Privacy Policy

Last Updated:

Aug 3, 2026

1. Introduction

Real Simple Labs, Inc. ("Real Simple Labs," "we," "our," or "us") operates Parker AI (also marketed as HeyParker.ai) ("Parker" or the "Service"), an AI agent platform that provides intelligent automation and assistance services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Account Information

• Email address and authentication credentials
• Profile information (name, organization)
• Billing and payment information

2.2 Usage Data

• API requests and responses
• Agent interactions and conversation logs
• Performance metrics and usage analytics
• Device and browser information
• IP addresses and location data

2.3 AI Training Data

• User inputs and prompts submitted to AI agents
• Feedback on AI responses and corrections
• Custom agent configurations and workflows

2.4 Technical Data

• Server logs and error reports
• Database queries and response times
• Authentication tokens and session data

3. How We Use Your Information

3.1 Service Provision

• Process and respond to your AI agent requests
• Maintain and improve platform functionality
• Provide customer support and troubleshooting

3.2 AI Model Enhancement

• Train and improve our AI models (with appropriate anonymization)
• Develop new features and capabilities
• Optimize response accuracy and performance

3.3 Platform Operations

• Monitor system performance and security
• Conduct analytics for service improvement
• Ensure compliance with usage policies

4. Data Processing and Storage

4.1 Infrastructure

• Application hosting and serverless compute on Vercel
• Database, authentication, and file storage managed through Supabase, with encryption at rest (Supabase's underlying infrastructure runs on Amazon Web Services)

4.2 Data Retention

• Conversation logs: 90 days (unless explicitly deleted)
• Account data: Duration of account plus 30 days
• Analytics data: 24 months in aggregated form
• Billing records: As required by law

4.3 Data Security

• TLS encryption for data in transit between your browser, our application, and our infrastructure providers
• Encryption at rest for stored data, provided by our database and storage vendor (Supabase)
• Authentication via short-lived access tokens with rotation, including for the Save to Parker browser extension
• Application-level access controls scoped by organization, brand, and role
• Backup and disaster-recovery operated by our infrastructure providers (Supabase, Vercel)
• No method of transmission or electronic storage is completely secure; we cannot guarantee absolute security

5. Third-Party Services

We integrate with the following services that may process your data:

5.1 Essential Services

• Supabase: database, authentication, and file storage (Supabase's underlying infrastructure runs on Amazon Web Services)
• Vercel: web application hosting, edge network, and serverless compute
• Google: sign-in identity provider for the Google OAuth method (one of two sign-in options Parker offers, alongside email and password; both are available in the Save to Parker browser extension)

5.2 Analytics and Monitoring

• Sentry: server-side error tracking — receives request URL, HTTP method, response status, error message, and stack trace when a server-side error occurs (no saved-idea content, no media files, no session tokens)
• Performance monitoring tooling
• Usage analytics (anonymized)

5.3 Payment Processing

• Secure payment processors for billing
• PCI-compliant transaction handling

6. AI-Specific Privacy Considerations

6.1 Model Training

• Personal data is anonymized before use in model training
• You can opt out of having your data used for training
• We implement differential privacy techniques where applicable

6.2 AI Responses

• AI responses are generated based on your inputs and our models
• We do not guarantee accuracy of AI-generated content
• Conversations may be reviewed for quality assurance

6.3 Data Minimization

• We only collect data necessary for AI functionality
• Automatic deletion of unnecessary conversation data
• Regular audits of data collection practices

7. Your Rights and Controls

7.1 Access and Portability

• Request copies of your personal data
• Export conversation history and agent configurations
• API access to retrieve your data programmatically

7.2 Correction and Deletion

• Update or correct your account information
• Delete specific conversations or entire account
• Right to be forgotten (where legally applicable)

7.3 Control Over AI Training

• Opt out of data use for model training
• Request exclusion of specific conversations
• Control over data sharing with third parties

8. Data Sharing and Disclosure

We do not sell your personal data.

We may share information in these circumstances:

8.1 With Your Consent

• When you explicitly authorize sharing
• For integrations you've enabled

8.2 Service Providers

• Third-party vendors supporting our operations
• Hosting and infrastructure providers (Vercel for application hosting; Supabase for database, authentication, and file storage)
• Identity providers (Supabase Auth, which validates both email/password and Google OAuth sign-in; Google, for the Google OAuth method)

8.3 Legal Requirements

• To comply with legal obligations
• To protect our rights and users' safety
• In response to valid legal requests

9. International Data Transfers

• Data may be processed in regions operated by our hosting and infrastructure providers (Vercel and Supabase)
• We implement appropriate safeguards for international transfers
• Compliance with GDPR, CCPA, and other applicable regulations

10. Cookies and Tracking

10.1 Essential Cookies

• Authentication and session management
• Platform functionality and preferences

10.2 Analytics Cookies

• Usage patterns and performance metrics
• Error tracking and debugging information

10.3 Cookie Control

• Manage cookie preferences in your account settings
• Browser-level cookie controls respected

11. Data Breach Notification

In the event of a data breach:

• We will notify affected users within 72 hours
• Relevant authorities will be informed as required
• We will provide clear information about the incident and our response

12. Children's Privacy

Our platform is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

13. Updates to This Policy

• We may update this policy periodically
• Users will be notified of material changes
• Continued use constitutes acceptance of updates

14. Contact Information

For privacy-related questions or requests:

Email: support@realsimplelabs.com

15. Jurisdiction and Compliance

This policy is governed by the laws of the State of California and complies with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable privacy laws

16. Save to Parker Browser Extension

This section describes how the "Save to Parker" Chrome browser extension (the "Extension") collects, uses, and protects your information. The Extension is a separate distribution of Parker that you install from the Chrome Web Store. By using the Extension, you agree to the data handling practices described in this Privacy Policy, including this section. To the extent of any conflict between this section and the rest of this Policy in matters specific to the Extension, this section controls.

16.1 Supported Platforms and Where the Extension Runs

The Extension provides its "Save to Parker" feature on the following surfaces — the only places it injects a Save button, scrapes content, fetches additional metadata, or sends anything to Parker:

• Facebook Ad Library (facebook.com/ads/library)
• Facebook posts and photos — organic content on facebook.com
• Facebook Reels — the Reels viewer on facebook.com
• Facebook video posts — video watch pages (facebook.com/watch?v=…)
• Instagram (instagram.com)
• Pinterest pin detail pages (*.pinterest.com/pin/…)
• TikTok (tiktok.com)
• YouTube Shorts (youtube.com/shorts/…)

16.2 Data the Extension Reads from Supported Platforms

When you visit a supported surface listed in §16.1, the Extension reads:

• Page metadata visible in your browser: the URL of the post or ad you are viewing, the post's caption or description, the author's display name, handle, and profile picture, publicly displayed engagement counts (likes, comments, views, shares), and the media (images or video) the platform is rendering for you.
• API responses your browser receives: the Extension passively observes the JSON responses that the platform's web app already requests.

16.3 Data the Extension Sends to Parker

When you click "Save to Parker" and confirm a save, the Extension sends:

• The URL of the saved post or ad.
• Caption or description text, author display name, author handle, author profile picture, publicly displayed engagement counts, and the platform-specific identifier of the saved item.
• A copy of the media (image or video) you are saving.
• The organization, brand, and board you selected in the save dialog, plus any optional notes you typed.

16.4 Limited Use of User Data

In compliance with the Chrome Web Store User Data Privacy Policy, our use of data accessed through the Extension adheres to the following commitments:

• We use Extension data only to provide and improve the user-facing features described in this Privacy Policy.
• We do not transfer Extension data to third parties for unrelated purposes.

16.5 Browser-Stored Data

The Extension stores the following inside Chrome's chrome.storage.local API on your device:

• Your Parker access token, refresh token, and token expiry timestamp.
• A locally cached copy of your Parker user profile (account ID, email, display name) and your accessible organizations and brands.

16.6 Authentication Flow

The Extension authenticates you using the same sign-in methods Parker offers on the web — Google OAuth, or email and password.

16.7 Your Rights and Controls

In addition to the rights described in §7 of this Policy, when using the Extension you may:

• Sign out and erase local data by clicking "Disconnect" in the Extension popup.
• Uninstall the Extension at any time via your browser's extensions management page.

16.8 Third-Party Platform Interactions

When the Extension makes a request to a supported platform on your behalf, that request is governed by the receiving platform's own terms of service and privacy policy.

16.9 Third-Party Services Used by the Extension

The data the Extension sends to Parker is transmitted to and processed by services, including:

• Google (Google OAuth): identity provider for the Sign in with Google flow.
• Supabase: Parker's database, authentication, and file-storage provider.
• Vercel: hosting and edge network for app.heyparker.ai.
• Sentry: error-monitoring service for the Parker web application.

16.10 Children's Use

The Extension is subject to the same age restrictions described in §12. The Extension is not intended for, and should not be used by, individuals under the age of 18.

17. Save from Instagram (Direct Message) Feature

This section describes how the "Save from Instagram" feature collects, uses, and protects your information. The feature lets you save Instagram content to your Parker swipe file by sending it as a Direct Message to a Parker-operated Instagram account.

17.1 How the Feature Works

• Real Simple Labs operates a dedicated Instagram professional account, @heyparkerdotai (the "Parker Instagram Account").

17.2 Information We Receive Through This Feature

When you link your account and send messages to the Parker Instagram Account, we receive:

• Your Instagram identifiers: the Instagram-scoped user ID for your account and your Instagram username (@handle).
• The content you send us: the Instagram post, reel, carousel, image, or video you share.

17.3 How We Use This Information

• To save the content you send into the correct Parker swipe file and to display it with its metadata and media.

17.4 Storage and Retention

• The link between your Instagram account and your Parker account, the saved ideas, and the associated media are stored on Parker's infrastructure, with the same security controls described in §4.3.

17.5 Your Controls

• Unlink your Instagram account at any time from Parker's Settings or the swipe-file connection panel.
• Delete saved ideas individually from the Parker web app; deletion follows the retention rules in §4.2.

17.6 Third-Party Platform Interactions

The Instagram Platform delivers your messages to Parker and provides the identifiers and metadata described above; your use of Instagram remains governed by Instagram's and Meta's own terms and privacy policies.