Privacy
Privacy Policy - Parrot
Last updated: July 20, 2026
How Parrot by BashBash Labs handles personal data when you visit our website, create an account, or use our services.
Parrot is built for developers and teams who need to share code, notes, scripts, and encrypted keys securely. We only collect what we need to run the service. We do not sell your data. Your snippets, contexts, and uploaded content remain yours.
Encrypted content - including locked snippets and API keys - is stored using end-to-end encryption. It is never read, shared with other users, or used to train AI models.
You can delete your content and request deletion of your account at any time.
Privacy Policy (GDPR) - Parrot by BashBash Labs
This Privacy Policy explains how Parrot by BashBash Labs handles personal data when you visit our website, create an account, or use our services.
1) Who we are
Parrot is a product operated by BashBash Labs, trading online as BashBashlabs.com ("we", "us", "our"). BashBash Labs acts as the data controller for personal data processed in connection with Parrot under the General Data Protection Regulation (GDPR).
- Product: Parrot
- Company: BashBash Labs (BashBashlabs.com)
- Website: https://www.bashbashlabs.com
- Product Website: https://parrot.wiki
- Contact: hello@parrot.wiki
2) What personal data we collect
a) Data you provide
- Name and email address
- Account information required for login and access
- Content you create and upload, including code snippets, notes, scripts, and encrypted keys ("Parrot Content")
- Context sources you upload or connect to AI Contexts
- Messages, feedback, or support requests you submit
- Payment-related metadata (processed securely by third-party payment providers)
b) Data we collect automatically
We do not use advertising or tracking cookies. We process limited technical data required to operate and secure the service, including:
- IP address
- Device and browser type
- Timestamps and basic event logs
- Pseudonymous product usage events
c) Parrot Content
When you create a parrot, you may upload or paste content including code, text, scripts, and credentials. This content is stored securely and used exclusively to deliver the service to you and any recipients you share it with.
Parrot does not access, read, or use your content for any purpose beyond operating the service. You control who can view your parrots through visibility settings, lock codes, and username restrictions.
d) Encrypted content
When you create an encrypted parrot or use the Keys type, content is encrypted before storage. We do not hold decryption keys for end-to-end encrypted content. Locked parrots require a valid lock code before content is decrypted and returned by the API.
e) AI Contexts
If you use the AI Contexts feature, you may connect text sources, documents, or notes to a context. This content is processed by AI models to generate grounded answers. Context content is associated with your account and is not shared with other users or used to train shared AI models.
3) How we use personal data
We use personal data to:
- Provide, operate, and maintain Parrot
- Authenticate users and manage accounts
- Store and serve Parrot Content to you and your intended recipients
- Process AI Context queries using your connected sources
- Measure product adoption and improve the service
- Communicate service updates and respond to inquiries
- Prevent abuse, fraud, and security incidents
- Comply with legal obligations
4) Legal bases (GDPR)
We rely on the following legal bases:
- Contract (Art. 6(1)(b)) to provide the service you request
- Legitimate interests (Art. 6(1)(f)) to secure, improve, and support the service
- Consent (Art. 6(1)(a)) where required
- Legal obligation (Art. 6(1)(c)) where applicable
5) AI processing
Parrot uses AI models to power the Contexts feature - generating grounded answers from sources you connect. Your context sources are not used to train shared AI models. We may use aggregated or anonymized usage data to improve system performance and reliability.
AI-generated responses are probabilistic and may vary in accuracy. You are responsible for reviewing outputs where accuracy matters.
6) Content retention
Your Parrot Content is retained securely for as long as your account is active or until you delete it. Content may also be subject to expiry settings you configure - including burn-after-read parrots which are deleted upon first access.
Content is never shared with other users beyond what you explicitly configure, sold, or used to train AI models.
7) Service providers
We rely on trusted third-party providers for infrastructure, storage, analytics, and payment processing. Google Analytics processes limited pseudonymous usage events. These providers process limited personal data only as necessary to deliver the service and are contractually required to protect it.
We may disclose personal data if required by law or to protect the rights, safety, and integrity of Parrot and its users.
A list of subprocessors is available upon request.
8) International transfers
Parrot serves users globally. Where personal data is transferred outside the EU or UK, we use appropriate safeguards such as Standard Contractual Clauses and additional protective measures where required.
9) Data retention and deletion
We retain personal data only as long as necessary:
- Account data while your account remains active and for a limited period afterward for security and legal compliance
- Parrot Content until you delete it or it expires per your configured settings
- Context sources until you remove them or delete your account
- Support communications typically up to 12 months after last interaction
- System logs for limited periods appropriate for security and troubleshooting
When you delete content or request account deletion, content is removed from active systems. Residual copies may remain in encrypted backups for a limited time before being permanently overwritten.
10) Security
We use appropriate technical and organizational measures to protect personal data, including end-to-end encryption for sensitive content types, access controls, encryption in transit, and secure storage practices.
11) Your rights
If you are located in the EEA or UK, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, request data portability, and withdraw consent where applicable.
Platform API clients can opt out of aggregate product analytics by sending DNT: 1 or Sec-GPC: 1. Operational usage records remain active for billing, security, and reliability.
You may also lodge a complaint with your local data protection authority.
To exercise your rights, contact hello@parrot.wiki.
12) Age restriction
Parrot is intended for use only by individuals who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has created an account or provided personal data, please contact us and we will delete it.
13) Cookies
Parrot uses only essential cookies required for core functionality such as authentication and session management. We do not use advertising or tracking cookies. If this changes, we will update this policy and request consent where required.