Privacy Policy

1. Information we collect

Account and sign-in information

We receive information you provide when creating or managing an account, such as your name, email address, profile image, and connected sign-in accounts. Our authentication provider, Clerk, handles authentication credentials and session management. Parity River stores identifiers linking your account to its application records, along with relevant identity and account-status information.

If you sign in with Google or Microsoft, we and Clerk receive identity information authorized through that provider, such as your provider account identifier, name, email address, and profile image where available. See "Google and Microsoft sign-in" below.

Profile and preferences

We store settings you choose, including display name or nickname, language, time zone, appearance, communication preferences, and interface preferences. Depending on the features you use, we also store favorites, saved filters, filter criteria, and sharing or publication settings.

Tenant information

When you create, join, or administer a tenant, we process tenant names and domains, membership and role information, invitations, and membership requests and decisions. Tenant settings can include logos, a website domain, and business or billing contact details such as a contact's name, job title, country, time zone, telephone number, and email address.

If an administrator invites you, we may receive your email address and proposed role from that administrator before you create an account.

Requests and communications

We process information in administrative requests, review notes, and messages you send to us. Service email delivery involves processing recipients' addresses and message content.

Security and technical information

We record account and tenant activity needed to operate and protect the service. Records can include the acting user's identifier, affected account or tenant, action, time, and related details. Sign-in records can include a session identifier, reported browser and operating system, and source IP address. Hosting, authentication, email, and network providers also process technical information when delivering their services.

2. How we use information

We use information to:

• Create accounts, authenticate users, and maintain sessions.
• Apply access permissions and tenant membership rules.
• Save preferences and provide features you request.
• Process invitations, membership requests, and administrative decisions.
• Send authentication, security, invitation, and other service-related messages.
• Detect and investigate misuse, troubleshoot problems, and maintain security and activity history.
• Respond to support and privacy requests.

At launch, our email communications are limited to necessary service messages, not optional product announcements or marketing emails.

3. Google and Microsoft sign-in

Connecting Google or Microsoft is an alternative way to authenticate or link an identity to your Parity River account. We use the identity information received through that connection to recognize you, associate the connection with your account, and support account access and security.

The current application does not use Google sign-in to read Gmail messages, Google Drive files, Google Calendar entries, or Google contacts. It does not use Microsoft sign-in to read mailbox contents, OneDrive files, or calendar entries. Microsoft configuration includes permission to read basic signed-in-user profile information.

Clerk manages these authentication connections and the associated provider credentials or tokens. The application maintains account and identity records needed for its own features; it does not currently call Google or Microsoft APIs to retrieve the contents listed above.

You can disconnect a connected account through Parity River's account settings, subject to authentication and account-security requirements. You can also manage or revoke Parity River's access through your Google or Microsoft account settings. Disconnecting or revoking a connection does not itself erase previously stored application records or delete your Parity River account.

To request deletion of information previously received through a connection, contact privacy@techintersect.net. The retention considerations in section 7 apply.

4. Who receives information

Your tenant and other authorized users

Tenant administrators and other users with the relevant permissions can access information necessary to manage memberships, invitations, roles, and tenant activity. Authorized platform staff can access information through administrative and support functions according to their permissions, including security and audit information.

If you share favorites or saved filters, or submit filters for publication, the selected audience and authorized reviewers can receive the relevant names, criteria, and review information. Do not put confidential information in labels, filter criteria, or notes that you intend to share.

Service providers

Our service uses:

Authentication emails may be delivered by Clerk or through Resend depending on the configured message type. Google and Microsoft process sign-in interactions under their own policies when you choose those providers.

Our providers use subprocessors to deliver their services. For example, Clerk uses Svix for webhook delivery; webhook messages can contain identity and session information and, when used to relay email, rendered email content.

When a tenant administrator requests a logo or business details from a website domain, our server contacts that website and, where applicable, its referenced image hosts. Those sites receive the requested URL and ordinary server-request information.

Other disclosures

We may retain or disclose relevant information where legally required or necessary to investigate a specific security incident or defend a legal claim. These exceptions are limited to the information and period justified by the particular circumstances.

If Parity River is involved in a merger, acquisition, or sale of the business, relevant information may be transferred as part of that transaction, subject to applicable law, appropriate confidentiality safeguards, and any required notice.

5. Cookies and browser storage

Parity River and its authentication services use cookies or similar technologies for sign-in, session handling, and security. The application also uses browser storage for functional preferences, including appearance, table sizing, navigation state, and restoring the account window after a connected-account flow.

Some preference cookies are configured to last up to one year. Browser settings and storage clearing can remove them. Blocking cookies or browser storage can prevent sign-in or stop preferences from being remembered.

6. Your choices and requests

You can update available profile settings and communication preferences in the application. At launch, we send necessary service messages rather than optional product or marketing announcements. Optional communication settings do not prevent delivery of necessary account, security, invitation, or request-status messages.

Where available, account settings let you manage connected accounts and sessions and delete your account. Tenant administrators manage tenant access and certain tenant records.

You can contact privacy@techintersect.net to request access, correction, deletion, or information about how your personal information is handled. We may need to verify your identity and, when you act on behalf of a business, your authority to do so before responding.

Depending on applicable law, you may also have rights to receive a portable copy of information, object to or restrict certain processing, withdraw consent where processing relies on it, or seek review of a decision. We assess requests under applicable law and explain relevant limitations and available review routes. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

You do not need an active Parity River account to contact us. If your request concerns records we handle on behalf of a customer business, we may need to coordinate with that business while protecting other people's information.

7. Retention and account deletion

We keep account and tenant information to provide the service, and we maintain security and administrative history. Retention differs by record type and by the provider holding it.

Deleting an account is not the same as erasing every related record. The application removes the authentication account and cleans up memberships and saved profile settings, while retaining a marked-deleted application account record and historical information. Retained records can include names, email addresses, identifiers, and security or administrative audit history.

Deleting a tenant removes its corresponding record from the authentication provider, memberships, settings, and stored logos, while retaining a marked-deleted tenant record and relevant history in the application.

The current application does not automatically erase these retained account and audit records after a fixed period. Requests to remove retained information require separate review and handling; deleting an account does not automatically complete that process.

Providers can retain logs, webhook messages, and recovery copies under their own applicable service terms and retention processes. For example, Resend publishes 30-day email/log retention and seven-day backups, and our Vercel Observability Plus service provides 30-day runtime-log retention. These periods do not cover every type of provider record or guarantee that every copy of your information is erased on the same date.

Privacy-request correspondence is stored in our Google Workspace mailbox. That mailbox does not currently have an established automatic expiry for request records. Removing information from a live system does not necessarily remove recovery copies at the same time.

When assessing retention, we consider why information is needed, the customer relationship and instructions, the sensitivity of the information, security investigations, applicable legal obligations, and the handling of legal claims. These considerations do not mean every category is kept for the same period.

Disconnecting a sign-in provider, removing a membership, deactivating an account, and deleting an account have different effects. Copies of messages already delivered to recipients are outside our control. Contact privacy@techintersect.net with questions or requests about retained information.

8. Security and international processing

We use access controls and other technical measures designed to protect the service. No internet service can guarantee absolute security.

Our application databases are hosted in AWS Ohio, United States. The application's default server-function region is US East 1. Clerk publishes US hosting, and Resend stores customer data in the United States.

These primary locations do not mean all processing takes place in the United States. Network delivery, identity providers, mailbox hosting, support, and subprocessors can involve other countries. Information can be processed outside the country where you live or access the service.

9. Children

Parity River is intended for adults aged 18 or older using the service for business or professional purposes. It is not intended for people under 18.

If you believe someone under 18 has created an account, contact privacy@techintersect.net so we can review the report.

10. Changes and contact

For material changes to this policy, we will email affected account holders and update the policy's effective date.

Privacy questions and requests can be sent to privacy@techintersect.net.

Postal correspondence: