Privacy Policy

1. Summary

• We use your information to run your Entity and the Services. We do not sell your personal information.
• We do not use your private conversations, files, Entity memories or connected-account content to train or fine-tune general-purpose AI models.
• We do not use your Entity conversations or memories for targeted advertising.
• Your Entity connects only to the accounts you connect, with the permissions you grant, and you can disconnect them.
• You can pause your Entity’s memory, and delete your account and associated data from inside the app. Deletion starts immediately and is completed within 30 days.
• AI model and infrastructure providers process information on our behalf so that the Services can work.

2. Information we collect

What we collect depends on the features you use, the permissions you grant and the accounts you connect. Not every category applies to every user.

Information you provide

• Account and authentication: name, email address, sign-in method and identifiers from the sign-in provider you choose.
• Entity identity and configuration: your Entity’s name, username, profile settings, instructions and preferences.
• Conversations: messages, requests, voice messages and other content you send to your Entity, and its replies.
• Files and media: documents, images and other files you upload or share.
• Goals, instructions and relationships: what you ask your Entity to work on, and information about people you add or mention, such as contacts and notes about them.
• Saved credentials: logins you choose to store so your Entity can sign in to websites for you.
• Communications with us: support requests and feedback.
• Early-access list: your email address and, if you give them, your name and phone number; the page and form you signed up from, the referring page and related campaign information; and your IP address and browser type, used to prevent abuse.

Information from connected services

When you connect a third-party account, we receive the information that the permissions you grant allow. Depending on what you connect, this may include email messages and metadata, calendar events, documents and files, and content from workspace and productivity services. We also receive the authorisation tokens needed to keep the connection working.

Information your Entity creates or receives

• Entity memory: structured records of your preferences, goals, instructions, relationships and past interactions.
• Work products: files, drafts, documents and other artifacts your Entity creates.
• Task history: records of tasks, steps, approvals and outcomes.
• Entity communications: messages sent from and received by your Entity, including its own email address and any messaging channel you enable.
• Computer and browser activity: when your Entity uses its isolated computer or a browser to complete a task, records of that activity and the pages and files involved.
• Information about other people: information about individuals and organisations your Entity encounters while carrying out your instructions.

Information collected automatically

• Device and usage: device type, operating system, app version, language, and how features are used.
• Diagnostics and logs: error reports, performance data and technical logs.
• Security: sign-in events, IP addresses and signals used to detect abuse and protect accounts.
• Website: pardx.io uses privacy-friendly analytics that do not use cookies to count visits and interactions. Our web application uses product analytics, which may use cookies or similar technologies; see “Cookies and analytics”.

Payment information

Where the Services offer paid plans, payments are handled by our payment processor. We receive billing details such as plan, status and transaction records, but not your full card number.

3. How we use information

We process personal information to provide, operate, maintain, secure, personalise, support and improve the Services. This includes:

• interpreting your requests and generating responses;
• maintaining relevant context and operating your Entity’s memory;
• performing tasks you request or authorise, including through connected services, your Entity’s computer and browser, and communications with third parties;
• providing customer support and sending service messages;
• detecting, investigating and preventing abuse, fraud and security incidents;
• diagnosing technical problems, monitoring reliability and evaluating service performance;
• developing and improving our software, features and how Entities work, in line with section 4;
• processing payments and managing subscriptions, where applicable;
• sending early-access news and, where permitted, information about PARDX;
• complying with legal obligations and enforcing our terms.

Processing is subject to applicable law, our contracts, the permissions you grant and the restrictions set by connected-service providers.

4. Artificial intelligence and model training

PARDX uses artificial intelligence to understand requests, generate responses, maintain personalised context and perform tasks. Depending on the feature, relevant information, such as conversation content, documents, task information or retrieved information, may be processed by third-party AI model and infrastructure providers to deliver the requested functionality.

PARDX does not use your private conversations, files, connected-account content or Entity memories to train or fine-tune general-purpose AI models.

We distinguish between three kinds of processing:

1. Personal memory and personalisation: using your information to make your own Entity more useful to you. This is part of the Service you use.
2. Service operations: security, diagnostics, debugging, quality assurance, evaluation and improving how PARDX works. We do this under the safeguards in this Policy, using the minimum information reasonably necessary.
3. Training or fine-tuning general-purpose AI models: we do not do this with your private content.

AI providers process information on our behalf to provide the Services. We choose and configure providers with the aim of preventing them from using your content to train their own models, and we apply contractual and technical controls to their processing. Each provider’s handling of information is also governed by its own terms.

AI output can be inaccurate. Please review important results before relying on them.

5. Entity memory and personalisation

Your Entity may keep information about your preferences, goals, instructions, relationships and previous interactions so that it can provide continuity and personalised help. This information may be stored in structured records, databases, files and other memory systems, and may come from your conversations, connected services, uploaded content or activities your Entity performs.

You can pause memory in the app’s settings. Deleting a single conversation or disconnecting a service may not automatically remove related information that was already incorporated into other memory records. Deleting your account removes your Entity’s memory as described in section 11.

6. Connected accounts and third-party services

You may authorise your Entity to connect to third-party accounts, applications and services. Depending on the permissions you grant, your Entity may retrieve information, receive updates, send information or take actions through those connections. Information from connected services is processed to provide the functionality you request or authorise.

When your Entity communicates with or submits information to a third-party service, that service processes the information under its own terms and privacy practices. Disconnecting a service stops further access through that connection, but does not necessarily delete information already processed or incorporated into your Entity’s records.

Google user data

If you connect a Google account, PARDX requests only the permissions needed for the features you use, such as reading and sending email from your Gmail account, managing calendar events and reading Drive files. PARDX’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train general-purpose AI models.

7. Communications and interactions with others

When you instruct or authorise it, your Entity may interact with individuals, organisations, applications and other AI systems. These interactions may involve sending relevant information, receiving communications, coordinating activities or carrying out tasks.

Where available, your Entity may discover, connect with and coordinate with other people’s Entities. Such interactions are subject to the permissions and product controls that apply to them. Connecting with or messaging another Entity does not, by itself, give that Entity access to your private conversations, personal memory or connected accounts.

People who do not use PARDX

We may process information about people who do not have a PARDX account when a user provides it, when it is received through a connected service, or when it is encountered during an authorised task, for example the recipient of an email your Entity sends. We process this information to carry out the user’s instructions and to protect the Services. If you believe we hold your information and you do not use PARDX, you may contact us at info@pardx.io to exercise the rights available to you.

8. How we share information

We disclose personal information only as described in this Policy, to the following categories of recipients:

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

9. Security

We use technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration and loss. These include encryption of data in transit and at rest with our cloud providers, separate encrypted storage for saved credentials, an isolated computing environment for your Entity’s computer, access controls, authentication, and security monitoring. Higher-risk actions require your approval before your Entity performs them.

No method of storage or transmission is completely secure. We review and improve our security practices as the Services evolve, and we will describe new protections here only once they are in place.

10. Retention

We keep personal information for as long as reasonably necessary to provide the Services and maintain your account, to support activities you authorise, to protect security, to comply with legal obligations, to resolve disputes and to enforce our agreements. How long depends on the type of information, the purpose and our legal obligations:

• Account, Entity, memory, conversations and files: while your account is active, until you delete them or delete your account. Account deletion is completed within 30 days (see section 11).
• Connected-service data: while the connection is active and as needed for the tasks it supports, or until you delete your account.
• Security and diagnostic logs: for the limited period needed for security, debugging and reliability.
• Billing records: as long as required by tax and accounting law.
• Early-access list: until you unsubscribe or ask us to remove you.

11. Deleting your account

You can delete your account in the app under Settings. Deletion is permanent. It removes your account, conversations, Entity memory, files, saved credentials and your Entity’s computer, and stops your Entity’s work. You can also request deletion by writing to info@pardx.io.

Deletion starts automatically as soon as you confirm it, and we complete deletion of your information from our active systems within 30 days of your request. Some information may remain for a limited time after that in backups, security records or transaction records, or where we must keep it by law. Messages your Entity already sent to other people remain with their recipients, and information already shared with third-party services is subject to their practices.

12. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy, including in a portable format;
• correct inaccurate information;
• delete your information;
• object to or restrict certain processing;
• withdraw consent where we rely on it, without affecting earlier processing;
• not be discriminated against for exercising your rights.

In the app you can pause memory, disconnect accounts and delete your account. For other requests, write to info@pardx.io. We may need to verify your identity before acting on a request. You may use an authorised agent where the law allows. If you are not satisfied with our response, you may complain to your data protection authority.

13. Legal bases (EU, UK and similar laws)

Where laws such as the GDPR or UK GDPR apply, we rely on these legal bases:

• Performance of a contract: to provide the Services you use, including your Entity, its memory and the tasks you request.
• Legitimate interests: to secure, debug, evaluate and improve the Services, prevent abuse, and communicate with you about PARDX, balanced against your rights.
• Consent: where we ask for it, for example to connect a third-party account or for certain marketing. You can withdraw consent at any time.
• Legal obligation: where the law requires processing, for example accounting records.

Pardx Inc. is the controller of personal information processed under this Policy.

14. California residents

In the past 12 months we have collected the categories described in section 2: identifiers; customer records; commercial information (subscriptions); internet or other electronic network activity; audio (voice messages, if you send them); professional or employment information you choose to share; inferences used to personalise your Entity; and sensitive personal information you choose to provide, such as account credentials you save or the contents of communications you connect. We collect it for the purposes in section 3 and disclose it for business purposes to the categories in section 8.

We do not sell or share personal information, as those terms are defined under California law, and we do not knowingly collect the personal information of anyone under 18. We use sensitive personal information only to provide the Services and for other purposes permitted by law. California residents may exercise the rights in section 12, including to know, delete and correct, by writing to info@pardx.io.

15. International transfers

Pardx Inc. is based in the United States. Our main infrastructure runs in the European Union, and some service providers process information in the United States and other countries. Where the law of your country requires safeguards for international transfers, we rely on the transfer mechanisms that the law makes available.

16. Children

The Services are intended only for people aged 18 and over, as set out in our Terms of Service. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact info@pardx.io and we will delete it.

17. Cookies and analytics

The pardx.io website uses privacy-friendly analytics that do not use cookies, and stores no advertising cookies. Our web application uses cookies and similar technologies to keep you signed in and for product analytics that help us understand how features are used. You can control cookies in your browser settings; blocking essential cookies may stop the web application from working.

18. Marketing communications

If you join our early-access list or agree to hear from us, we may send you news about PARDX. Every marketing email includes a way to unsubscribe. We will still send service messages that are necessary for your account.

19. Changes to this Policy

We may update this Policy as the Services, the law or our practices change. We will post the updated version here with a new date. If we make material changes, including any change to how we use personal information we have already collected, we will give notice in the app or by email before they take effect, and obtain your consent where required by law.

20. Contact

Pardx Inc. For privacy questions or requests: info@pardx.io.