or you ask us to delete it, we remove it within a reasonable window, and backups age out on their normal rotation.

Under the GDPR you can ask to access, correct, export, restrict, or delete your personal data, and object to certain processing. Email us and we will help. You also have the right to complain to your local data protection authority.

Tenant isolation with row-level security, an audit log on privileged actions, allowlist-restricted sending, EU hosting, and encryption in transit. No system is perfect, but security is designed in, not bolted on.

Your data is processed in the EU. Where a subprocessor operates outside the EEA, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

We keep cookies to the essentials: a session for magic-link sign-in. No advertising trackers.

When this policy changes we will update the date at the top and, for material changes, let workspace admins know.