On this page
- Information We Collect
- Cookies and Tracking Technologies
- How We Use Personal Information
- Legal Bases for Processing (EEA/UK)
- Automated Decision-Making
- How We Disclose Personal Information
- Your Privacy Choices
- Your California Privacy Rights (CCPA/CPRA)
- Retention
- Security
- Third Party Advertising
- Third-Party Services
- Minors
- Jurisdictional Issues
- Changes to This Privacy Policy
- Contact Information
Parcha Labs, Inc. (the Company, we, or us) is providing this privacy policy (the Privacy Policy) to describe how we collect, use, and disclose personal information obtained through (1) our website at www.parcha.ai and www.grep.ai and any other websites operated by us that link to this Privacy Policy (collectively, the Website), and (2) our Google Chrome web browser extension that we make available to our enterprise customers in connection with our proprietary AI automation tools (our Extension) (together with the Website, the Services). In addition, our enterprise customers use our AI-powered platform to process personal information on their behalf in connection with know-your-customer (KYC), anti-money-laundering (AML), and related compliance workflows. When we process personal information on behalf of our enterprise customers, we act as a data processor (or service provider) under applicable law, and such processing is governed by our agreements with those customers. This Privacy Policy describes Parcha's own data practices as a data controller; it does not govern the personal information we process on behalf of our enterprise customers.
Information We Collect
We collect various types of information through our Services, including personal information, usage and device data, and extension data, as described below.
Personal Information
“Personal information” is information that identifies you as an individual or relates to an identifiable individual. When you use our Services, we may collect personal information such as:
- Your name;
- Your contact details, such as your email address, mailing address, and/or telephone number;
- Your username and log-in credentials, if you create an account with us; and
- Records of communications with you, such as receiving and responding to your online questions or feedback.
We also may receive information from other sources, such as publicly available databases and third-party service providers.
Job Applicants
When you apply for a job with us, we collect your contact information (e.g., name, phone number, email address, address, city, or country), professional or employment information (e.g., previous work experience, names of current and previous employers), and other information you choose to provide during your application or interview process. Information may be collected about you in multiple ways: you may provide it to us in connection with your application; we may make observations in the application process or collect information from public information sources; or you may authorize us to collect information from other sources, such as a former employer, reference or a credit reporting agency. In certain circumstances, you may submit your application for employment through a third-party service that displays our job posting. We do not control the privacy practices of these third-party services. Please review their privacy policies carefully prior to submitting your application materials.
Usage and Device Data
As you use our Services, we may automatically collect certain information about the device you are using, such as your device’s IP address, browser type, operating system, and the name of your internet service provider. We also may collect information about your use of the Services, such as the website from which you navigated to our Services, date and time you use our Services, the pages you view, clickstream data, usage data, and any resources you access, download, and use in connection with our Services. This information helps us measure traffic to our Services, analyze usage patterns, improve our Services, and deliver a more personalized experience of our Services. The technologies we use for this automatic data collection may include:
- Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. If you do not want information collected through the use of cookies, most browsers allow you to decline cookies by activating the appropriate setting on your browser. If you disable or refuse cookies, some features of our Services may not be accessible or may not function properly. As there is no uniform industry standard for responding to do-not-track signals, we do not currently respond to browser do-not-track signals.
- Pixel tags. Portions of the Website and our emails may contain small electronic files known as pixel tags (also referred to as web beacons clear gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
- Analytics. Our Services may use third-party analytics tools such as Google Analytics and others, which use cookies and similar technologies to collect and analyze information about use of our Services and report on activities and trends. These analytics tools may also collect information regarding the use of other websites, apps and online resources.
Cookies and Tracking Technologies
Our Services may use cookies and similar technologies to enhance user experience, analyze website traffic, and deliver personalized content. This section outlines the types of cookies we use, their purposes, and your choices regarding their use.
Types of Cookies We Use
- Essential Cookies: These cookies are necessary for the operation of our Services. They enable core functionality such as security, network management, and accessibility. You can set your browser to block these cookies, but this may affect how the Services function.
- Analytics and Performance Cookies: We use these cookies to collect information about how you use our Services, which helps us improve their performance, including recognizing and counting visitors and seeing how visitors move around our Services.
- Functional Cookies: These cookies enable enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.
- Advertising Cookies: These cookies are used to make advertising messages more relevant to you, including preventing the same ad from continuously reappearing, ensuring ads are properly displayed, and in some cases selecting advertisements based on your interests.
Consent and Control:
- Obtaining Consent: We use a cookie consent banner to obtain your explicit consent before placing any non-essential cookies on your device. By clicking “Accept” on this banner, you consent to our use of cookies as described in this policy. You can manage your cookie preferences through this banner at any time.
- Withdrawing Consent: You have the right to withdraw your consent at any time by adjusting your browser settings to refuse cookies or by updating your preferences through our cookie banner.
- Third-Party Cookies: Some cookies may be set by third-party services that appear on our pages. We do not control these third-party cookies, and we recommend reviewing the applicable third party's privacy policy for more information about their cookies and how to manage them.
When this information constitutes personal information, or if we combine it with personal information, we may use and disclose it for the purposes for which we use and disclose personal information as detailed in this Privacy Policy. When this information does not constitute personal information, we may use and disclose it for any purpose, except where we are required to do so under applicable law.
How We Use Personal Information
We use personal information we collect about you for a number of business purposes, such as:
- Providing our Services to you, such as to maintain and operate our Services, track service and quality issues, communicate with you, and authenticate users of our Services;
- Fulfilling your requests, such as when you submit a request or inquiry to us through our Website;
- Sending you administrative information, such as updates to our terms or policies;
- Sending you emails or other promotional materials about our products and services, and other products or services that may be of interest to you, consistent with your choices;
- Providing you with a personalized experience, such as to understand your interests and preferences in order to personalize our interactions with you, or to provide you with content and offers tailored to your interests;
- For our own internal business purposes, such as maintaining and improving our Services, developing new products and services, analyzing usage trends, assessing the effectiveness of our promotional campaigns, and operating and expanding our business activities;
- For legal, safety, or security reasons, such as to comply with legal requirements, prevent and detect fraud or misuse of our Services, or to protect the safety, property, or rights of the Company, customers, or others;
- For jobs, to manage your job application; and
- For marketing, such as to send you marketing-related emails, consistent with your choices.
We also may generate de-identified or aggregated data, which we may use and disclose for any purpose.We collect and retain only the personal information necessary for the purposes described in this Privacy Policy.
Legal Bases for Processing (EEA/UK)
Where the EU or UK General Data Protection Regulation applies, our legal bases for processing your personal information are:
- Performance of a contract: to provide the Services you have requested or to take steps at your request before entering into a contract.
- Legitimate interests: to operate, improve, and promote our Services, to communicate with you, and to ensure network and information security, where those interests are not overridden by your data protection rights.
- Consent: where you have given us specific consent to process your personal information for a particular purpose (e.g., marketing communications). You may withdraw consent at any time by contacting us at privacy@parcha.ai.
- Legal obligation: to comply with applicable laws, regulations, or legal processes.
Automated Decision-Making
Our AI-powered platform may perform automated risk assessments, identity verification, and compliance screening on behalf of our enterprise customers. Where such processing constitutes solely automated decision-making that produces legal effects or similarly significant effects on a data subject under Article 22 of the GDPR, our enterprise customers, as the data controllers, are responsible for ensuring that appropriate safeguards are in place, including the right to obtain human intervention, to express a point of view, and to contest the decision. If you believe you have been subject to an automated decision through one of our enterprise customers' services, please contact that customer directly.
How We Disclose Personal Information
We may disclose the information we collect about you:
- To our subsidiaries and affiliated legal entities, as applicable, for the purposes described in this Privacy Policy;
- To vendors, contractors, or service providers, to facilitate the services they provide to us. These can include providers of services such as website hosting, data analysis, order fulfillment, fraud prevention, information technology, customer service, marketing delivery, and other services;
- To government authorities, law enforcement, or other third parties for legal, security, or safety purposes, such as to comply with legal requirements; to enforce or apply our terms of service and other agreements; and to protect our rights and the property or safety of our users or third parties;
- With your consent, where applicable; and
- To a third party in connection with a sale of business or assets, in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
Your Privacy Choices
If you would like to update the personal information you have provided to us, please send us your request using the contact details in the Contact Information below.
If you would like to opt out of receiving marketing emails from us, you may opt out at any time by using the unsubscribe mechanism included in each of our marketing emails. Opting out of marketing emails will not affect our ability to send you administrative or transactional messages.
You may have the right to access, correct, delete, or port your personal data. To exercise these rights, please contact us at privacy@parcha.ai.
If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at:
https://edpb.europa.eu/about-edpb/about-edpb/members_en.
For UK residents, the relevant authority is the Information Commissioner's Office (https://ico.org.uk).
Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, this section supplements the disclosures above and describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).
Categories of Personal Information. In the preceding 12 months, we have collected the categories of personal information described in the “Information We Collect” section above (e.g., identifiers, internet or other electronic network activity information). We have disclosed each of those categories to the categories of recipients described in the “How We Disclose Personal Information” section above, for the business purposes described in this Privacy Policy.
Sale/Sharing of Personal Information. As described in the “Third Party Advertising” section above, we use third-party advertising cookies and similar tracking technologies that allow our advertising partners to collect identifiers and online activity information for cross-context behavioral advertising. This may constitute a “sale” or “sharing” of personal information under the CCPA/CPRA, even though no money changes hands. We do not sell or share the personal information of consumers we know to be under 16 years of age.
Your Rights. Subject to certain exceptions, California residents have the right to: (a) know and access the personal information we have collected about them; (b) delete personal information we have collected from them; (c) correct inaccurate personal information; (d) opt out of the sale or sharing of their personal information; (e) limit the use and disclosure of sensitive personal information; and (f) not be discriminated against for exercising any of these rights.
How to Exercise Your Rights. You may submit a request to know, delete, or correct by contacting us at privacy@parcha.ai. You may opt out of the sale/sharing of your personal information by contacting us. You may designate an authorized agent to submit a request on your behalf; we may require proof of the agent's authorization and may still require you to verify your own identity directly with us.
Verification and Response Time. We will verify your request using the information associated with your interactions with our Services and will respond within 45 days of receipt, which we may extend once by an additional 45 days as permitted by law.
Retention
We retain personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria we use to determine retention periods include: (a) the duration of our relationship with you; (b) whether there is a legal obligation to which we are subject (e.g., certain laws require us to keep records of transactions for a specified period); and (c) whether retention is advisable in light of our legal position (e.g., applicable statutes of limitations, litigation, or regulatory investigations).
Security
We have implemented measures designed to protect personal information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately using the contact details in the Contact Information section below.
Third Party Advertising
We use third-party advertising companies to deliver advertisements regarding goods and services that may be of interest to visitors who use our Services. These advertising companies may deliver advertisements to you based on information relating to your access to and use of our Services and other websites or online services on any of your devices, as well as on information received from third parties. These advertising companies place or recognize a unique cookie, pixel tag, or similar tracking technology on your browser. They also use these technologies, along with information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control how these third parties collect or use your information. However, these third parties may provide you with choices over this type of collection or use of your information. If you would like more information about this practice, and to learn about your choices in connection with it, please visit http://www.networkadvertising.org/managing/opt_out.aspOpen and http://www.aboutads.info/Open.
Third-Party Services
This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any website or service to which our Services link. The inclusion of a link on our Services does not imply endorsement of the linked site or service by us or by our affiliates.
In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, RIM, or any other app developer, app provider, social media platform provider, operating system provider, or wireless service provider.
Minors
Our Services are not directed to individuals under the age of sixteen (16) and we do not knowingly collect personal information from individuals under that age. If we learn we have such data, we will delete it promptly
Jurisdictional Issues
Your personal information may be stored and processed in any country where we have facilities or in which we engage service providers, including the United States, which may have data protection rules that differ from those of your country. Where we transfer personal information from the EEA or the UK to a country that has not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK Addendum thereto, as applicable), to lawfully transfer your data. You may request a copy of the applicable safeguards by contacting us at privacy@parcha.ai.
Changes to This Privacy Policy
This Privacy Policy is effective as of the date it was last updated, which is identified at the top of this page.
From time to time, we may make changes to this Privacy Policy. When we do so, we will post those changes to our web page. We encourage you periodically to check our web page to learn about the information we collect, use, and share.
Contact Information
If you have questions about this Privacy Policy, please contact us at privacy@parcha.ai.
Our EU Representative
Under Article 27 of the GDPR, we have appointed an EU Representative to act as our data protection agent. Our nominated EU Representative is:
Instant EU GDPR Representative Ltd.
Adam Brogden contact@gdprlocal.com
Tel +35315549700
INSTANT EU GDPR REPRESENTATIVE LTD
Office 2,
12A Lower Main Street, Lucan Co. Dublin
K78 X5P8
Ireland
Our UK Representative
Under Article 27 of the UK General Data Protection Regulation (UK GDPR), we have appointed a UK Representative to act as our data protection agent. Our nominated UK Representative is: GDPR Local Ltd.
Adam Brogden contact@gdprlocal.com
Tel +44 1772 217800
1st Floor Front Suite
27-29 North Street, Brighton
England