Security and data
How Parla handles your data
In Parla's Postgres database on Render, separated per workspace; GitHub access tokens are encrypted at rest (AES-256-GCM). Strings are sent to Anthropic's API only to translate them.
What Parla holds
- Source strings, keys and descriptions from uploaded locale files
- Translations, review decisions, glossary and translation memory
- Team members' names and email addresses
- GitHub repository name, branch and file paths, and an encrypted access token when GitHub is connected
- Sample files uploaded to /try (deleted after 24 hours)
How long it’s kept, and how to export or delete it
Workspace data is kept until you delete it (a project or the whole workspace, from Settings). AI call logs keep the model, length and cost, never text, for 90 days. Sample files and their translations are deleted after 24 hours.
The full detail is in Parla’s data export and deletion policy.
Who processes it
Service providers (subprocessors), each on our instructions and only for the purpose shown:
- Render: hosting, databases and backups, in the United States.
- Stripe: subscription and license payments (card details go to Stripe, never to us).
- Resend: sending email.
- Anthropic: translating the text you upload, with its context.
Questions and security reports
Parla is run by New Odyssey. To ask what we hold about you, to have it exported or deleted, or to report a security problem, email clio@new-odyssey.com. The privacy policy covers the rest.