This Privacy Policy delineates Parlai's ("we", "us", or "our") commitment to protecting your personal information while using our language learning product that incorporates technologies like ChatGPT and Whisper from OpenAI, Google Cloud APIs, and analytical tools like Mixpanel.

1. Data Controller Information: Parlai is the Data Controller for your personal data. Should you have any inquiries or concerns about how we process your personal data, please reach out to us at: [email protected]

2. Information Collection: We collect personal information, including your messages and interaction data, to enhance your experience with our language learning product. This data is securely stored in Xata, our chosen database solution. When users chat with Parlai, we gain access to their phone number and WhatsApp name to be able to provide the service.

4. Basis for Processing: Your personal data is processed based on your consent and our legitimate interest in providing and improving language learning services.

5. Purpose of Data Use: We use your personal information to offer language learning services and for communication regarding service improvements and updates. Additionally, we utilize Google Cloud APIs for service enhancement and send usage analytics to Mixpanel to further refine our product.

6. Disclosure Practices: Your personal information is not shared with third parties, except as required by law, for necessary service provision, or for the secure operation of our services through OpenAI, Google Cloud APIs, and Mixpanel analytics.

Your information might be read by humans for the purpose of debugging errors in the application.

7. Data Retention and Storage: We retain your personal information in Xata for the duration necessary to deliver our services, comply with legal requirements, and uphold your rights to data deletion. Upon deletion, we retain data in our database for 14 days, unless the user decides to roll back the scheduled deletion. After 14 days, the data is completely deleted from our database. From that point on, Mixpanel deletions will be started and could last a few days according to their policies.

8. International Data Transfers: Our use of US-based APIs involves data storage in non-EU data centers. These transfers comply with standard contractual clauses to ensure your data's protection.

9. User Rights: You have the right to access, amend, delete, or limit the processing of your personal data, object to its processing, and withdraw your consent at any time. For data portability requests or to exercise other rights, please contact us.

10. Data Breach Response: We are committed to notifying the relevant supervisory authority and you within 72 hours of a data breach discovery, adhering to GDPR guidelines.

11. Regulatory Authority: For processing concerns, you may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).

12. Privacy Policy Amendments: We reserve the right to modify this policy. Updates will be posted on our website, and continued product use post-update constitutes acceptance of these changes.

Additional Provisions:

• Deletion Logs: Deletion logs are kept for 2 months for compliance reasons.
• Data Retention by Mixpanel: Mixpanel may retain its data longer for legal compliance reasons.

For any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at: [email protected].