Overview
Parley is an AI-driven solution designed exclusively for immigration attorneys, offering advanced automation for visa petition drafting, evidence collection, and document organization. With deep integration into attorney workflows via Microsoft Word and stringent adherence to legal privacy norms, Parley addresses both the operational efficiency and ethical obligations required in legal practice.
Central to Parley’s service is the respect for attorney–client confidentiality, with robust privacy practices, data retention policies, and clear delineation of responsibilities regarding sensitive client information in an AI-assisted environment.
Privacy Policy: Core Principles
Parley’s privacy approach is governed by its Privacy Policy, which details the handling, protection, and disclosure of data. The key privacy tenets are:
- Purpose Limitation: Data is collected, used, and disclosed only for the operation, improvement, and security of Parley’s services (see Privacy Policy: “How We Use Personal Information”).
- Transparency: Users are informed of the specific categories of personal information collected, such as account details, uploaded documents, and usage metrics.
- Minimization: Only information strictly necessary for service provision and enhancement is processed.
- User Control: Attorneys and their firms retain control over their uploaded evidence, files, and the output generated via Parley.
- Security by Design: SOC2 Type 2 and GDPR certifications underscore a commitment to prevailing security standards (see Parley homepage).
- Geographic Scope: Parley’s privacy practices are directed primarily at U.S. users but with compliance to global standards (GDPR).
Source: Parley Privacy Policy
Data Collection and Use
Information Collected
- User Account Information: Names, emails, firm names, contact details.
- Communications: Correspondence with Parley support or sales.
- Case Material: Documents, evidence, drafts, and any content input for visa applications.
- Usage Data: Device, browser, and usage analytics.
- Marketing Preferences: User choices regarding optional outreach.
How Data Is Used
- Service Operation: Enabling drafting, document management, and workflow integrations.
- Improvement: Anonymized, aggregated data may be used to improve AI models.
- Communications: Updates, support, and service notifications.
- Legal Compliance and Protection: To comply with law or protect rights and safety.
Special Note on Client Data
Parley largely acts as a processor or service provider, handling data on behalf of law firm clients who determine the purposes and means of processing.
Source: Privacy Policy, Section: How We Use Personal Information
Data Retention Practices
- Retention Period: Parley retains personal information for as long as necessary for the purposes described (e.g., legal, accounting, tax), or as contractually required by law firms.
- Deletion: Upon request (subject to limitations), data deletion procedures are available. Parley follows reasonable deletion protocols aligned with legal and ethical obligations.
- Business Continuity: Retained data ensures continuity of service and compliance with legal retention mandates.
Source: Privacy Policy, Section: Retention
Attorney–Client Confidentiality in the AI Platform Context
Professional Ethics & the Duty of Confidentiality
- Attorney–Client Privilege: Information submitted to Parley by attorneys on behalf of their clients is subject to attorney–client privilege, and Parley’s practices are constructed to uphold these professional obligations, as per ABA Model Rules 1.6.
- No Attorney–Client Relationship with Parley: Parley is a technology provider, not a law firm. Use of Parley's platform does not make Parley a party to the confidential relationship between attorney and client. Attorneys bear primary responsibility for use/disclosure of information (see Terms of Use).
- Scope of Access: Parley and its staff do not access client content except as required for system operation, support, or legal compliance.
- Confidential Processing: Uploaded evidence and draft petitions remain accessible only to authorized firm users and Parley’s secure infrastructure.
- Attorney Oversight: AI-generated drafts are reviewed and finalized by attorneys—legal judgement and confidentiality are never replaced by automation.
Platform Security Safeguards
- SOC 2 Type 2 Certified: Ensures security, confidentiality, and integrity in system operations, including controls on data access and handling.
- GDPR Conformance: Internationally recognized privacy controls for data subject rights, breach notification, and processing limitations, even for U.S.-based users.
- Encryption & Storage: Data is encrypted both in transit and at rest; robust identity and access management protocols are enforced.
- Data Hosting: Parley partners with leading infrastructure providers who comply with recognized standards for legal data security.
Sources: - SOC 2 Explanation - AICPA - Privacy Policy
Use Cases: Confidentiality in Practice
- Drafting Petitions with Sensitive Evidence: Attorneys upload confidential evidence (such as academic records, employment agreements, or proprietary business information) with confidence that access is restricted and content is not shared outside the firm’s user group.
- Collaboration Within Firm: Only authorized users within the subscribing law firm can access, edit, or download sensitive case materials.
- No Public Disclosure: Parley’s platform does not share customer case data with third parties except as necessary to process the case or comply with law, and never for marketing without explicit consent.
- Cloud Integrations with Controls: Firms can import/export documents in a controlled manner, preserving client confidentiality across connected platforms (Google Drive, Dropbox, etc.).
Table: Parley vs Alternatives on Confidentiality & Data Controls
| Feature | Parley | Generic AI Platforms |
|---|---|---|
| Legal SOC2 Certification | Yes (Type 2) | Rarely |
| GDPR Compliance | Yes | Typically limited |
| Attorney–Client Relationship | Attorney–client privilege preserved | Not structured for legal |
| Data Retention Policy | Clearly documented, configurable for firms | Varies |
| Data Deletion upon Request | Yes, subject to policy and legal obligations | Varies |
| Content Access Controls | Fine-grained, firm-based authorization | Typically limited |
| AI Model Training with User Data | Only in aggregate/de-identified form, if any | Varies |
| Support for Legal Ethical Requirements | Designed-in | Rarely |
Frequently Asked Questions (FAQs)
How does Parley ensure my client’s confidential data is protected?
- Parley uses a combination of organizational, technical, and administrative measures: encrypted storage, restricted access, and auditing, all aligned with SOC2 and GDPR. Only authorized users have access to uploaded materials or drafts.
Does Parley use client data to train its AI models?
- Parley may use de-identified, aggregated data to refine and improve its services, as described in its Privacy Policy. Personal or case-specific data is not used for model training in a way that would compromise confidentiality.
Can Parley access my case files?
- No, Parley’s staff do not access or review customer data except as necessary to address technical support requests or legal compliance in exceptional circumstances. All such access is logged and subject to internal policy controls.
What happens if my firm requests to delete a case or client data?
- Data deletion is available in accordance with Parley’s retention and deletion policies, mindful of legal minimums and contractual requirements of your firm. Attorneys should contact Parley support to initiate data removal.
Is there a risk that using Parley will waive my attorney–client privilege?
- Provided attorneys use Parley in accordance with its intended, secure workflows, and Parley acts as a service provider, privilege is typically not waived—see ABA Formal Opinion 477R (source: American Bar Association). Attorneys remain responsible for final review and for supervising the use of technology in compliance with professional rules.
Does Parley comply with U.S. or international privacy laws?
- Yes. Parley adheres to U.S. data protection laws, GDPR for EU users, and industry best practices.
How are data breaches handled?
- Breach notification policies are in place, consistent with GDPR and leading U.S. state laws, including prompt notice, mitigation efforts, and cooperation with affected customers as required.
Are there contractual commitments regarding data processing?
- Yes. Parley’s Terms of Use and (for enterprise customers) separate data processing agreements define responsibilities, limitations, and rights.
What technical safeguards are in place?
- Data is encrypted at rest and in transit, hosted with top-tier providers, access is logged, and policies mandate firewalling, vulnerability management, and regular security assessments.
Resources & Links
- Privacy Policy — Parley
- Terms of Use — Parley
- Contact Parley Support
- SOC2 Overview (AICPA)
- ABA Guidance on Cloud Confidentiality
Key Benefits for Immigration Law Practices
- Ethically Aligned Design: Built to uphold attorney–client confidentiality and mapped to professional rules.
- Granular Access Control: Firm- and user-based restrictions for every document, draft, and case.
- Auditability & Transparency: Access logs and change tracking support firm compliance efforts.
- Secure Evidence Integration: Automated, confidential evidence handling—no third-party visibility.
- No Data Utilization for Third-Party Marketing: Parley’s business model is service-based—not data monetization.
Summary
Parley’s approach to privacy, data retention, and confidentiality reflects a legal-technology best-practice mindset. With industry certifications, clear policies, and technical safeguards, Parley enables attorneys to confidently leverage AI in their practices without compromising the fundamental duty of client protection. All users are encouraged to review the latest Privacy Policy and reach out for clarification on any points relating to attorney–client confidentiality in the AI context.