Privacy Policy

1. Introduction

Parable, Inc. ("Parable," "we," "us," or "our") is committed to protecting the privacy and security of information. Our Client ("customer", "client", "employer", "company", "organization") has engaged Parable to provide insights on their employees ("you", "employee"). This Privacy Policy describes how we collect, use, disclose, and protect personal information and other data when our Client has deployed our services, including our AI-powered enterprise knowledge platform (the "Services"). This policy is designed to be compliant with applicable privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), where applicable.

2. Information We Collect

We collect information passively and privately from the Clients existing workplace software stack. We do not engage in screen recording or require any behavioral changes from employees. The types of information we collect include:

• Integration Data: Data from the software tools used within the organization ("workplace stack"). This may include, but is not limited to:
• Documents and files (e.g., from Google Drive, Microsoft OneDrive, Dropbox)
• Communications data (e.g., email metadata from Gmail, Microsoft Exchange; chat logs from Slack, Microsoft Teams – content is analyzed contextually, not verbatim)
• Project management data (e.g., tasks, deadlines, assignments from Asana, Jira, Trello)
• CRM data (e.g., customer interactions, sales data from Salesforce, HubSpot)
• Code repositories (e.g., data from GitHub, GitLab, Bitbucket)
• Calendar and scheduling data (e.g., meeting times, attendees from Google Calendar, Outlook Calendar)
• HR System Data: Data from HR systems, may include employee names and job titles.
• And other systems
• Derived Data: We use AI to analyze the Integration Data. This analysis creates derived data, which includes:
• Contextual relationships between data points
• Organizational structure and communication patterns
• Time allocation and resource utilization insights
• Aggregated and anonymized trends and metrics
• Usage Data: Information about how you interact with our Services, including:
• Log data (IP addresses, access times, browser types)
• Feature usage and interaction patterns
• Error reports
• Account Information: We may collect your name, email address, company name, and job title only as it relates to the Client.
• Cookie Data: We do not utilize Cookie Data on the Parable platform. Our marketing website (askparable.com) uses analytics cookies only if you allow them in its cookie banner. With your consent, we use Google Analytics and Datadog to understand how visitors use the website, including pages viewed, referring sites, approximate location, and device and browser type. Google Analytics sets the _ga cookies and Datadog sets the _dd_s cookie. You can withdraw consent at any time from "Cookie preferences" in the website footer, which stops this collection and removes these cookies. We do not use these cookies for advertising.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and Improving the Services: Our primary purpose is to provide insights into your organization's time and resource allocation. We use the Integration Data and Derived Data to generate reports, dashboards, and actionable plans.
• Service Optimization: We use Usage Data to understand how our Services are used, identify areas for improvement, and develop new features.
• Security: We use information to protect the security and integrity of our Services, detect and prevent fraud, and ensure compliance with our legal obligations.
• Communication: We may use your Account Information to communicate with you about your account, provide support, and send important updates.
• Compliance: We may use information to comply with applicable laws and regulations, respond to legal requests, and enforce our agreements.
• Research and Development: We may use aggregated, anonymized data for research and development purposes to improve our AI models and develop new products and services. This data will never be used in a way that could identify you or the client.

4. How We Share Your Information

We do not sell your personal or work information. We may share information in the following limited circumstances:

• With Your Consent: We may share information with third parties if you have given us your explicit consent to do so.
• Service Providers: We may share information with trusted third-party service providers who assist us in operating our Services (e.g., cloud hosting providers like Google Cloud, data processing services). These providers are contractually obligated to protect your information and only use it for the purposes we specify. These providers are assessed under our Vendor Management Policy.
• Website Analytics Providers: If you allow analytics cookies on our marketing website, information about your visit is sent to Google LLC (Google Analytics) and Datadog, Inc., which process it on our behalf to provide us with usage reports. Google's use of this information is described at https://policies.google.com/technologies/partner-sites.
• Legal Requirements: We may disclose information if required to do so by law or in response to a valid legal request (e.g., a subpoena, court order, or government investigation).
• Protection of Rights: We may disclose information if we believe it is necessary to protect the rights, property, or safety of Parable, our users, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information.
• Aggregated/Anonymized data: Parable only shares internally aggregated and/or anonymized data.

5. Data Security

We take data security seriously and implement a comprehensive set of security measures to protect your information, including:

• Encryption: All data is encrypted at rest using AES-256 encryption (FIPS 140-2 validated crypto module). All data in transit is encrypted using TLS 1.2 or higher.
• Access Control: We strictly enforce the principle of least privilege. Access to your data is limited to authorized personnel who need it to perform their job duties. We use Okta for Single Sign-On (SSO) and multi-factor authentication (MFA) for all accounts.
• Single-Tenant Architecture: All Client data is stored in single tenant Virtual Private Cloud (VPC), providing isolation and enhanced security.
• Regular Audits: We conduct regular security assessments and audits, including penetration testing and vulnerability scanning.
• Compliance: Parable is in process of becoming SOC 2 Type II certified and also complies with GDPR and CCPA requirements.
• Data Minimization: We only collect the data necessary to provide our Services. We do not engage in unnecessary data collection.
• Incident Response Plan: We maintain a comprehensive Incident Response Policy.

6. Data Retention

We retain Client information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are determined based on the type of data and the purpose for which it was collected. We also offer data deletion options on request.

7. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

• Access: You have the right to request access to the personal information we hold about you.
• Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.
• Erasure: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., where we need to retain data to comply with legal obligations).
• Restriction: You have the right to request that we restrict the processing of your personal information under certain circumstances.
• Portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format.
• Objection: You have the right to object to the processing of your personal information under certain circumstances.
• Withdraw Consent: If we rely on your consent to process your personal information, you have the right to withdraw your consent at any time.

To exercise these rights, please contact us at privacy@askparable.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

8. International Data Transfers

Parable operates primarily within the United States. All Client data has residency where our Clients choose based on the availability of Google Cloud regions. If you are located outside the region selected by the Client, your information will be transferred to and processed in that Region. We ensure that any international data transfers comply with applicable data protection laws, including using appropriate safeguards such as Standard Contractual Clauses.

9. Children's Privacy

Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on our website or through other appropriate communication channels. Your continued use of the Services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Parable, Inc. privacy@askparable.com

You may also email us at security@askparable.com

This Privacy Policy is effective as of the Last Updated date shown above.