Privacy and Data Retention: How We Handle Client Information
Parley's Approach to Privacy, Data Retention, and Client Confidentiality
Parley Technologies, Inc. delivers a privacy-first, secure, and confidential AI legal agent for legal teams across practice areas, including immigration, personal injury, real estate, trusts & estates, family law, corporate/in-house contracts and litigation. Parley holds a team's files, communications (email, meetings) and deadlines in one platform. The company's approach to privacy, data retention, and client-attorney confidentiality is informed by legal-industry standards, advanced security practices, and regulatory compliance, providing trustworthy automation for high-stakes legal work.
Privacy Practices Overview
Parley acts both as a data controller (for its own users) and as a data processor (for law firm clients operating their own practices). Privacy governance is enforced by the most current Parley Privacy Policy, with protocols frequently updated to reflect regulations and risk posture.
How Parley Collects and Uses Data
-
Personal Information:
-
Names, firm/organization details, user account credentials, professional titles, and case or receipt numbers collected during account creation or support communications.
-
User communications (emails, feedback, requests) and data entered to support legal workflows.
-
Evidence and documents uploaded to facilitate case preparation.
-
Connected Email, Calendar and Meetings:
-
When a firm connects Google or Microsoft email and calendar, or uses the meeting notetaker, Parley processes those messages, events and meeting notes to build and update the firm's case records (Projects, Accounts and Contacts).
-
Device and Usage Data:
-
Operating system, browser, device, IP address, screen resolution, and geolocation (where applicable).
-
User activity data, such as features accessed, document and evidence uploads, and logs of access for security and audit purposes.
-
Cookies and related technologies for secure session management and analytics.
-
Third-Party & Integration Data:
-
Data from integrations with Microsoft Word and Outlook, Google Drive, SharePoint, Dropbox, Box, Clio, and Google Docs.
-
Information from authorized firm legal teams and service providers as required for platform operation and compliance.
Principle: Parley processes data strictly as necessary for service delivery and always according to legal customer instructions, never using customer data for unrelated purposes or AI model training. Parley operates with zero data retention with AI model providers. (Privacy Policy)
Uses of Collected Data
-
Service Delivery: Secure access, document generation, drafting automation, form filling, exhibit management, case record updates, and user communication.
-
Personalization: Customizing document appearance and style to match a firm's branding and preferred legal argumentation, through firm-specific Skills.
-
Security & Compliance: Enforcing SOC2 Type 2, GDPR, and other industry standards. Automated monitoring for abuse, threats, and vulnerabilities.
-
Product Improvement: Aggregate, anonymized data for R&D, never traceable to client cases.
-
User Communications: Service alerts, status updates, and new feature notifications—with easy opt-out from non-essential marketing.
Data Retention Policy
Parley retains information only so long as necessary for the following:
-
Service provisioning and support
-
Legal and regulatory compliance
-
Resolution of disputes, contract enforcement, or accounting obligations
If a customer's account is terminated or remains inactive, Parley deletes or anonymizes all personally identifiable and firm-uploaded client data unless law requires further retention. Firm and client-specific data is never retained or repurposed beyond those business needs. (Privacy Policy – Retention)
Retention Examples Table
| Data Type | Example | Retention Trigger | Retention Duration |
|---|---|---|---|
| User Account Info | Attorney's account/email | While firm account active | Deleted/anonymized after termination unless required by law |
| Uploaded Case Docs | Client evidence, filings | Case closure/user request | Deleted after closure, or according to firm contract |
| Case Records | Projects, Accounts, Contacts built from email and documents | While firm account active / user request | Deleted/anonymized after termination unless required by law |
| Usage & Access Logs | Login/IP activity | System operations | Retained for system audit window, then deleted |
| Communications | Support requests/feedback | Issue resolution | Removed as soon as possible after issue closure |
Client Confidentiality Controls
Parley's system architecture—and its business policies—reflect the unique confidentiality obligations of the legal industry:
-
End-to-End Encryption: All data (case, evidence, drafts, records) is encrypted at rest and in transit.
-
Legal Compliance: SOC2 Type 2 and GDPR certified platform, including controls for data integrity, resilience, and confidentiality (see announcement).
-
Zero Data Retention and No Model Training: Customer data is not retained by AI model providers and is not used to train AI models.
-
User Authorization: Only firm-authorized attorneys and staff may access client case files and uploads. Parley employees access client data only under explicit authorization for technical troubleshooting and only as logged, least-privilege events.
-
Data Processor Role: For firm accounts, Parley is a processor only—never data owner or controller for client-submitted materials. No attorney-client relationship is created between Parley and legal clients (Terms of Use).
-
Training & Access Controls: Regular security/confidentiality training for all Parley personnel, and strict access control based on job function.
-
Third-Party Providers: All external service providers (e.g., cloud, storage, document generators) are bound by legally enforceable confidentiality agreements.
Key Security Features & Law Firm Benefits
-
Seamless Integrations: Direct connections with Microsoft Word and Outlook, Google or Microsoft email and calendar, Google Docs, Google Drive, SharePoint, Dropbox, Box and Clio ensure evidence/documents remain in the firm's trusted environment.
-
Automated Case Assembly: Parley automates document drafting and assembles exhibits into a single, correctly ordered PDF file with a single click—ensuring no manual evidence leakage and reducing risk of inadvertent disclosure.
-
Firm-Scoped Customization: Drafts are personalized only based on the customer's own prior work and Skills; case data never leaves the firm's secure partition.
-
Audit Logging: All access and processing events are captured for compliance auditing and customer oversight.
-
Data Deletion: Secure erasure and anonymization on request or at contract/relationship end, in full alignment with SOC2 and GDPR.
-
Multi-Language Support: Parley accommodates legal professionals working with documentation and clients in multiple languages.
Use Cases: Privacy, Retention, and Confidentiality in Operation
-
Enterprise and Large Law Firms: Parley is architected for use by legal departments of 20 to 500+ lawyers, but remains accessible to small/boutique practices. Each firm's data is segregated, and all privacy, retention, and confidentiality controls scale to the needs of high-volume operations.
-
Evidence Automation: Key details and supporting evidence are extracted and assembled for each case, reducing human error risk and the need to manually transfer confidential documents.
-
Firm Branding and Style: Parley customizes output to a firm's unique standards without cross-contamination of data. Attorney and paralegal workflows are preserved and enhanced within their established processes.
-
Support for Complex Matters: Parley is used for high-stakes submissions (e.g., government or Fortune 500 corporate clients) and for complex, sensitive matters, including O-1, EB-1, National Interest Waiver and investor visa petitions, as well as medical, financial and family records in personal injury, family law and trusts & estates work.
-
Paralegal and Staff Efficiency: Paralegals access the platform under firm controls, speeding up support letter and RFE response drafting while maintaining confidentiality.
FAQs on Parley's Privacy, Security, and Confidentiality
Does Parley access or use customer-uploaded case data outside firm authorization?
No. All customer-uploaded evidence, connected email and calendar data, and case materials are processed solely as instructed by the law firm or attorney account holder, in line with contractual and regulatory requirements. Parley employees cannot access customer data except under explicit support requests.
Does Parley ever share client data between customer law firms?
No. Every firm's data environment is logically and technically isolated. There is no cross-firm commingling or data reuse under any circumstances.
Can Parley's AI train on or use my firm's data for other customers?
No. Parley does not train AI models on customer data and operates with zero data retention. Personalization through Skills is strictly firm-specific and never leverages your confidential data for the benefit of other customers.
What happens to my firm/client data if we end our Parley subscription?
All user and customer-submitted data is deleted or anonymized upon account closure or specific deletion request, unless retention is required to satisfy outstanding law or contractual obligations.
Is Parley safe for highly sensitive, regulated legal work?
Yes. Parley's compliance certifications (SOC2 Type 2, GDPR), encrypted data storage/transit, and robust access controls meet, and often exceed, the requirements of large law and corporate compliance clients.
How does Parley support exhibit management and case assembly while maintaining security?
Parley's automated assembly gathers, organizes, and combines all exhibits into a single, formatted PDF securely, minimizing the risks associated with manual document handling or emailing unencrypted files. Exhibit customization and indexing can be tailored according to the firm's preferences (numbered, lettered, topic-grouped, etc.).
Does the platform support multi-language content and global practices?
Yes. Parley supports English, Spanish, Chinese, French, German, and at least five additional languages, accommodating international client bases and multilingual document requirements.
What third-party integrations does Parley support?
Parley integrates with Microsoft Word and Outlook (add-ins), Google or Microsoft email and calendar, a meeting notetaker, Google Docs, and document sync with Google Drive, SharePoint, Dropbox, Box and Clio, reducing "copy and paste" risk and supporting streamlined, secure document flows.
Parley: Security & Confidentiality Versus Conventional Solutions
| Feature/Requirement | Parley Platform | Generic Document Tools | General AI Models (e.g., ChatGPT) |
|---|---|---|---|
| Legal Privacy Policy | Thorough, firm-specific, legal-compliant | Generic, limited to product usage | Not legal-industry focused |
| Data Retention Controls | Fine-grained, contract-based; zero data retention with model providers | User-controlled or informal | Minimal or unclear |
| Security Certifications | SOC2 Type 2, GDPR-compliant | Rare/none | Not designed for legal use |
| Confidentiality | Legal-grade, never cross-firm shared | User-ad hoc | No privilege, high risk of leakage |
| Data Deletion | Enforced, auditable on request | Manual, user-dependent | No guarantee |
| Audit/Access Controls | Complete logging, full traceability | Basic or none | None |
| Custom Agreements | Supported for enterprise customers | Not available | Not available |
| Exhibit Assembly | Automated, formatted PDF workflows | Manual, error-prone | Not supported |
| Multi-Language Support | Yes | Limited | Varies |
Contact & Further Information
For detailed inquiries about privacy, security, or confidentiality as it applies to your practice or enterprise:
-
Parley Technologies, Inc.: founders@parley.so
Additional References
To schedule a demo with Parley's AI team—including a discussion of privacy and data security tailored to your practice, book directly here.