Privacy Policy

PARALLAX is a self-discovery application that builds a living portrait of who you are through AI-powered reflection. PARALLAX is operated by its founders and is currently in private beta. For privacy questions, contact us at support@prlx.dev.

• Email address - used to identify your account and send product communications if you opt in.
• Password - stored as a one-way bcrypt hash. We never store your password in plaintext.
• Birth data - date of birth, time of birth (optional), and place of birth (optional). Used to calculate astrological and numerological context for your profile.
• Reflective responses - your answers to 25 introspective questions. These form the primary input to your PARALLAX profile.
• Synthesized profile data - the AI-generated portrait of your patterns, strengths, and growth edges, derived from your responses.
• Usage data - basic interaction signals such as login events and feature interactions, used to improve the product.

• To generate and maintain your PARALLAX profile and daily insights.
• To improve the product and the quality of synthesized profiles.
• To send you product updates and communications, if you have opted in.
• To log anonymized safety flags internally - see the section on safety logging below.

We do not sell your data. We do not share it with advertisers. We share limited data only with the following service providers, each bound by their own data processing terms:

• Anthropic- your reflective responses are sent to Anthropic's API for AI synthesis. Anthropic processes this data to generate your profile but does not retain it beyond the API call, per their data processing terms.
• Upstash - your data is stored in an Upstash Redis database. Upstash is SOC 2 compliant and stores data at rest with encryption.
• Vercel- PARALLAX is hosted on Vercel. Your requests pass through Vercel's infrastructure. Vercel does not have access to your stored data.
• AstroAPI (astrology-api.io) - your birth data (date, time, and city/country of birth) is sent to AstroAPI to calculate the astrological context used in your profile. AstroAPI does not receive your email address or any of your reflective responses.
• Nominatim (OpenStreetMap) - when you type your place of birth, the location text and resulting coordinates are sent to Nominatim for geocoding. Nominatim is operated by the OpenStreetMap Foundation under their published usage policy. No account-identifying information is sent with geocoding requests.
• Sentry - we use Sentry to capture application errors so we can fix them. Stack traces and error context are sent to Sentry. User PII (email address, request bodies, personal identifiers) is not sent by default; only explicit, non-identifying fields chosen by our code reach Sentry.
• PostHog - we use PostHog for product analytics. PostHog receives event metadata about onboarding progress, feature interactions, and account lifecycle events. Your reflective responses, profile narrative, and dialogue messages are not sent to PostHog.
• Resend - we use Resend to send transactional emails (verification, password reset, daily reminders). Resend receives your email address and the body of those messages for delivery.

If our safety system detects language in your reflective responses that may suggest a mental health crisis, a metadata flag is logged internally. This flag contains only the severity level, the matched indicator terms, and the question identifier. It does not contain your actual response text. These flags are used to improve our safety systems and are deleted when you delete your account.

Your account data is retained for as long as your account is active. If you request account deletion, all of your data - including your profile, responses, birth data, and safety flags - will be permanently deleted within 30 days. You can initiate account deletion from your account settings at any time.

• Access - you may request a copy of the data we hold about you.
• Correction - you may request corrections to inaccurate data.
• Deletion - you may delete your account and all associated data at any time from your account settings.
• Export - you may request an export of your profile and responses by contacting us at support@prlx.dev.

This Privacy Policy is governed by the laws of [GOVERNING LAW: e.g. State of ___, USA], without regard to conflict of law principles. Any disputes arising from this Privacy Policy will be resolved in the courts located in [JURISDICTION VENUE: e.g. County of ___, State of ___].

If we make material changes to this Privacy Policy, we will notify you by email at least 14 days before the changes take effect. Continued use of PARALLAX after that date constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or concerns, please contact us at support@prlx.dev.