This policy explains what Parrot Labs LLC ("Parrot Labs", "we", "us") collects when you use parrotlabs.ai and the Parrot Labs app (the "Service"), how we use it, and the choices you have. Parrot Labs is a platform for designing, running and comparing prompts across large language model (LLM) providers.
Information we collect
Account information
Your email address, a hashed password if you set one, your role, and timestamps such as when you last signed in. If you sign in with Google or GitHub, we receive your account identifier at that provider and your verified email address. We do not receive your Google or GitHub password, and we do not request access to your contacts, files, repositories or other data.
Content you create
Organizations, projects, experiments, prompts, model settings, LLM responses, ratings and notes. If you turn on client-side encryption for an experiment, its configuration and results are encrypted in your browser before they reach us, and we cannot read them.
API keys
If your organization adds its own LLM provider API keys, we store them encrypted and use them only to run your experiments.
Billing information
Payments are processed by Stripe. We receive your subscription status, plan and billing contact details, but not your full card number.
Usage and security data
IP address, browser user agent, request logs, usage counts (such as experiment runs and credits used) and security events such as sign-ins and password changes. We use these to operate, secure and bill for the Service.
Messages you send us
Waitlist signups and contact form submissions, including your name, email, company and message.
Cookies and local storage
We use cookies only to keep you signed in, to protect against cross-site request forgery, and to complete Google or GitHub sign-in. We store preferences such as light or dark theme in your browser. We do not use advertising or third-party tracking cookies.
How we use information
- To provide the Service: run your experiments, show results and manage your account and team.
- To send service email, such as verification links, password resets and invitations.
- To bill for paid plans and enforce plan limits.
- To keep the Service secure, prevent abuse and investigate problems.
- To respond to your messages.
We do not sell your personal information, use it for advertising, or use your prompts or results to train models.
Google and GitHub sign-in
When you sign in with Google or GitHub we use only your account identifier and verified email address, and only to create, link or sign in to your Parrot Labs account. We do not share this information with anyone else or use it for any other purpose. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Google or GitHub at any time in Settings.
Who we share information with
- LLM providers you choose. Running an experiment sends its prompts to the model providers it uses (for example OpenAI, Anthropic or Google), under your organization's keys or ours. Those providers process the content under their own terms and policies.
- Service providers that host and operate the Service for us, including cloud hosting (Amazon Web Services), payments (Stripe) and email delivery. They may use the information only to provide services to us.
- Members of your organization, who can see the organization's projects and experiments according to their roles.
- Legal and safety reasons, when required by law or to protect the rights and safety of users, the public or Parrot Labs.
- Business transfers, if Parrot Labs is involved in a merger, acquisition or sale of assets, subject to this policy.
Camouflage
Camouflage detects and replaces personal information in your browser. The original values and the mapping between them and their replacements stay on your device and are not sent to us. If you enable name and place detection, your browser downloads a model from Hugging Face.
Retention
We keep account information and content while your account is active. Experiment runs you delete are hidden immediately and permanently deleted along with your account, or sooner on request. Security logs are kept as long as needed to secure the Service and meet legal obligations. When you ask us to delete your account, we delete or anonymize your personal information unless we must keep it by law.
Security
We use encryption in transit, encrypt stored API keys, offer client-side encryption for experiments, and limit and log access to systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your choices and rights
You can update your email and connected sign-in methods in Settings. You can ask us to access, correct, export or delete your personal information by emailing [email protected]. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the right to object to or restrict processing and to complain to a data protection authority. We will not discriminate against you for exercising these rights.
International transfers
We are based in the United States and process information there. If you use the Service from elsewhere, your information will be transferred to and processed in the United States.
Children
The Service is not directed to children under 16, and we do not knowingly collect their information.
Changes
We may update this policy. If the changes are significant we will notify you by email or in the app before they take effect. The effective date above shows when it last changed.
Contact
Questions about this policy or your information: [email protected]. See also our Terms of Service.