Your data. Your business.

The short version

Parli holds your crew list, your schedule, your job costs and your photos. That is your business, and we treat it that way.

Your company’s data is walled off from every other company on Parli by the database itself, not just by the screens. Files are private. Card numbers never touch us. Nothing about your jobs is sold, advertised against, or used to train anybody’s AI.

What follows is the detail, in plain language. If your office needs something more formal for a vendor review, email support@parli.io and we will answer directly.

Your company’s data is separated from everyone else’s

Every company on Parli shares the same software, and every piece of information is tagged with the company it belongs to. The separation is enforced inside the database — every request carries who you are, and the database refuses to return another company’s rows even if the software asked it to.

This is deliberate: hiding a button is not a lock. As of the date on this page, all 60 tables in Parli enforce that rule, with no exceptions.

We also test it rather than trusting it. Before every release, an automated check it signs in as real accounts at each role and tries to read and change things they should not be able to. If any door opens that was previously shut, the release stops.

Who can see what inside your company

Crew see the jobs they are assigned to. Foremen and supers manage the jobs they are given and see the costs on those jobs. Admins and owners see the whole company. If you need something in between, you can build a custom role and take individual permissions away.

Pay rates are the strictest thing in Parli. They are visible to your administrators and to the person whose rate it is — and that is enforced in the database, so a foreman cannot reach a rate through any screen, any search, or the assistant.

Deleting things leaves a record. Each job keeps a log of what was removed, by whom, and when.

Messages are private in the same way pay rates are. A conversation is between two people in your company, and only those two can read it — not the owner, not an admin, and not Parli support. The database enforces that, not the screen.

Files and photos

Photos and files are stored in private storage. They are not on the open internet and cannot be found by guessing an address. When you open a photo in Parli, the system issues a temporary link that works for you and expires shortly after.

The one exception is the share link you create on purpose — for sending a set of progress photos to a homeowner or a GC. That link works for anyone holding it, which is the point of it, and you can revoke it at any time from the File Manager. It stops working immediately.

A photo or video taken with Parli’s camera is filed to the job you are on and stamped with who took it, when, and — if you have allowed location — where. The phone’s position is read only while the camera is open. Anything you draw on a photo is kept as a layer over it, never burned in, so the original is always there. A copy you share out of Parli carries none of those details.

Jobsite photos can be seen by the people on that job, and by anyone who worked it — someone who clocked in there or took a photo there can look back at it later. Whoever took a photo can delete it within a day; a manager can at any time.

Messages and video calls

Messages are one-on-one. A conversation is two people in the same company, and only those two can read it. A message is text or a jobsite photo; a photo sent in a conversation stays filed to its job, and sending it lets the other person see that one photo and nothing else on the job. Unsend takes a message back on both sides. Reporting a message sends it to Parli support, and that is the only way we ever see one.

Video calls go phone to phone. The picture and sound travel directly between the two phones, encrypted, and are not recorded or stored by us. When two phones cannot reach each other directly — some cell networks block it — the encrypted stream passes through a relay operated by Cloudflare, which cannot read it and keeps nothing. We keep a log of each call — who, when, how long, and whether it was missed — that only the two people on the call can see. A snapshot taken during a call is saved as a jobsite photo, filed to the job and credited to the person whose camera it came from.

Signing in

You can sign in with an email and password, with Google, with Apple, or with a one-time link sent to your email.

We never store your password. It is put through a one-way scramble before it is saved, so nobody at Parli can read it, and it cannot be recovered from our database — only reset.

Signing in with Google or Apple means your password is never given to us at all: those companies confirm it is you, and tell us only that you passed.

Cookies

Inside Parli there is one. The app — on the web, on iPhone and on Android — remembers whether you left the sidebar open or closed. That is the whole list. No advertising cookies, no trackers, and nothing that can see what you do on any other website. The phone apps carry no advertising and no analytics code of any kind.

Being signed in is not a cookie either. Your session is held in your own browser’s storage, on your machine, and it is cleared when you sign out.

This marketing site is a different thing from the app, and parli.io sets two of its own. It remembers when an offer you opened ends, so a countdown does not start over every time you come back. If you arrived through a partner’s link, it remembers which partner, so they get credit if you sign up.

It also remembers, on your device and for 90 days, how you first found us: the campaign name on the link you clicked, the website that sent you (just its name, such as google.com, never the page or what you searched for), if an ad brought you, which company’s ad it was, and the first page of this site you saw. When you press a button to sign up, it notes which page you were on and which button it was. That is not a cookie and nothing third-party reads it. If you sign up, it goes with you to Parli so we can tell which ads and posts are worth paying for; if you don’t, it simply expires.

Advertising is the exception, and it lives on parli.io only. When one of our ads brings you to this site, the platform that showed it — Meta for Facebook and Instagram, and whichever of TikTok, LinkedIn, X, Reddit or Google we are advertising on at the time — sets its own cookie so it can tell whether the ad worked. Those cookies belong to those companies, not to us, and they can recognize you on other websites carrying the same tags. They exist on these marketing pages and nowhere else. Nothing of the sort is inside Parli, where your company’s work lives.

You can refuse them. If your browser sends a Global Privacy Control signal they never load at all — Firefox, Brave and DuckDuckGo send it by default. Otherwise use this button, which stops them loading on this device and browser.

Turn off advertising cookies

Payments

Subscriptions are billed through Stripe, one of the largest payment processors in the world. Card details go from your browser straight to Stripe. They never pass through Parli and are never stored by us — we hold nothing beyond the last four digits Stripe shows on your receipt.

That means a break-in at Parli exposes no card numbers, because there are none here to take.

If you subscribe in the iPhone app, Apple takes the payment instead. Apple tells us which plan you bought and when it renews or ends; your card and Apple ID details stay with Apple.

Encryption, hosting and backups

Everything between your phone or computer and Parli travels encrypted. The information sitting in our database and file storage is encrypted as well.

Parli is hosted on Supabase and Vercel, on Amazon Web Services infrastructure in the United States (Ohio). The database is backed up automatically every day.

The keys and passwords our system needs to operate are held in encrypted storage separate from our code, and are not written down in the software itself.

The AI assistant and voice

When you ask the assistant something, the part of your workspace needed to answer — a schedule, a task, the report you asked it to draft — is sent to Anthropic or OpenAI to produce the reply. Voice mode sends your speech to OpenAI to be understood.

Under the commercial terms we use with both providers, your content is not used to train their models. It is processed to answer you, and that is all.

The assistant can only reach the company you are signed in to, and only the parts of it your role allows. A foreman asking a question gets an answer about their jobs, not somebody else’s numbers.

It is optional. A company that would rather send nothing to an AI provider can simply not use the assistant or voice mode.

What we do not do

We do not sell your data. There is no advertising in Parli and no advertising network attached to it.

There are no analytics or tracking packages inside the app — not Google Analytics, not Facebook, not session recorders. Nobody is watching your crew use the software.

This website is the one exception, and we would rather name it than let the sentence above quietly cover it. parli.io uses PostHog to count how many people reach the signup page. It is set to remember nothing between visits — no cookies, no profile, no way to recognize you if you come back — and it is used on these marketing pages only, never inside Parli where your company’s work lives.

The advertising tags described under Cookies are on this website as well. They tell an ad platform that somebody who saw an ad reached us, and they can see which of these marketing pages you visit. They are never inside the app: Parli itself carries no advertising and no analytics code at all, and nothing an ad platform sees touches your crew, your jobs or your photos.

The mobile app does not follow you around. It reads your phone’s position only at moments you choose — saving a place, a reminder for a place, clocking in or out if your company uses Parli’s time clock, and taking a jobsite photo if you have allowed it — and never in the background. Job sites appear on the map from the address typed into the job, not from anyone’s phone.

Your data stays yours

You can take your yard out at any time — the owner of a workspace can export crew, equipment, attachments, tools, trailers and subcontractors to a spreadsheet, in the same format Parli imports.

Anyone can permanently delete their own account from Settings, without emailing anybody for permission. When a company closes its workspace, its records and files are removed from our systems, and its billing with Stripe is canceled. A plan bought through Apple is canceled in your iPhone’s Settings instead.

What we do not have yet

Parli does not hold a SOC 2 report or an ISO 27001 certificate today, and we would rather say so plainly than let a logo imply otherwise. Those are audits companies buy when their customers require them; we are a young product and no customer has yet needed one.

If your company requires one to sign, tell us. That is exactly the kind of thing that decides whether we start the process, and we will give you a straight answer about timing rather than a vague one.

Parli is also not built for regulated health information and should not be used to store it.

For your office manager

If someone in your office needs the formal version — what information Parli holds, who else touches it, what happens when you leave — that is our Data Processing Agreement, and it is published at parli.io/dpa.

Most vendor reviews are satisfied by the link. If yours needs a signed copy for the file, email support@parli.io and we will send one back signed the same day.

Found a problem?

If you believe you have found a security flaw in Parli, email support@parli.io and put "security" in the subject. Tell us what you found and how to reproduce it.

We will confirm we received it, look into it promptly, and tell you what we did. We will not pursue anyone who reports a genuine flaw to us in good faith and gives us a reasonable chance to fix it before telling the world.

Information We Collect

When you create an account we collect your name, email address, and the name of your company.

As you use Parli, we store the work you put into it: jobs and their locations, tasks, schedules, crew and equipment records, field reports, costs, and any files or photos you upload. Job site addresses may include map coordinates so we can show them on a map. If your company uses Parli’s time clock, we store each clock-in and clock-out: the time, the job, and, if you allow location, where your phone was at that moment, and a photo of the jobsite if your company asks for one.

If you take photos or video with Parli’s camera, we store them with who took them, when, and, if you allow location, where. If you use Messages, we store the messages you send and receive — text, and the jobsite photos you send in a conversation — along with when each one was delivered and read. If you make video calls, we store a log of the call: who, when, how long, and whether it was missed. The call itself is not recorded.

If you use voice mode, we process the audio of what you say in order to understand the request and respond to it.

When you create a company, we note how you found Parli, if we know: the partner, ad or link that brought you, the website that sent you (just its name, such as google.com), the page and button on parli.io that brought you to sign up, and whether you signed up on the web or in the iPhone or Android app. If you sign up on the website, we also note roughly where you were at that moment, a city and state worked out by our web host from your internet connection. It is approximate, it is read once, and it is not your phone’s location. The phone apps don’t do this.

We also keep basic technical records — sign-in times, when you last had Parli open, and error reports — so we can keep the service working and investigate problems.

How We Use Your Information

We use your information to provide the service: to show you your work, schedule crews and equipment, send the notifications you have asked for, process payments, and provide support.

We do not sell your information, and we do not use your job data to advertise to you.

AI Features

Parli includes an assistant that answers questions about your workspace, drafts field reports and photo captions, and can be spoken to by voice. These features are included on the paid plans that list them.

To produce a response, the relevant part of your workspace data — for example job names, task details, schedules, or the text of a report you asked us to draft — is sent to our AI providers, Anthropic and OpenAI. Voice mode sends your spoken audio to OpenAI to be transcribed and answered.

These providers process that content only to return a response to you. Under the commercial API terms we use, your content is not used to train their models.

The assistant can only read data from the organization you are signed in to. It never has access to another company’s workspace.

These features are optional. If you would prefer that no data be sent to an AI provider, do not use the assistant or voice mode, and ask your administrator about a plan that does not include them.

Service Providers

Parli is hosted on infrastructure operated by other companies. Each one receives only what it needs to do its job:

Supabase hosts our database, sign-in system, and file storage. Vercel serves the application and this website. Stripe processes subscription payments — card details go directly to Stripe and are never stored by us. Apple processes the subscriptions bought in the iPhone app. Resend delivers our email, such as invitations and notifications. Anthropic and OpenAI power the AI assistant and voice mode, as described above. Google is involved only if you choose to sign in with a Google account. Cloudflare provides the relay that carries a video call when two phones cannot connect to each other directly; it passes the encrypted stream through and stores nothing.

When you type a job address, that address is sent to a mapping service to offer suggestions and to find the spot on the map — Photon (operated by Komoot) and OpenStreetMap’s Nominatim, or Google Places. Only the address text you typed is sent — never your own position. How the app uses your phone’s location, and when it asks, is described under The Parli Mobile App below.

Maps in Parli are drawn with images from Esri (satellite) and OpenStreetMap. To show a map, your device asks those services for the squares of map on screen; no Parli data is sent with that request.

Files and Photos

Files and photos you upload are stored privately. They are not published on the internet and cannot be reached by guessing a web address. When you view a photo in the app, Parli issues a temporary link that works only for you and expires a short time later.

If you deliberately create a share link for a photo or a collection, that link is public to anyone who has it — that is its purpose. You can revoke a share link at any time from the File Manager, and it stops working immediately.

Photos taken on a phone are automatically reduced in size when uploaded, so we store a smaller copy rather than the full-resolution original.

The Parli Mobile App

The iPhone and Android apps are the same Parli as the website, signed in to the same account and showing the same data. Everything above applies to them too.

The app asks for a few things the website cannot use. Each is requested at the moment you first need it, and each can be turned off afterwards in your phone’s settings — the rest of Parli keeps working without it.

Camera and photo library: used only when you take a jobsite photo or video, when you take or attach a photo for a task, note or field report, when your company asks for a jobsite photo at clock-in, during a video call, and when you save a photo back to your phone. Parli does not read your photo library in the background.

Microphone: used only while you are actually talking to the assistant in voice mode, while you are recording a video, and during a video call.

Notifications: if you allow them, your phone gives us an anonymous device token so we can deliver alerts about your work. It identifies the device, not you personally, and it is deleted when you sign out or turn notifications off.

Location: the app asks for your location for four things, and only when you reach for them. The first is the “Use where I am now” button, which pins a place you are saving — the shop, the yard — so you do not have to type its address. The second is a reminder you set for a place: “remind me when I get to the yard.” The app compares where you are against the places you saved, on the phone, and shows the reminder when you arrive. The third is the time clock, if your company uses it: when you clock in or out, the app records where your phone is at that moment, so your company can see where the punch happened and whether it was at the job. The fourth is the camera: a jobsite photo or video can carry where it was taken, read once while the camera is open, so the job’s photos can be shown on a map.

Three things about that are worth being plain about. Your position is read only while Parli is open and in front of you — the app does no background location tracking and cannot follow a phone that is put away. For places and reminders, your position is compared on your phone and not sent to us; the only coordinates kept are the ones for a place you deliberately saved. For the time clock, the one reading taken at each clock-in and clock-out is stored with that punch, where you and the people who manage your company can see it: its owners and admins, plus anyone whose role your company has given permission to see the crew’s hours. Nothing is recorded between punches or after you clock out. Job sites on a map come from the address typed into the job, or a pin someone placed on the map, not from anyone’s phone.

Your company decides how this works. It can turn location off for the time clock, and then the app never asks for it. It chooses how close to a job counts as being at the job, and how long these readings are kept: one year unless it picks another length, from 90 days up to as long as the hours themselves. If your company turns it on, the app may ask for a short note when you clock in away from the job; the note is always optional.

If your company turns it on, the app also asks for a photo of the jobsite right after you clock in. It opens the back camera and asks you to point it at the work, not at people. You can always skip it, and skipping never costs you an hour. Before the photo leaves your phone, Parli redraws it so it carries no location and no details about your phone. It is kept with your punch, seen by the same people who can see where you clocked in, and deleted on the same schedule. Parli never uses face recognition.

Some companies put a shared tablet in the job trailer or the shop as their time clock. If you clock in or out there, it records your name, the time, the job, and where the tablet is, not where your phone is. You use a four-digit PIN that Parli makes for you; it is stored scrambled rather than as the number itself, nobody in your company can look it up, and it only clocks you in and out. The tablet never takes pictures of you, never uses face recognition, and never records video or sound. If you have the Parli app, your phone gets a short receipt each time your PIN is used, so a punch you didn’t make doesn’t go unnoticed.

Working with no signal: punches, jobsite photos and messages you make with no signal are kept on your phone, in Parli’s own storage, until they can send, and they send themselves when you are back in range. The phone keeps a short receipt of what it sent for a day and a half and then clears it. Screens you have opened before are kept on the phone so they open without a signal, and that copy is wiped when a different person signs in.

You can refuse location, or turn it off later in your phone’s settings. Saved places and reminders stay where they are; the arriving part simply stops. Clocking in and out still works — the punch is recorded without a location.

The app carries no advertising, no analytics SDKs, and no third-party trackers.

Apple and Google distribute the app. They do not receive your Parli data — but your use of their storefront is covered by their own terms and privacy policies.

Data Security

Your data is encrypted in transit. Each company’s workspace is isolated at the database level, so one customer cannot read another customer’s records, and access inside your own company is limited by the role your administrator assigns you.

No system is perfectly secure, but we review these protections regularly and fix what we find.

Data Retention and Deletion

We keep your information for as long as your organization has an account with us.

Time clock locations and jobsite photos are the exception: they are kept for one year unless your company chooses another length, and once that time passes they are deleted each night. The hours themselves are kept.

Messages are kept for as long as your organization has an account. Deleting a conversation removes it from your own list only — the other person keeps theirs. Unsending a message removes it for both of you. Deleting a jobsite photo removes the file.

When you delete a job, its tasks, reports, documents, and photos are permanently removed, including the underlying files. Deleting an organization removes its entire workspace the same way. Deletion is immediate and cannot be undone.

If you would like your organization’s account closed and its data deleted, contact us and we will take care of it.

Your Rights

You can view and update your own profile information at any time in the app. You may also ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it.

Your employer controls the workspace you belong to, so some requests — such as removing job records — may need to go through your administrator.

Customers in Canada

Parli is a United States company and your information is stored in the United States, in Amazon Web Services’ Ohio region. That means it crosses the border and is subject to US law while it is there. Canada’s privacy law (PIPEDA) and Quebec’s Law 25 both ask us to say that plainly rather than bury it, which is what this paragraph is for.

Everything under Your Rights above applies to you: ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email support@parli.io and a person will handle it.

Our email follows Canada’s anti-spam law. Every marketing message carries our mailing address and an unsubscribe link that works in one click, and marketing goes only to people who signed up for Parli or asked for it. Email about your own account — an invitation, a receipt, a password reset — is not marketing and keeps arriving either way.

Changes to This Policy

If we change how we handle your information, we will update this page and change the date above. Significant changes will also be announced in the app.

Contact Us

If you have any questions about this Privacy Policy, or want to make a request about your information, email us at support@parli.io.