Privacy Policy - Parrot

This Privacy Policy explains how Parrot by BashBash Labs handles personal data when you visit our website, create an account, or use our services.

Parrot is a product operated by BashBash Labs, trading online as BashBashlabs.com ("we", "us", "our"). BashBash Labs acts as the data controller for personal data processed in connection with Parrot under the General Data Protection Regulation (GDPR).

• Product: Parrot
• Company: BashBash Labs (BashBashlabs.com)
• Website: https://www.bashbashlabs.com
• Product Website: https://parrot.wiki
• Contact: hello@parrot.wiki

a) Data you provide

• Name and email address
• Account information required for login and access
• Content you create and upload, including code snippets, notes, scripts, and encrypted keys ("Parrot Content")
• Context sources you upload or connect to AI Contexts
• Messages, feedback, or support requests you submit
• Payment-related metadata (processed securely by third-party payment providers)

b) Data we collect automatically

We do not use advertising or tracking cookies. We process limited technical data required to operate and secure the service, including:

• IP address
• Device and browser type
• Timestamps and basic event logs

c) Parrot Content

When you create a parrot, you may upload or paste content including code, text, scripts, and credentials. This content is stored securely and used exclusively to deliver the service to you and any recipients you share it with.

Parrot does not access, read, or use your content for any purpose beyond operating the service. You control who can view your parrots through visibility settings, lock codes, and username restrictions.

d) Encrypted content

When you create an encrypted parrot or use the Keys type, content is encrypted before storage. We do not hold decryption keys for end-to-end encrypted content. Locked parrots require a valid lock code before content is decrypted and returned by the API.

e) AI Contexts

If you use the AI Contexts feature, you may connect text sources, documents, or notes to a context. This content is processed by AI models to generate grounded answers. Context content is associated with your account and is not shared with other users or used to train shared AI models.

We use personal data to:

• Provide, operate, and maintain Parrot
• Authenticate users and manage accounts
• Store and serve Parrot Content to you and your intended recipients
• Process AI Context queries using your connected sources
• Communicate service updates and respond to inquiries
• Prevent abuse, fraud, and security incidents
• Comply with legal obligations

We rely on the following legal bases:

• Contract (Art. 6(1)(b)) to provide the service you request
• Legitimate interests (Art. 6(1)(f)) to secure, improve, and support the service
• Consent (Art. 6(1)(a)) where required
• Legal obligation (Art. 6(1)(c)) where applicable

Parrot uses AI models to power the Contexts feature — generating grounded answers from sources you connect. Your context sources are not used to train shared AI models. We may use aggregated or anonymized usage data to improve system performance and reliability.

AI-generated responses are probabilistic and may vary in accuracy. You are responsible for reviewing outputs where accuracy matters.

Your Parrot Content is retained securely for as long as your account is active or until you delete it. Content may also be subject to expiry settings you configure — including burn-after-read parrots which are deleted upon first access.

Content is never shared with other users beyond what you explicitly configure, sold, or used to train AI models.

We rely on trusted third-party providers for infrastructure, storage, and payment processing. These providers process limited personal data only as necessary to deliver the service and are contractually required to protect it.

We may disclose personal data if required by law or to protect the rights, safety, and integrity of Parrot and its users.

A list of subprocessors is available upon request.

Parrot serves users globally. Where personal data is transferred outside the EU or UK, we use appropriate safeguards such as Standard Contractual Clauses and additional protective measures where required.

We retain personal data only as long as necessary:

• Account data while your account remains active and for a limited period afterward for security and legal compliance
• Parrot Content until you delete it or it expires per your configured settings
• Context sources until you remove them or delete your account
• Support communications typically up to 12 months after last interaction
• System logs for limited periods appropriate for security and troubleshooting

When you delete content or request account deletion, content is removed from active systems. Residual copies may remain in encrypted backups for a limited time before being permanently overwritten.

We use appropriate technical and organizational measures to protect personal data, including end-to-end encryption for sensitive content types, access controls, encryption in transit, and secure storage practices.

If you are located in the EEA or UK, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, request data portability, and withdraw consent where applicable.

You may also lodge a complaint with your local data protection authority.

To exercise your rights, contact hello@parrot.wiki.

Parrot is intended for use only by individuals who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has created an account or provided personal data, please contact us and we will delete it.

Parrot uses only essential cookies required for core functionality such as authentication and session management. We do not use advertising or tracking cookies. If this changes, we will update this policy and request consent where required.

For privacy-related questions or requests:

Email: hello@parrot.wiki

Website: https://parrot.wiki