Legal

Privacy Policy

Last updated: September 2026  ·  Parr, Lahore, Pakistan

Parr ("we", "our", "us") is a business tool for home businesses in Pakistan. This policy explains what information we collect, how we use it, and what choices you have. We keep it short and in plain language.


1. What we collect

Account information. When you sign up, we collect your email address and the password you create (stored as a secure hash, we never see it).

Business data you enter. Everything you add to the Parr Ledger, client names, phone numbers, measurements, orders, payments, recipes, bookings, vendor details, and follow-ups, is stored so you can access it across devices. This data belongs to you.

Business profile. Your business name, type, and display preferences (accent colour, shortcuts) are stored as part of your account.

Contact form submissions. If you fill out a demo request or interest form on our site, we receive your name, email, city, and business type.

Technical data. Basic usage data (device type, browser) may be logged by our hosting provider (Netlify) and database provider (Supabase) for security and reliability. We do not use third-party analytics trackers.


2. How we use your information

We do not sell your data. We do not use your data for advertising. We do not share it with third parties except the infrastructure providers listed below.


3. Infrastructure providers

Your data is stored and processed using:

Supabase and Netlify are bound by confidentiality obligations and do not use your data for their own purposes. Deepgram and Google process what Parr Capture sends them under their API terms and our settings with them.


4. Data retention

Your account data is kept for as long as your account is active. If you delete your account, all your data (clients, orders, measurements, etc.) is permanently deleted from our database. This cannot be undone.

Contact form submissions are retained in Netlify for up to 12 months, then deleted.

Parr Capture keeps your recordings and uploaded files for at most 24 hours, and the draft made from them (including the transcript) for at most 7 days. Section 10 explains the details.


5. Your rights


6. Security

All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Database access is protected by row-level security, each user can only access their own records. We review our security practices regularly.


7. Children

Parr is intended for adults running home businesses. We do not knowingly collect data from anyone under 18.


8. Changes to this policy

If we make material changes, we will notify active subscribers by email before the changes take effect. The "Last updated" date at the top of this page will always reflect the current version.


9. AI document import (beta)

Some accounts have access to an invite-only beta feature that lets you photograph or upload a business document (a supplier price list, a client list, a notebook of orders, and similar) and turns it into an editable draft you can review before anything is saved. Access to this beta is granted individually by us to specific accounts and is separate from your subscription plan, having it does not depend on which plan you are on.

You choose when this happens. Nothing is scanned, uploaded, or processed automatically. An image is only sent for processing when you deliberately take a photo or pick a file inside the import screen.

What is sent, and to whom. The single image you select is sent, together with your business type and the type of document you told us you're importing, to our server (Supabase Edge Functions) and from there to Google's Gemini API, which reads the image and returns structured text back to our server. Google acts as an AI processing provider for this one feature, the same way Supabase and Netlify act as infrastructure providers elsewhere in this policy. We do not use Google Search grounding or any feature that would let Gemini query the open web with your data.

We do not keep your photo. The image is processed in memory by our server and discarded immediately after Gemini responds, it is never written to our file storage and never saved anywhere by Parr. Google's own retention for API requests is governed by our project-level settings with Google; before this beta is made available to any account, we configure those settings to disable request logging for this feature.

The draft, not the photo, is what you see. What comes back, names, prices, quantities, phone numbers, and similar fields Gemini was able to read, is held only in your browser, in a storage area scoped to that browser tab, for up to 30 minutes. It is never written to our database. Closing the import screen, cancelling, or letting the 30 minutes lapse without confirming all discard the draft immediately.

Nothing reaches your real business data without your confirmation. You review every extracted field, correct anything wrong, resolve any possible duplicates, and explicitly confirm before a single client, order, price, or any other record is created or updated in your account.

Original script is preserved exactly. Names written in Urdu script, Roman Urdu, or English are never automatically translated or transliterated by this feature.

What we keep about each import attempt. Separately from the draft, we keep a small operational record of each import attempt: a timestamp, which business/document type you selected, whether it succeeded, and technical details like which AI model responded. This record never contains the image, the extracted text, or any business data, and is used only for reliability and to enforce a daily limit on how many imports an account can run.


10. Parr Capture (voice notes, photos and text)

Parr Capture, available on the Plus and Premium plans, turns something you share (a voice note, a photo, a PDF, or text you paste) into a draft of business records such as customers, orders, payments, expenses, measurements and reminders.

You choose when this happens. Parr only receives a recording, file or text when you record, pick or paste it in Capture. It never listens in the background and never reads your other files or messages.

What is sent, and to whom. Your recording or file is uploaded to private storage with our database provider, Supabase. A voice note is turned into text by Deepgram, and that text (or your photo, PDF or pasted text) is read by Google's Gemini API to draft the records. Section 3 lists exactly what each provider receives.

Nothing is saved without your confirmation. You review every drafted record, answer any question Parr asks, and confirm before anything is added to or changed in your business data. Deleting a record needs its own separate confirmation. Parr never sends messages to your customers.

What we keep, and for how long. The recording or file is deleted when you save or cancel the capture, and at the latest after 24 hours, unless you ask to keep a photo, which is then added to your photos. The draft, including the transcript, is deleted after 7 days whether or not you saved it. Records you confirm become part of your business data, like anything you enter yourself. Everything Capture keeps is deleted with your account.

How we measure accuracy. When you correct a draft before saving it, we record which fields you changed and the corrected values, so we can see where Capture makes mistakes. Body measurements are never recorded this way. We also record timings and technical details, such as which model responded, without the content of your note.

Helping improve Capture is optional. For a voice note in your own voice, or a photo or PDF in which you have covered names, phone numbers and account details, you can choose to let Parr staff review it together with the corrected result. It is off unless you tick it, applies to that one capture only, and the original is deleted within 30 days. Captures containing body measurements, pasted text and bank statements can never be shared this way.


11. Contact

Questions about this policy or your data? Reach us at: