Privacy & Cookie Notice

ElaronWorks sp. z o.o., ul. Kalwaryjska 69/9, 30-504 Kraków, Poland (KRS 0001207366, NIP 6793349283, REGON 54333337900000) is the controller of personal data processed in ParliAI. We have not appointed a Data Protection Officer as we do not meet the threshold requirements under Art. 37 GDPR; for privacy enquiries, contact [email protected].

We process account and authentication data (email, optional name, login metadata), subscription and billing metadata, and conversation content you submit to receive AI output.

During council setup, this browser may keep provider/model choices, council and member names, your question, and extra instructions in local storage for up to 24 hours so you can resume after signing in, including in a new tab. After sign-in, the draft is bound to your account. When you open the composer, a same-tab copy of the first question may remain for up to 30 minutes so you can review it before running anything.

At this time we do not support file uploads, long-term memory of past chats across sessions, or public sharing of decisions.

- Service delivery and account administration: Art. 6(1)(b) GDPR (contract).

- Security, fraud prevention, abuse detection, and reliability: Art. 6(1)(f) GDPR (legitimate interests).

- Billing, invoicing, and legal compliance: Art. 6(1)(c) GDPR (legal obligation).

- Product improvement and support communications: Art. 6(1)(f) GDPR.

We use subprocessors to operate the service. Current categories include:

• Cloud infrastructure & hosting (Railway / AWS, USA)
• Payment processing (Stripe, USA)
• AI model providers — currently Anthropic, OpenAI, Gemini (Google), and Grok (xAI) (USA); additional providers may be added over time
• Email delivery (Resend, USA)
• Security & CDN (Cloudflare, USA)

Prompts and related metadata are sent only to the model providers included in your council configuration. You can see and control which providers are used for each decision.

If data is transferred outside the EEA, we rely on lawful transfer mechanisms (for example, adequacy decisions or standard contractual clauses), where required.

General retention guidelines:

• Account data: retained while your account is active, then deleted within 90 days of account closure unless legal retention applies.
• Decision & conversation content: retained while your account is active; deleted with the account or upon your request.
• Billing & invoicing records: retained for the period required by tax and accounting law (currently 5 years under Polish regulations).
• Security logs (IP addresses, authentication events): up to 12 months.
• Council setup, including names, questions, and extra instructions in this browser: up to 24 hours, with cleanup on the next app visit and earlier removal on discard, logout, or successful handoff.
• First-question composer handoff: up to 30 minutes in the current tab, cleared earlier when run, dismissed, expired, or on logout.

We may retain data longer where necessary to resolve disputes, enforce agreements, or meet other legal obligations.

Browser cleanup is checked when ParliAI next runs; it is not guaranteed physical deletion at an exact clock time. On a shared browser, use Discard setup or sign out when you finish.

Subject to law, you may request access, rectification, erasure, restriction, portability, and objection to processing. You may also lodge a complaint with your supervisory authority.

We use essential technologies needed for authentication, security checks, and core functionality (for example, session/local storage for council setup and authentication, and security challenges).

We do not currently deploy optional analytics or advertising cookies in this app. If we add optional cookies in the future, we will request consent where required.

For privacy requests: [email protected].

For general legal questions: [email protected]. See also our Terms of Service.