Personal Data Use Notice

Last updated: October 7, 2026

This notice complements our Privacy Policy and explains, in more detail, which categories of personal data the Parselex platform processes, how automated analysis works, and the controls available to you.

1. Categories of personal data, by source

• Messaging sources (Telegram, WhatsApp): message content, participants, timestamps and attachments of chats or channels you direct the platform to ingest.
• Email: headers, body text and attachments of mailboxes you connect.
• Cloud drives (e.g. Google Drive): files and file metadata you authorise us to read.
• Phone records: call logs or exported records you provide.
• Uploads, API/webhook, court feeds, SFTP, CRM: documents and associated metadata submitted for analysis.

Process each source only when you connect it or submit content, and limit processing to what is necessary for the requested analysis.

2. Automated AI processing

Documents pass through a seven-stage pipeline: ingestion, OCR, classification, validation, retrieval-augmented (RAG) analysis, AI translation and report generation. Outputs are produced by automated systems and are assistive: they do not constitute legal advice and do not produce legal effects concerning you. We recommend review of any output by a qualified professional before reliance.

3. Corpus isolation and the knowledge base

Ingested content is indexed into a retrieval knowledge base (vector store) that is isolated per client account. Your corpus is not combined with other clients’ corpora and is not used to train AI models.

4. Third-party AI and OCR providers

To perform analysis, content may be sent to large-language-model and OCR providers acting as our processors. We configure such services so that submitted content is not retained for their own purposes where the provider supports it. A current list of providers is available on request via contact@parselex.app.

5. Retention, minimisation and deletion

We keep source documents and derived artefacts only as long as needed for your active matters or as required by law. You can disconnect sources at any time; disconnecting stops further ingestion. You may request export or deletion of your corpus and personal data at any time via contact@parselex.app; verified requests are honoured within statutory timeframes.

6. Security measures

Encryption in transit (TLS), authentication on all application surfaces, per-account corpus isolation, role-based access control, and bearer-token gating of service APIs.

7. Questions

Anything about this notice or how your personal data is used: contact@parselex.app.