Privacy Policy

This Privacy Policy explains how Parny Teknoloji Yönetim A.Ş. (“Parny”, “we”, “us”, or “our”) collects, uses, and protects personal data when you use the Parny platform and related services (the “Service”). We are the data controller for the personal data described in this Policy, except where Section 7 states otherwise.

You can contact us at support@parny.io or at Orhangazi Mahallesi, Teknopark Caddesi, No:1 Düzce Teknopark, 81950 Merkez/Düzce, Türkiye.

1. Information We Collect

Account and contact data: Name, business email address, company name, role, and similar details you provide when registering, contacting us, or configuring your organization.

Billing data: Processed by our payment provider and Merchant of Record, Paddle (see Section 4). We do not store full card numbers.

Usage data: Information about how you interact with the Service, including log data, device and browser information, IP address, pages viewed, and feature usage, collected to operate, secure, and improve the Service.

Session recording and interaction data: In defined circumstances described in Section 9, we record a replayable session of your visit. This may include mouse movement, clicks, scrolling, page navigation, and the content displayed on the page. Text you type into form fields is masked and is never transmitted to us or to our recording providers. Session recording is used to diagnose faults in the Service and to understand where our interfaces fail users; it is never used to make decisions about an individual.

Customer-connected data: Operational data you connect to the Service — monitoring signals, alerts, incidents, logs, and infrastructure metadata — in order to receive the Service’s functionality. This data may contain personal data relating to your personnel; we process it on your behalf as described in Section 7.

Cookies and similar technologies: Including browser local storage used to keep you signed in. See Section 9.

2. How We Use Your Information

We use personal data to provide, operate, and maintain the Service; authenticate users and secure accounts; process subscriptions and communicate about your account; provide customer support; analyze and improve the Service, including diagnosing faults in our signup and onboarding flows; measure the effectiveness of our marketing; comply with legal obligations; and detect and prevent fraud or abuse.

3. Legal Bases

Where the EU/UK General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Performance of a contract — to provide the Service to you and to your organization.

• Legitimate interests — to secure the Service, prevent abuse, monitor availability and errors, and improve our product, balanced against your rights and freedoms.

• Consent — for non-essential cookies and for session recording, as described in Section 9. Consent is requested before any such processing begins and may be withdrawn at any time.

• Compliance with legal obligations — including tax, accounting, and lawful requests from authorities.

Where Turkish Law No. 6698 on the Protection of Personal Data (KVKK) applies, we process data on the corresponding lawful grounds set out in that law, including Article 5(2)(c) (necessity for the performance of a contract) and Article 5(2)(f) (legitimate interests), and on explicit consent (açık rıza) where required.

4. Sharing and Service Providers (Sub-processors)

We share personal data with the following categories of recipient. We require each to safeguard personal data and to use it only for the purposes we specify. We do not sell personal data.

• Payment and billing — our Merchant of Record, which processes payment and buyer information as an independent controller for billing, tax, and fraud-prevention purposes.

• Cloud hosting and infrastructure — the providers that run the Service and store its data.

• Analytics and product monitoring — providers that measure how the Service is used, report errors and performance, and, in the circumstances described in Section 9, record replayable sessions.

• Security and abuse prevention — including the bot-detection service used on our registration and login forms.

• Communication and support — transactional email delivery and customer-support tooling.

5. International Data Transfers

We may transfer and process personal data in countries other than your own, including the United States. Where we do so, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the EU–US Data Privacy Framework where the recipient is certified, or an equivalent mechanism.

Not all of our providers process data in the same region. Our application monitoring is configured to send data to European infrastructure. Our analytics and session-recording providers operate on global infrastructure, which may include transfers outside the European Economic Area.

Where KVKK applies, transfers abroad are made in accordance with Article 9 of that law.

6. Data Retention

We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

The following periods apply to specific categories:

• Signup session recordings — retained by our recording provider for 30 days. Recordings flagged for review, and a randomly selected sample, are retained for up to 9 months.

• Application monitoring and error data — retained in accordance with our subscription’s data retention settings.

• Analytics data — retained in accordance with the retention period configured in our analytics account.

• Account data — retained for the life of the account and for a period afterwards to meet legal and accounting obligations.

7. Customer-Connected Data (Processor Role)

For operational data you connect to the Service, you act as the data controller and Parny acts as a data processor, processing such data only on your documented instructions in order to provide the Service. Where required, this relationship is governed by a separate Data Processing Agreement, available on request at support@parny.io.

Session recording described in Sections 1 and 9 applies to the Parny interface itself and is a controller activity of ours. It is not applied to customer-connected data.

8. Your Rights

Subject to applicable law, including GDPR and KVKK, you may have the right to access, correct, delete, or restrict the processing of your personal data; to object to processing carried out on the basis of legitimate interests; to receive your data in a portable format; and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at support@parny.io. We respond within the period required by applicable law.

You may also lodge a complaint with your local data protection authority. In Türkiye, this is the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).

9. Cookies, Local Storage, and Session Recording

We use cookies, browser local storage, and similar technologies to operate the Service, keep you signed in, remember your preferences, and understand how the Service is used.

Strictly necessary

These are required for the Service to function and are used without consent. They include the authentication token that keeps you signed in, which is held in your browser’s local storage rather than in a cookie, your selected organization and interface preferences, and the anti-abuse cookie set by our bot-detection provider on our registration and login forms.

Analytics and advertising

These are set by our analytics, advertising-measurement, and session-recording providers. They distinguish one visitor and one session from another so that usage can be reported in aggregate, attribute a subscription purchase to the advertisement that led to it, and link the pages of a single recorded session together.

They are not required for the Service to work, and are set only where you have consented or where consent is not required in your jurisdiction. Your browser’s storage inspector will show you exactly which are present at any time.

Session recording

We record replayable sessions in two distinct situations, and they are governed differently.

Application monitoring. A sampled proportion of sessions inside the Parny dashboard is recorded by our application-monitoring provider for fault diagnosis and performance monitoring. All page text and all form inputs are masked before the recording leaves your browser, so the recording shows the shape and behaviour of the interface rather than its content. We rely on legitimate interests for this processing, and you may object under Section 8.

New-user journey. When a visitor arrives at our registration page from a specific marketing campaign link, we ask for consent to record their session, so that we can find and fix the points at which new users get stuck — in the registration form itself and in their first use of the Service afterwards.

Where that consent is given, the following limits apply:

• Nothing is recorded unless you accept. The recording script is not loaded onto the page beforehand, and declining leaves the Service fully usable.

• Recording stops as soon as you have started your free trial. The purpose is to see where getting started goes wrong, so it ends at the point it has gone right.

• Recording is confined to the browser tab you arrived in, and ends when that tab is closed. It does not resume in a new tab or on a later visit.

• Existing customers signing in normally are never recorded this way.

In both cases, anything you type into a form field — including passwords, email addresses, and free-text input — is masked and never reaches us or our providers.

Managing your choices

Where we ask for consent, you can decline at the prompt. To withdraw consent already given, clear your browser’s cookies and site data for this site, which also removes the record of your choice and lets you answer again. You can block or delete cookies through your browser settings; blocking strictly necessary cookies and storage will prevent you from signing in.

10. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, or misuse. These include encryption of data in transit, access controls and role-based permissions within the Service, and masking of form input and page content in the monitoring tools described in Section 9 so that sensitive content is not captured in recordings.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact support@parny.io and we will delete it.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the Service or by email. The “Last updated” date above reflects the latest revision.

13. Contact

For privacy questions or to exercise your rights, contact us at support@parny.io.

14. Automated Decision-Making

We do not make decisions producing legal or similarly significant effects concerning you based solely on automated processing.

The Service includes features that use automated analysis and machine learning to summarize, correlate, and prioritize the operational data you connect — for example, grouping related alerts or suggesting a likely cause for an incident. These features operate on customer-connected data under Section 7, produce recommendations for your team rather than decisions about individuals, and remain subject to your review.