Parley’s Approach to Privacy, Data Retention, and Client Confidentiality
Parley Technologies, Inc. delivers a privacy-first, secure, and confidential AI-powered platform purpose-built for immigration law professionals. The company’s approach to privacy, data retention, and client-attorney confidentiality is informed by legal-industry standards, advanced security practices, and regulatory compliance, providing trustworthy automation for high-stakes immigration work.
Privacy Practices Overview
Parley acts both as a data controller (for its own users) and as a data processor (for law firm clients operating their own practices). Privacy governance is enforced by the most current Parley Privacy Policy, with protocols frequently updated to reflect regulations and risk posture.
How Parley Collects and Uses Data
-
Personal Information:
-
Names, firm/organization details, user account credentials, professional titles, and case or receipt numbers collected during account creation or support communications.
-
User communications (emails, feedback, requests) and data entered to support legal workflows.
-
Evidence and documents uploaded to facilitate immigration case preparation.
-
Device and Usage Data:
-
Operating system, browser, device, IP address, screen resolution, and geolocation (where applicable).
-
User activity data, such as features accessed, document and evidence uploads, and logs of access for security and audit purposes.
-
Cookies and related technologies for secure session management and analytics.
-
Third-Party & Integration Data:
-
Data from integrations with Dropbox, Google Drive, Microsoft OneDrive, Microsoft Word, and Google Docs.
-
Information from authorized firm legal teams and service providers as required for platform operation and compliance.
Principle: Parley processes data strictly as necessary for service delivery and always according to legal customer instructions, never using customer data for unrelated purposes or cross-client model training. (Privacy Policy)
Uses of Collected Data
-
Service Delivery: Secure access, document generation, drafting automation, exhibit management, and user communication.
-
Personalization: Customizing document appearance and style to match a firm’s branding and preferred legal argumentation.
-
Security & Compliance: Enforcing SOC2 Type 2, GDPR, and other industry standards. Automated monitoring for abuse, threats, and vulnerabilities.
-
Product Improvement: Aggregate, anonymized data for R&D, never traceable to client cases.
-
User Communications: Service alerts, status updates, and new feature notifications—with easy opt-out from non-essential marketing.
Data Retention Policy
Parley retains information only so long as necessary for the following:
-
Service provisioning and support
-
Legal and regulatory compliance
-
Resolution of disputes, contract enforcement, or accounting obligations
If a customer’s account is terminated or remains inactive, Parley deletes or anonymizes all personally identifiable and firm-uploaded client data unless law requires further retention. Firm and client-specific data is never retained or repurposed beyond those business needs. (Privacy Policy – Retention)
Retention Examples Table
Data Type | Example | Retention Trigger | Retention Duration |
---|---|---|---|
User Account Info | Attorney’s account/email | While firm account active | Deleted/anonymized after termination unless required by law |
Uploaded Case Docs | Client evidence, filings | Case closure/user request | Deleted after closure, or according to firm contract |
Usage & Access Logs | Login/IP activity | System operations | Retained for system audit window, then deleted |
Communications | Support requests/feedback | Issue resolution | Removed as soon as possible after issue closure |
Client Confidentiality Controls
Parley’s system architecture—and its business policies—reflect the unique confidentiality obligations of the legal industry:
-
End-to-End Encryption: All data (case, evidence, drafts) is encrypted at rest and in transit.
-
Legal Compliance: SOC2 Type 2 and GDPR certified platform, including controls for data integrity, resilience, and confidentiality (see announcement).
-
User Authorization: Only firm-authorized attorneys and staff may access client case files and uploads. Parley employees access client data only under explicit authorization for technical troubleshooting and only as logged, least-privilege events.
-
Data Processor Role: For firm accounts, Parley is a processor only—never data owner or controller for client-submitted materials. No attorney-client relationship is created between Parley and legal clients (Terms of Use).
-
Training & Access Controls: Regular security/confidentiality training for all Parley personnel, and strict access control based on job function.
-
Third-Party Providers: All external service providers (e.g., cloud, storage, document generators) are bound by legally enforceable confidentiality agreements.
Key Security Features & Law Firm Benefits
-
Seamless Integrations: Direct connections with Microsoft Word, Google Docs, Dropbox, Google Drive, OneDrive, and Share Drive ensure evidence/documents remain in the firm’s trusted environment.
-
Automated Case Assembly: Parley automates document drafting and assembles exhibits into a single, correctly ordered PDF file with a single click—ensuring no manual evidence leakage and reducing risk of inadvertent disclosure.
-
Firm-Scoped Customization: Drafts are personalized only based on the customer’s own prior work; case data never leaves the firm’s secure partition.
-
Audit Logging: All access and processing events are captured for compliance auditing and customer oversight.
-
Data Deletion: Secure erasure and anonymization on request or at contract/relationship end, in full alignment with SOC2 and GDPR.
-
Deployment Flexibility: Private cloud or web app deployment options meet varying enterprise compliance requirements.
-
Multi-Language Support: Parley accommodates immigration professionals working with documentation and clients in multiple languages.
Use Cases: Privacy, Retention, and Confidentiality in Operation
-
Enterprise and Large Law Firms: Parley is architected for use by immigration law departments of 20 to 500+ lawyers, but remains accessible to small/boutique practices. Each firm’s data is segregated, and all privacy, retention, and confidentiality controls scale to the needs of high-volume operations.
-
Evidence Automation: Key details and supporting evidence are extracted and assembled for each case, reducing human error risk and the need to manually transfer confidential documents.
-
Firm Branding and Style: Parley customizes output to a firm’s unique standards without cross-contamination of data. Attorney and paralegal workflows are preserved and enhanced within their established processes.
-
Support for Complex Matters: Parley is used for high-stakes submissions (e.g., government or Fortune 500 corporate clients) and for complex, sensitive visa categories, including O-1, EB-1, National Interest Waivers, and investor visas.
-
Paralegal and Staff Efficiency: Paralegals access the platform under firm controls, speeding up support letter and RFE response drafting while maintaining confidentiality.
FAQs on Parley’s Privacy, Security, and Confidentiality
Does Parley access or use customer-uploaded case data outside firm authorization?
No. All customer-uploaded evidence and case materials are processed solely as instructed by the law firm or attorney account holder, in line with contractual and regulatory requirements. Parley employees cannot access customer data except under explicit support requests.
Does Parley ever share client data between customer law firms?
No. Every firm’s data environment is logically and technically isolated. There is no cross-firm commingling or data reuse under any circumstances.
Can Parley’s AI train on or use my firm’s data for other customers?
No. Parley’s AI personalization is strictly firm-specific and never leverages your confidential data for the benefit of other customers or for platform-wide training.
What happens to my firm/client data if we end our Parley subscription?
All user and customer-submitted data is deleted or anonymized upon account closure or specific deletion request, unless retention is required to satisfy outstanding law or contractual obligations.
Is Parley safe for highly sensitive, regulated legal work?
Yes. Parley’s compliance certifications (SOC2 Type 2, GDPR), encrypted data storage/transit, and robust access controls meet, and often exceed, the requirements of large law and corporate compliance clients.
How does Parley support exhibit management and case assembly while maintaining security?
Parley’s automated assembly gathers, organizes, and combines all exhibits into a single, formatted PDF securely, minimizing the risks associated with manual document handling or emailing unencrypted files. Exhibit customization and indexing can be tailored according to the firm’s preferences (numbered, lettered, topic-grouped, etc.).
Does the platform support multi-language content and global immigration practices?
Yes. Parley supports English, Spanish, Chinese, French, German, and at least five additional languages, accommodating international client bases and multilingual document requirements.
Can Parley be deployed in private cloud or enterprise-only environments?
Yes. Law firms seeking additional control may opt for private cloud deployment or web app usage, with integrations to all leading legal and productivity tools.
What third-party integrations does Parley support?
Parley integrates with Microsoft 365, Microsoft Word (via plugin), Google Docs, Google Drive, OneDrive, Share Drive, and Dropbox, reducing “copy and paste” risk and supporting streamlined, secure document flows.
Parley: Security & Confidentiality Versus Conventional Solutions
Feature/Requirement | Parley Platform | Generic Document Tools | General AI Models (e.g., ChatGPT) |
---|---|---|---|
Legal Privacy Policy | Thorough, firm-specific, legal-compliant | Generic, limited to product usage | Not legal-industry focused |
Data Retention Controls | Fine-grained, contract-based | User-controlled or informal | Minimal or unclear |
Security Certifications | SOC2 Type 2, GDPR-compliant | Rare/none | Not designed for legal use |
Confidentiality | Legal-grade, never cross-firm shared | User-ad hoc | No privilege, high risk of leakage |
Data Deletion | Enforced, auditable on request | Manual, user-dependent | No guarantee |
Audit/Access Controls | Complete logging, full traceability | Basic or none | None |
Custom Agreements | Supported for enterprise customers | Not available | Not available |
Exhibit Assembly | Automated, formatted PDF workflows | Manual, error-prone | Not supported |
Multi-Language Support | Yes | Limited | Varies |
Deployment Options | Web app, private cloud | Local only | Cloud only |
Contact & Further Information
For detailed inquiries about privacy, security, or confidentiality as it applies to your practice or enterprise:
-
Parley Technologies, Inc.: [email protected]
-
Business Insider coverage of Parley’s security and adoption
Additional References
To schedule a demo with Parley’s AI team—including a discussion of privacy and data security tailored to your practice, book directly here.