parlo

Privacy Policy

Last updated: October 13, 2026

This Privacy Policy explains how Patriot AI Holdings LLC, a California limited liability company (“Patriot AI,” “we,” “us,” or “our”) — the company that operates Parlo, including Parlo for Business and Parlo Personal (the “Service”) — collects, uses, and shares information. Because Parlo answers and screens phone calls on your behalf, it necessarily processes call and message content. Please read this policy carefully.

1. Information we collect

Information you give us. Your name and email, your password or the Google account you sign in with, the phone number you connect or that we provision, your agent’s settings and instructions, contacts you add and notes you write about them, files and web pages you add to your agent’s knowledge base, and, for paid plans, billing details. Payments are processed by Stripe — we do not store your full card number. For Parlo for Business, this also includes contact lists you upload for outbound calling campaigns. If you join our waitlist, we keep your email address.

Contacts from your phone. If you choose to import contacts in the Parlo app, we read the contacts you select (or, with “Import all,” your whole address book) and store each contact’s name or company, phone numbers, and one email address. If you choose “Import all,” the app keeps your Parlo contacts up to date by re-reading your address book when you open it and sending us new or changed contacts. You can stop this by turning off Contacts access for Parlo in your phone’s settings.

Call and message content. To provide the Service, we process the calls and messages your agent handles, including transcripts, AI-generated summaries, the phone numbers of callers, the content of messages, and call metadata such as time, duration, and outcome. Call audio is processed in real time to understand and respond to the caller; we do not store audio recordings of calls. For Parlo Personal, this includes calls screened on your line and notes and reminders you dictate to your assistant; for Parlo for Business, this includes calls and text conversations to and from your business number.

Information about callers. When someone calls a Parlo number, we process what they say and their phone number as described above. A caller may also choose to give their email address — for example, to receive a verification code, to book an appointment, or to ask for a link to try Parlo (see Section 6).

Information from accounts you connect. If you connect a calendar (Google Calendar or Calendly), we receive the information described in Section 4.

Information from the Parlo app. If you allow it, the app uses your microphone so you can answer calls your assistant rings through to you, and your contacts as described above. It collects push-notification tokens (including the tokens that let incoming calls ring on your phone) and your device’s name, so we know where to deliver notifications and calls. The app does not include advertising or third-party analytics tools.

Information collected automatically. Log and usage data, device and browser information, push-notification tokens (if you enable notifications), your timezone, and cookies used to keep you signed in and to operate the Service.

2. How we use information

  • To operate the Service — answer, screen, place, transcribe, and summarize your calls and messages, and route the right ones to you;
  • To recognize you and the people you designate, and to apply your settings and blocklists;
  • To process payments, prevent fraud, and manage subscriptions and referral credits;
  • To send you notifications, summaries, reminders, and service and account emails;
  • To send a caller something they asked for during a call, such as a verification code or a link to try Parlo;
  • To secure, troubleshoot, support, and improve the Service; and
  • To comply with law and enforce our Terms.

3. AI processing

Parlo uses automated systems and third-party AI models to understand callers and generate the agent’s responses, transcripts, and summaries. Call audio passes through our own voice engine, which streams it to these providers (including OpenAI) to perform speech recognition and generate responses in real time; transcripts are sent to them after the call to produce summaries. To personalize how the agent handles a call, we also give the model relevant details from your account — for example, the caller’s saved name, any notes you wrote about that contact, and your instructions. We do not use your call content to train third-party models for their own general purposes, and we require our providers to process the data only to provide their services to us.

We also use a classification model (provided by TypeSafe AI) to help the agent interpret what was said — for example, to judge whether a passage from your knowledge base answers a caller’s question, to work out which to-do or contact you named, or to read a spoken time. For these checks we send short pieces of text, such as the caller’s question, excerpts from documents you uploaded, the text of your to-dos, the names (not the phone numbers or email addresses) of your contacts, and, if you use the website option during setup, text from the page we read. We do not send it any information from a calendar you connect. The model returns a selection or a score; it does not generate the agent’s responses. TypeSafe AI has committed not to train its models on this data.

4. Calendar connections (Google Calendar and Calendly)

Connecting a calendar is optional. If you connect one, we access it only to provide the calendar features you turn on, and you can disconnect it at any time in Settings.

Google Calendar. When you connect a Google account, we receive the account’s email address, the list of calendars you can access (their names and your access level — used so you can choose which calendars Parlo may use), and, for the calendars you select: your free/busy times and, for features only you can use, the titles and times of your events. If you ask your assistant to add an event, we create it on the calendar you choose; if you ask it to invite someone, we send that guest’s email address to Google so Google can send the invitation.

  • What callers can learn. Callers are never told what is on your calendar. The agent may know only whether you are busy and when you are next free, and is instructed not to say or guess what you are doing, who you are with, or where you are. If you turn on the setting that lets your assistant use your calendar this way, a caller you saved as a contact may be told that you are tied up until about a certain time, and a caller you marked as a VIP may be told that you are in a meeting until about that time. Other callers are told nothing about your availability.
  • What only you can hear. Event titles, your schedule, and your own notes and reminders are read aloud only to you — on a call from your own verified phone number, after you enter your PIN.
  • What we store. Encrypted access credentials for the connection, the Google account’s email address, the calendars you selected, and a record of each event Parlo created for you (its title, time, and link). We do not keep a copy of your calendar: your other events are read from Google when needed and are not stored, apart from free/busy times cached for about a minute.
  • AI processing. To speak your schedule to you or confirm an event, the relevant event titles and times pass through the AI voice provider that powers the call (OpenAI). They are not sent to TypeSafe AI. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models, and we do not allow our providers to do so.
  • Limited Use. Parlo’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not let people read it except with your permission, for security purposes, to comply with law, or where it has been aggregated and anonymized for internal operations.
  • Disconnecting. Disconnecting deletes the stored credentials. Records of events Parlo already created remain in your call history until you delete them or your account. You can also revoke Parlo’s access at any time from your Google Account’s permissions page.

Calendly. When you connect Calendly with a personal access token, we store the token encrypted and use it to read your event types, your available times, and your busy times, and to book appointments callers ask for. To make a booking we send Calendly the caller’s name and email address, and we keep a record of the booking (the invitee’s name and email, the caller’s phone number, the time, and Calendly’s cancel and reschedule links). We do not read the titles or invitees of your other scheduled events. Disconnecting deletes the stored token; booking records remain in your call history. Calendly’s handling of the data is governed by its own privacy policy.

5. Call transcription and disclosures

The Service transcribes calls handled by your agent in order to screen them and give you summaries and transcripts. Audio is processed in real time and is not stored.

By default, Parlo Personal’s assistant tells callers who are not in your contacts that it is an AI assistant and that the call may be recorded. It does not repeat that to people you have saved as contacts, including contacts you imported, and you can change your assistant’s instructions. For Parlo for Business, there is no default disclosure; what a caller hears depends on how you configure your agent. As described in our Terms, you are responsible for ensuring your use complies with the call-recording, AI-disclosure, and consent laws that apply to you and your callers.

6. How we share information

We do not sell your personal information. We share it only as follows:

  • Service providers (subprocessors) who help us run the Service, under contracts or terms that limit their use of the data — including telephony and in-app calling (Twilio), AI and speech (OpenAI), AI classification (TypeSafe AI), payments (Stripe), database and sign-in (Neon), hosting and storage of files you upload to your knowledge base (Vercel), hosting for our voice engine (Fly.io), messaging, job-queue, and caching infrastructure (Upstash), transactional email (Resend), search/embeddings (Voyage AI), and push notifications (Expo, Apple, and your browser’s push service). Push notifications can include a caller’s name and a short summary of the call;
  • Sign-in with Google: if you choose to sign in with Google, Google shares your name, email address, and profile picture with us;
  • Integrations you connect: if you connect Google Calendar or Calendly, we exchange information with that service at your direction, as described in Section 4;
  • Systems a business connects: a Parlo for Business customer can connect its agent to its own systems (“custom tools”). During a call, the agent may send those systems the caller’s phone number, the call’s identifier, and details from the conversation needed for the request — for example, to look up an account or create a service ticket. The business, not Parlo, controls how those systems use the information;
  • Within an organization: if you use Parlo for Business as part of an organization, every member of that organization — owners, admins, and members — can view and export its calls, transcripts, and settings;
  • Referral invitations: unless you turn it off in Settings, your Parlo Personal assistant may offer callers a link to try Parlo. If a caller asks for it and gives an email address, we send that caller an email with the link and record that the referral came from your account;
  • For legal reasons: to comply with law, respond to lawful requests, or protect the rights, safety, and property of Patriot AI, our users, or the public; and
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

7. Data retention

We retain your information for as long as your account is active and as needed to provide the Service, then for a reasonable period afterward to comply with legal, tax, security, and dispute obligations. We do not automatically delete calls or transcripts while your account is active.

In Parlo Personal, you can delete a call from your inbox; it is removed from your view, and we keep a record of it as needed for billing and our records. Parlo Personal also automatically archives some calls, such as suspected spam, after 48 hours — archived calls are hidden from your inbox, not deleted. Parlo Personal users can delete their account and its data themselves in Settings — on the web, or from Settings in the Parlo app, which links there. To delete Parlo for Business calls or a Business account, contact us as described in Section 9. Some records may be retained where required by law.

8. Security

We use technical and organizational measures — including encryption in transit, access controls, and signed, verified webhooks — designed to protect your information. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

9. Your choices and rights

You can review and update your account information, manage notifications, block callers, turn off referral invitations, disconnect calendars, and, in Parlo Personal, delete calls and delete your account in Settings. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to appeal a decision about a request. To exercise a right, use parlovoice.com/support (or email support@parlovoice.com); we will verify and respond as required by law.

Deleting your account.If you use Parlo Personal Assistant, you can delete your account at any time in Settings → Account → Delete account, on the web or from the app's Settings, which links to the same page. This cancels your subscription, releases your Parlo number, and permanently deletes your calls, transcripts, contacts, notes, reminders, and settings. Parlo for Business customers can request account deletion through parlovoice.com/support.

California residents. Under the CCPA/CPRA you have the right to know, access, delete, and correct your personal information, and to not be discriminated against for exercising these rights. We do not sell or “share” personal information for cross-context behavioral advertising.

10. Children

The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. International users

We operate in the United States, and your information will be processed there. If you access the Service from outside the United States, you consent to that processing.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice.

13. Contact

Patriot AI Holdings LLC — parlovoice.com/support.