parcelatoPrivacy policy
In plain words. Parcelato stores what your family writes down about a house: the papers, the things, the people and the decisions. Your real name and email stay in a private profile; on a record you appear as a role unless you choose otherwise. We never sell data, never show ads and never hold money. Parcelato is a global, early-stage product built by someone who has lived through more than one of these situations and wants other families to use and share it. It is run by its founder as an individual, not a company. We are honest about where we stand: this policy is written to the standard of EU data-protection law (GDPR) because it is the strictest one that applies to us, but we have not yet completed a formal compliance programme and we hold no certification (no ISO 27001, SOC 2 or similar). By creating an account you accept this policy as it stands today.
1. Who is responsible for your data
The data controller is Parcelato, an early-stage product operated by its founder as an individual; it is not yet a company. If a company is formed to run Parcelato, it will take over this role and we will tell you by email and on this page at least 30 days before. Contact for anything in this policy: info@parcelato.com.
2. What we collect
2.1 Your account
- Email address and password (stored hashed; we never see your password).
- The name you give us, your display preference (role, nickname, alias or real name), language, and an optional profile photo.
- Sign-in records: time, approximate location from your IP address, device type.
2.2 The record your family keeps
- The house: address, tenure, a value range, ownership shares.
- The papers: files you upload (deeds, wills, tax bills, insurance, bank letters) and what you tell us about them (kind, dates, amounts).
- The things: photos, titles, condition, value ranges, purchase prices and receipts, wishes and the memories attached to them, claims and votes, and who kept what.
- The people: the roles on the record (for example "Mom", "executor", "son or daughter"), whether a person has passed, and — only if each person chooses — their name.
- The rules and decisions: what the family agreed, who agreed and when.
- The change log: every change, the role that made it and the time. The log is written by the database, not by the app, and cannot be edited by anyone, including us.
2.3 Identity verification
When a person verifies their identity, the check is run by a licensed verification provider for their country. The provider receives the identity document and selfie. Parcelato receives only the result (verified or not, the date and the country) and never stores the document or the biometric data.
2.4 Payments
If you buy a plan, payment is handled by a payment provider. We receive your plan, the amount, the date and the last four digits of the card. We never see or store full card numbers.
2.5 Messages to us
Emails to info@parcelato.com, forms on the site, and support conversations.
2.6 Access requests
While Parcelato is in early access, the email address and optional note you send when requesting an account, and whether and when we granted access. Legal basis: steps before a contract at your request (6.1.b). Kept for 12 months after a decision.
Special-category data. A record about a family naturally touches sensitive facts — that a person has passed, that a couple is separating, sometimes a health condition mentioned in a memory. We process these only because you or your family chose to write them into your own record, which is the legal basis of explicit consent under Article 9(2)(a) GDPR. We never use them for anything other than showing the record to the people you added.
3. Why we use data and on what legal basis
| Purpose | Data | Legal basis (GDPR art. 6) |
|---|---|---|
| Provide the record to you and the people you add | Account, record, change log | Contract (6.1.b) |
| Verify who is who on a record | Verification result | Contract (6.1.b); the provider's own check: your consent to the provider |
| Recognise a thing from a photo and suggest a category, condition and value range | The photo you choose to analyse | Contract (6.1.b) |
| Charge for a plan, send receipts, prevent fraud | Plan, amount, payment result | Contract (6.1.b); legal obligation (6.1.c) for invoices and tax |
| Send service emails: confirmation, password reset, invitations, plan notices | Contract (6.1.b) | |
| Keep the service secure and investigate abuse | Sign-in records, IP, logs | Legitimate interest (6.1.f) |
| Understand how the product is used, in aggregate | Page views and feature use, without cross-site tracking | Legitimate interest (6.1.f) |
| Tell you about Parcelato (newsletter) | Consent (6.1.a) — only if you tick the box; unsubscribe in every email | |
| Answer a legal request | Whatever the request lawfully requires | Legal obligation (6.1.c) |
We do not profile you, make automated decisions with legal effect about you, sell data, or share data with advertisers.
4. Sharing inside a record — what other people see
A record is shared by design. Everyone you add to a record, in the role you give them, can see the house, the papers, the things, the roles and the change log of that record, according to their role (owner, editor, viewer, professional). What they see of you is the display you chose: a role, a nickname, an alias or your real name. Your email is never shown on a record. A professional (lawyer, notary, agent) sees names only for the people who switched on "show my real name to professionals".
If you add another person to a record — a parent, a sibling, a notary — you are responsible for having the right to do so. Add them by role; a name is optional and should be theirs to reveal. Anyone added can ask us at any time what is held about them and have their name removed from the record.
5. Who processes data on our behalf
We run on a small number of specialist providers, each under its own standard data-processing terms (the kind GDPR Article 28 asks for); we have not yet had these contracts reviewed by a lawyer. Current providers:
| Provider | What for | Where |
|---|---|---|
| Lovable (Lovable Cloud) and Supabase | Application hosting, database, file storage, authentication | EU and USA |
| Netlify | Hosting of parcelato.com and its forms | USA (global edge) |
| Google (Gemini, via the hosting platform's AI gateway) | Photo recognition for things, only on photos you choose to analyse | USA / EU |
| OpenStreetMap Foundation (Nominatim) | Turns your location into a shop and town name, only when you take a photo of a thing and allow it | UK / EU |
| A licensed identity-verification provider, chosen per country | Identity checks | Depends on your country |
| A payment provider | Card payments and receipts (when plans go on sale) | EU / USA |
| A transactional email provider | Service emails | EU / USA |
We will keep this list current. We do not name the verification or payment provider in the product because it changes by country; you can ask us which one handled your check.
6. International transfers
Some providers process data in the United States. Where that happens we rely on the EU–US Data Privacy Framework for providers certified under it, and otherwise on the European Commission's Standard Contractual Clauses, with additional safeguards (encryption in transit and at rest, access limited to the provider's operational need). You can ask us for a copy of the clauses that apply.
7. How long we keep data
- Your record stays as long as your account is active and the plan that covers it is active or free.
- When a paid plan lapses: we write to you on day 1, day 30 and day 59; on day 60 the record becomes read-only; after six months read-only we delete it, with a final notice one month before. Reactivating at any point restores everything.
- Settlement records stay readable as a permanent archive for as long as the account exists.
- When you delete your account: your profile and the records you own are deleted within 30 days, except where another person on a record has the right to keep their own copy of the shared record, and except for invoices and tax records, which the law requires us to keep (generally 4 to 6 years).
- Backups are overwritten within 35 days.
- Sign-in and security logs are kept for 12 months.
8. Security — and what we do not have
What we do: all traffic is encrypted (TLS); data is encrypted at rest by our hosting provider; every record is protected by row-level access rules so a person can only read the records they belong to; files are in private storage, never on a public link; the change log is append-only and written by the database; passwords are hashed; identity documents never reach our systems; access by the founder to production data is limited to support you ask for, and is itself logged.
What we do not have, honestly: Parcelato holds no security or privacy certification — no ISO 27001, no SOC 2, no national seal — has not yet had an independent security audit, has no data-protection officer, no formal GDPR compliance programme (no records of processing, no impact assessment, no reviewed processor contracts) and no legal review of this policy. We are an early-stage product run by one person, and this policy describes what we actually do today rather than what a certified company would do. We will state on this page when that changes. If this matters for your situation — for example a contested estate with professional advisers — consider keeping your own copies of key papers, which you can export at any time.
If we learn of a breach that is likely to put your rights at risk, we will tell you and the supervisory authority without undue delay and within the 72 hours the law requires.
9. Your rights
Wherever you live, you can ask us to: access the data we hold about you; correct it; delete it; restrict or object to processing based on legitimate interest; export your data in a machine-readable form; and withdraw consent at any time where consent is the basis. Most of this you can do yourself inside the app (profile, export, delete account). For anything else write to info@parcelato.com; we answer within one month. You will not be treated differently for exercising a right.
You also have the right to complain to the data-protection authority of your country (in the EU, listed at edpb.europa.eu). We would appreciate the chance to resolve the matter first.
9.1 Where you live
Parcelato is used by families anywhere. This policy is written to the standard of the EU's GDPR, which is the strictest rule that applies to us; wherever you live you get at least the rights above. On top of that:
- EU/EEA, UK and Switzerland: GDPR / UK GDPR / FADP apply in full as described here.
- Colombia (Ley 1581 de 2012): creating an account is your prior, express and informed autorización for the treatment described in this policy, including the sensitive data a family record can contain (section 2), which you may refuse to provide. You have the rights to conocer, actualizar, rectificar y suprimir your data and to revoke the authorisation, by writing to info@parcelato.com; we answer consultas within 10 business days and reclamos within 15, as the law provides. You may complain to the Superintendencia de Industria y Comercio. Data is stored outside Colombia, in countries listed in section 6, which your authorisation also covers.
- United States: we do not sell or share your personal information for advertising, do not use it for targeted advertising, and do not profile you. Where your state gives you rights to access, correct, delete or port your data or to opt out of a sale, you have them here regardless of state; write to info@parcelato.com and we will not discriminate against you for asking. Parcelato is for adults only and is not directed at children under 13.
- Everywhere else: the rights in this section apply to you by contract even where your local law gives fewer. If your local law gives more, we will honour it; tell us which law you rely on.
We will add the specific rules of a country when a meaningful number of families there use Parcelato.
10. Cookies and analytics
parcelato.com sets no cookies and loads no third-party scripts, fonts or trackers; fonts and scripts are served from our own domain. Waitlist forms are stored by our hosting provider. app.parcelato.com uses strictly necessary storage only: a session token to keep you signed in and your language preference. Aggregate usage statistics (page views, feature use) are collected by our hosting provider without cross-site tracking or advertising identifiers. Because nothing beyond strictly necessary storage is used, no cookie banner is shown. If we ever add optional analytics or marketing tools, we will ask first.
11. Children
Parcelato is for adults. You must be 18 or older to create an account. A record may mention children (for example "the children's things" when a couple separates); that information is entered by adults about their own family and is covered by section 2.
12. Photo recognition and AI
When you add a thing, you can let Parcelato look at the first photo and suggest a category, a condition and a value range. The photo is sent to the AI provider in section 5 for that one request; it is not used to train any model, and the suggestion is always shown to you to confirm or change before it is saved. When you ask Parcelato to read a receipt, the receipt photo is sent the same way, to suggest the price, date and shop for you to check. Nothing else — not your other papers, not your people, not your memories — is sent to an AI provider.
Location when you take a photo. When you take a photo of a thing, the app can ask your browser for your location once, to suggest the shop and town where you bought it. The location is sent to OpenStreetMap (Nominatim, see section 5) only to find the place name. It is not stored. Only the shop and town you confirm are saved with the thing. You can refuse in your browser, and you can change or delete the place at any time.
Your own AI key (planned). We intend to let you use your own account with an AI provider (for example Anthropic or OpenAI) instead of ours. If you add a key: it is encrypted before it is stored, with a key held separately on our server; it is never shown back to you or sent to your browser; it is decrypted only in memory, for the moment your photo is analysed, and then discarded. Your photos then go to the provider you chose, under that provider's terms and privacy policy, and that provider becomes a processor you appointed rather than one we appointed. Encryption protects the key if our database were exposed; it cannot protect it if our server itself were compromised, so use a dedicated key with a spending limit, never your main one, and you can remove it at any time. We will update this section and the providers table when the feature ships.
13. Changes to this policy
We will post changes here with a new version number and date. For changes that reduce your rights or add new uses of data, we will email you at least 30 days before they take effect and, where the law requires it, ask for your consent again. Continuing to use Parcelato after that date means you accept the new version.
14. Contact and complaints
info@parcelato.com — the only address we have; it reaches the founder directly. We have not appointed a data-protection officer, as the law does not require one at our size; the founder is responsible and answers personally.