This policy explains what personal data Parity collects through parity.ninja, the early access list and the Parity console, why, and the rights you have over it under the EU General Data Protection Regulation (GDPR).
Who we are
Parity operates parity.ninja and the Parity platform and is the controller of the personal data described here.
For anything about this policy or your data, email privacy@parity.ninja.
What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Early access request: first name, last name, work email, company, and when you submitted it | Review your request, set up your account and contact you about it | Steps you ask us to take before entering into a contract (Art. 6(1)(b)) |
| Console account: your GitHub or Google account ID, name, email and avatar, and your organization roles | Sign you in, enforce permissions and run the service | Performance of our contract with you or your organization (Art. 6(1)(b)) |
| Activity history: actions taken in the console, CLI or API, by you or by agents acting for you | Audit logging for your organization, security and support | Contract (Art. 6(1)(b)) and our legitimate interest in securing the service (Art. 6(1)(f)) |
| Technical data: IP address, user agent and request metadata | Rate limiting, abuse prevention, security and troubleshooting | Our legitimate interest in keeping the service available and secure (Art. 6(1)(f)) |
We collect this data directly from you, or from GitHub or Google when you choose to sign in with them. You don't have to give it to us, but without it we can't process your request or give you an account.
We don't use your data for advertising, don't sell it, and don't make decisions about you based solely on automated processing.
Who we share it with
We share personal data only with service providers that process it on our behalf, under a data processing agreement, and only as needed to run Parity:
| Provider | Role | Location |
|---|---|---|
| Google Cloud | Hosting, databases, storage and logs | europe-west1 (Belgium) |
| GitHub, Google | Sign-in, when you choose them | Their own policies apply |
We may also disclose data where the law requires it, or to protect the rights and safety of our users and of Parity.
International transfers
We store your data in the European Union. Our providers may access it from outside the European Economic Area, for example for support. Where they do, the transfer is covered by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
How long we keep it
| Data | Kept for |
|---|---|
| Early access request | Until your account is set up or you ask us to delete it, and at most 24 months after your last contact with us |
| Console account | While your account is active. When you ask us to close it, we delete it within 30 days |
| Activity history | Changes 400 days, reads 90 days |
| Request logs | 30 days |
| Rate-limiting data | 1 hour, in memory only |
| Database backups | 7 days |
Your rights
Under the GDPR you can ask us to:
- give you a copy of your personal data (access and portability);
- correct it (rectification);
- delete it (erasure);
- limit how we use it (restriction);
- stop processing it where we rely on legitimate interest (objection).
Right to object. Where we process your data on the basis of our legitimate interests (technical data and activity history), you can object at any time on grounds relating to your particular situation, and we will stop unless we have compelling legitimate grounds that override your interests.
Email privacy@parity.ninja from the address we hold. We answer within one month and may ask you to confirm your identity first.
You can also lodge a complaint with the data protection authority in the EU country where you live or work, or where you believe your rights were infringed.
Data in your applications
Applications you run on Parity may process personal data of their own users. For that data your organization is the controller and Parity is a processor, acting only on your instructions under our data processing agreement. This policy doesn't cover it.
Security
All traffic to parity.ninja and the console is encrypted with TLS. Our databases are reachable only from our private network, are encrypted at rest, and only authorized Parity staff can access them.
Children
Parity is a service for businesses and isn't directed at children under 16. We don't knowingly collect their data.
Changes
We'll update this page when our practices change and change the date at the top. If a change materially affects how we use data you've already given us, we'll email you before it takes effect.