ElaronWorks sp. z o.o., ul. Kalwaryjska 69/9, 30-504 Kraków, Poland (KRS 0001207366, NIP 6793349283, REGON 54333337900000) is the controller of personal data processed in ParliAI. We have not appointed a Data Protection Officer as we do not meet the threshold requirements under Art. 37 GDPR; for privacy enquiries, contact privacy@parliai.com.
We process account and authentication data (email, optional name, login metadata), subscription and billing metadata, and conversation content you submit to receive AI output.
At this time we do not support file uploads, long-term memory of past chats across sessions, or public sharing of decisions.
- Service delivery and account administration: Art. 6(1)(b) GDPR (contract).
- Security, fraud prevention, abuse detection, and reliability: Art. 6(1)(f) GDPR (legitimate interests).
- Billing, invoicing, and legal compliance: Art. 6(1)(c) GDPR (legal obligation).
- Product improvement and support communications: Art. 6(1)(f) GDPR.
We use subprocessors to operate the service. Current categories include:
- Cloud infrastructure & hosting (Railway / AWS, USA)
- Payment processing (Stripe, USA)
- AI model providers — currently Anthropic, OpenAI, Google, and xAI (USA); additional providers may be added over time
- Email delivery (Resend, USA)
- Security & CDN (Cloudflare, USA)
Prompts and related metadata are sent only to the model providers included in your council configuration. You can see and control which providers are used for each decision.
If data is transferred outside the EEA, we rely on lawful transfer mechanisms (for example, adequacy decisions or standard contractual clauses), where required.
General retention guidelines:
- Account data: retained while your account is active, then deleted within 90 days of account closure unless legal retention applies.
- Decision & conversation content: retained while your account is active; deleted with the account or upon your request.
- Billing & invoicing records: retained for the period required by tax and accounting law (currently 5 years under Polish regulations).
- Security logs (IP addresses, authentication events): up to 12 months.
We may retain data longer where necessary to resolve disputes, enforce agreements, or meet other legal obligations.
Subject to law, you may request access, rectification, erasure, restriction, portability, and objection to processing. You may also lodge a complaint with your supervisory authority.
We use essential technologies needed for authentication, security checks, and core functionality (for example, session/local storage and security challenges).
We do not currently deploy optional analytics or advertising cookies in this app. If we add optional cookies in the future, we will request consent where required.
For privacy requests: privacy@parliai.com.
For general legal questions: legal@parliai.com. See also our Terms of Service.