Privacy Policy
Last Updated: July 8, 2026
1. Introduction
Parlexa ("we," "us," "our," or the "Company") operates the AI Agent Marketplace platform at parlexa.in (the "Service"). This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information when you visit our website, use our platform, list your tools, or interact with our services.
We are committed to protecting your privacy. If you have any questions about this Privacy Policy or our privacy practices, please contact us at privacy@parlexa.in or a@parlexa.in.
2. Information We Collect
2.1 Information You Provide Directly
- Account Registration: Name, email address, password, company name, website, industry, contact email
- Vendor Listings: Tool name, description, screenshots, logo, pricing, website URL, category, tags, features
- Communications: Messages via support/messaging, feedback, email correspondence
- Payment Information: Vendor subscription data, payout preferences (future feature)
Note: Modifications to existing listings automatically trigger automated verification pipelines and re-routing to administrative queues to ensure platform integrity.
2.2 Information Collected Automatically
- Usage & Analytics: Page views, clicks, time spent, scroll depth, feature interactions (PostHog)
- Click Tracking: Tool ID, timestamp, user ID, referrer page, UTM parameters, device type. We utilize performance-optimized background processes to decouple interaction logging from the active user interface thread. Client-side state restrictions prevent automated click duplication.
- Device & Technical: IP address, browser type, OS, device type, approximate location (country/region)
- Cookies & Tracking: Session cookies (authentication), preference cookies, analytics cookies (PostHog)
3. Third-Party Services & Data Sharing
3.1 Supabase (Database & Authentication)
Core platform infrastructure. Data encrypted in transit.
3.2 Sentry (Error Tracking)
Monitor stability, debug issues. Passwords and payment info filtered.
3.3 PostHog (Analytics)
Understand user behavior, measure feature adoption. We do NOT sell data.
3.4 Microlink API (Screenshot Generation)
One-time fetch for screenshots → stored in Supabase Storage only. Microlink URL never persisted. Once processed, the generated asset becomes subject to our Supabase Storage access rules and security policies.
3.5 Resend (Email Service)
Transactional emails only: welcome, approval status, vendor messages, password reset.
We do NOT: Sell user data, share with advertisers, expose passwords, share payment info with third parties.
Vendor Dashboards: While we do not sell data, aggregated interaction metrics (e.g., total clicks, total saves) are visible to the specific vendor hosting that tool through their secure, sandboxed dashboard.
4. Your Privacy Rights & Choices
4.1 Access & Portability
Request a copy of your personal data in CSV/JSON format. Contact: privacy@parlexa.in
4.2 Deletion / Right to Be Forgotten
Request account and data deletion. Some data retained for legal/tax reasons (7 years).
4.3 Opt-Out of Analytics
Disable PostHog tracking via browser's "Do Not Track" signal or contact us.
4.4 Cookie Preferences
Session cookies required for auth. Preference & analytics cookies can be disabled in browser settings.
5. Data Security
- ✅ Encryption in Transit: HTTPS/TLS for all data
- ✅ Encryption at Rest: Database-level encryption
- ✅ Access Control: Role-based access (RLS)
- ✅ Monitoring: Sentry & logging for unauthorized access
⚠️ Note: No security system is 100% impenetrable. If you share your password, we're not responsible for unauthorized access.
6. Data Retention
- Account profile: Until deletion
- Click/interaction logs: 24 months (vendor analytics)
- Error logs (Sentry): 90 days
- Backups: 30 days (rolling)
- Transaction logs: 7 years (legal requirement)
7. International Users & Compliance
- EU (GDPR): You have rights to rectification, restriction, objection, and complaint to your Data Protection Authority.
- California (CCPA): You have rights to know, delete, opt-out, and non-discrimination.
- India, Brazil, Other: We comply with local privacy laws where applicable.
8. Contact Information
Response time: We aim to respond to all privacy inquiries within 5-7 business days.