Privacy Policy

Effective October 16, 2026

1. Who we are

Par is operated by Primelight IT PH ("we", "us"). This policy explains what information the Par mobile app and the Par service (together, "Par") handle, and why. Questions: [email protected].

2. Information we collect and how we use it

Your account

• Name, email address, and password when you create an account. Passwords are stored only as secure hashes.
• Sign in with Google or Apple: the account identifier and email address the provider shares with us, to sign you in.
• Verification and password-reset codes: sent to your email and stored only as secure hashes; they expire after 15 minutes.
• Technical information needed to run Par securely, such as your IP address for rate limiting and error logs. We never log your messages, emails, passwords, codes, or access tokens.

Your chats

Your conversations with Par are stored on your phone and answered by AI that runs on your phone. They are not sent to our servers.

Apps you connect

Connecting an app is optional and read-only: Par can't send, post, change, or delete anything in a connected app. You can disconnect any app at any time in Par.

• Gmail and Google Calendar: Par reads your emails (Gmail read-only access) and your calendar events (Calendar events read-only access) directly from Google on your phone, only when you ask. This data is never sent to our servers. Google's sign-in keeps your authorization in your phone's secure storage.
• Slack: to finish connecting, our server exchanges Slack's one-time code for your access token and hands the token to your phone once (it waits, encrypted, for up to 10 minutes). After that, searches go from your phone straight to Slack.
• Discord: Par works only in servers where you add Par's bot. We store the server's ID and name with your account. When you ask, recent messages from that server pass through our servers to your phone; they are not stored.
• Shopee, Lazada, and TikTok Shop (sellers): we store your shop's identifiers and access tokens, encrypted, so Par can read your shop's orders when you ask. Orders are fetched live and not stored, and we never request buyers' names, addresses, phone numbers, or messages.
• Shoppers' orders: answered from order emails in your Gmail, on your phone, as described above.

Location and other context

Par uses the country and city you choose in Settings (or your phone's region) to answer questions like the time or your country's leaders. These stay on your phone; Par does not use GPS. For facts such as current leaders, Par looks up public data from Wikidata, sending only the country's public identifier.

3. Google user data

Par's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Gmail and Calendar data:

• is used only to provide the features you ask for in Par, such as listing and summarizing your emails or showing your schedule;
• is processed on your phone and is not transferred to us or to anyone else;
• is not used for advertising, is not sold, and is not read by people;
• is not used to train or improve AI or machine-learning models.

4. Sharing

We don't sell or rent personal information, and we don't share it for advertising. We use a few service providers to run Par, only for that purpose:

• Laravel Cloud hosts our servers and database.
• Resend sends verification and password-reset emails.
• Google and Apple, if you choose to sign in with them.
• The apps you connect (Google, Slack, Discord, Shopee, Lazada, TikTok Shop) receive Par's requests on your behalf, under their own privacy policies.

We may disclose information if required by law or to protect the safety of our users and service.

5. Retention and deletion

• Your account information is kept until you delete your account.
• Disconnecting an app deletes its access tokens. Signing out keeps your connections on that phone for your next sign-in; another account signing in on the phone never sees them.
• Deleting your account (Settings → Profile → Delete account) deletes your account and connection data from our servers and your chats from that phone.

6. Security

Data travels over encrypted connections (HTTPS). Connection tokens are encrypted at rest, and passwords and codes are stored only as secure hashes. No method of storage or transmission is completely secure, but we work to protect your information.

7. Your rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and similar laws, you may request access to, correction of, or deletion of your personal information, object to its processing, or ask for a copy. Contact [email protected]. You may also file a complaint with the National Privacy Commission of the Philippines.

8. Children

Par is not directed to children under 13, and we don't knowingly collect their personal information.

9. Changes

We'll update this page when our practices change and change the effective date above. For significant changes, we'll let you know in the app or by email.

10. Contact

Primelight IT PH · [email protected]