Privacy Policy

Effective 7 August 2026

1. Who we are

Parsilly is operated by Favorite Dude LLC, an Arizona limited liability company. In this policy “we” and “Parsilly” mean Favorite Dude LLC, and “you” means the person or organisation holding a Parsilly account.

For your account data we are the controller. For the email we parse on your instructions we are a processor and you are the controller — section 2 explains why that distinction matters more here than in most privacy policies.

2. Two kinds of data, and why the distinction matters

Most privacy policies describe one relationship. Parsilly has two, and they carry different obligations.

Account data is information about you as our customer — your name, email address, password, billing details, and how you use the application. We decide how this is handled, and this policy governs it.

Parsed email data is the content of messages delivered to the mailboxes you create, and the fields extracted from them. This routinely contains personal information about third parties — the people who emailed you or whose details appear in those messages. You decide what to collect and why; we only process it on your instructions. In data protection terms you are the controller and we are the processor. Your own privacy notice, not this one, governs your relationship with those individuals.

3. Account data we collect

We do not use advertising, analytics, or tracking cookies. The only cookie the application sets is a session cookie that keeps you signed in.

4. Email data we process for you

When you create a box, we provision a mailbox and check it on a schedule. For each message we store:

• the full message as delivered — sender, recipients, subject, body, and headers
• any attachments, stored as files
• the fields your rules extract, as separate records
• the message identifier, so the same message is never counted twice

We keep the original message because your rules can change; without it, a corrected rule could not be applied to mail you have already received.

We do not read, analyse, mine, or sell this content. It is not used to train anything. Our staff access it only when you ask us to investigate a problem, or where we are legally compelled.

Your responsibility. You must have the right to receive and process the mail you direct to Parsilly, and to hold information about the people in it. We cannot assess that for you.

5. How long we keep things

You can ask us to delete your data at any time by emailing admin@parsilly.com. We will action it and confirm. Backups are the exception noted above.

6. Who else is involved

We keep this list short deliberately. We share data with:

• Our hosting provider. The application, mailboxes and database run on servers we control at a commercial hosting provider in the United States.
• Our payment processor (Stripe). Card details go directly to Stripe from your browser; we never receive them. Stripe receives your billing name, email, and the amount charged.
• Email delivery. Service emails such as receipts and alerts are sent from our own mail server.

We do not sell personal information, and we do not share it for advertising. We may disclose information where legally required, and will tell you unless prohibited from doing so.

7. Security

Concretely, rather than in the abstract:

• All traffic is served over HTTPS.
• Account passwords are stored as bcrypt hashes and are not recoverable. Nobody here can read yours, including us.
• Password reset links are single-use, expire within the hour, and are stored only as a hash — so even our database does not hold a working reset link.
• Changing or resetting your password signs out every other browser your account is signed in on.
• Mailbox passwords are encrypted at rest using AES-256-GCM, with the key held outside the database.
• Every database query is scoped to your account, so one customer cannot reach another's data.
• Session cookies are restricted to HTTPS, are not readable by scripts, and are reissued when you sign in.
• Forms are protected against cross-site request forgery.
• Backups run nightly and are stored outside the public web directory.

No system is immune. If a breach affects your data, we will tell you what happened, what was involved, and what we have done — promptly, and without waiting to be asked.

8. Your rights

Depending on where you live you may have rights to access, correct, delete, or export your personal information, to object to certain processing, and to complain to a regulator. Email admin@parsilly.com and we will action it.

If your request concerns email content we hold for one of our customers, we will refer you to that customer, because they decide what happens to it. We will help them respond.

9. Children

Parsilly is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe we have, contact us and we will delete it.

10. International transfers

Our servers are in the United States. If you are elsewhere, using Parsilly means your data is processed there.

11. Changes

We will post any changes here with a new effective date, and email you if the change is material. Continuing to use Parsilly after a change means you accept it.

12. Contact

Questions about this policy, or any request about your data, go to admin@parsilly.com. In writing: