Privacy Policy

Effective July 6, 2026  ·  Onkura Inc d/b/a Parity  ·  Version 2026-07-06

This Privacy Policy explains how Onkura Inc, doing business as Parity (“Parity,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Parity platform at parity.work and related services (the “Service”). Parity is an operations execution layer that lets users describe operational work in plain language and run it as structured, auditable flows with a tamper-evident Evidence Record on every execution.

1. Information We Collect

Information you provide directly

  • Account information: Your name, email address, and password when you sign up.
  • Profile information: Your role category and how you heard about Parity (provided during onboarding).
  • Content you submit: Documents, prompts, workflow configurations, and any other content you upload or enter when using the Service (“Your Content”).
  • Communications: Messages you send us via email or support channels.

Information collected automatically

  • Usage data: Which features you use, flows you create or run, pages you visit, and actions you take within the Service.
  • Device and browser information: IP address, browser type and version, operating system, and referring URL.
  • Session data: Timestamps, session duration, and navigation paths.
  • Cookies and similar technologies: See Section 4 below.

Information from third parties

  • Authentication providers:If you sign in via Google (currently our only supported sign-in provider), we receive your name, email address, and profile picture from Google. See Google’s Privacy Policy at policies.google.com/privacy for details on how Google handles authentication data.

2. How We Use Your Information

We use the information we collect to:

  • Provide and operate the Service — create your account, process flow executions, store your workflow history, and display your results.
  • Send transactional communications — account confirmations, password resets, billing receipts, and important service updates.
  • Send product updates — feature announcements and tips about the Service. You can opt out at any time.
  • Improve the Service — understand how people use Parity, identify bugs, and prioritize improvements. This analysis uses aggregated or anonymized data.
  • Expand our workflow library (default-on, opt-out available): We may review the specificationof flows you create — meaning the configuration, extraction logic, and field structure, not your document content or extracted data — to identify patterns that are missing from Parity’s public workflow library (the “Corpus”). If we identify your flow specification as a candidate, a member of our team will manually review its structure, remove any company-specific or business-identifying configuration details, and may publish a generalized, anonymized version to the Corpus. Your document content and the data extracted from your runs are never shared in this process. This program is enabled by default.You may opt out at any time via Settings > Account > Workflow Library Contributions. Opting out prevents your flow specifications from being reviewed going forward; it does not remove any specifications already incorporated.
  • Enforce our Terms — detect and prevent fraud, abuse, or violations of our Terms of Service.
  • Comply with legal obligations — respond to lawful requests from government authorities and protect our legal rights.

We do not use Your Content to train or fine-tune AI models — ours or those of our model providers — without your explicit consent.

3. How We Share Your Information

We do not sell your personal information. We share it only in these circumstances:

Service providers

We use third-party vendors to help operate the Service. These vendors process data only on our behalf, under contractual obligations to protect it:

VendorPurposeData shared
Amazon Web Services (AWS)Cloud hosting and infrastructureAll data stored on the platform
PostHogProduct analyticsUsage events, session data (anonymized where possible)
Google (Gmail)Transactional and product emailEmail address, name
Anthropic, Google (Gemini), Meta (Llama), OpenAIAI model processing for flow executionPrompts and document content submitted in flow runs

Each AI model provider maintains their own data processing policies. Parity routes flow executions to the most appropriate model; you can review each provider’s data handling practices on their respective websites. We do not authorize any provider to use your content to train or fine-tune their models.

Parity team members may internally review your flow specifications under the Workflow Library Contributions program (default-on, opt-out available). See Section 2 for details.

Business transfers

If Parity is acquired, merges with another company, or sells substantially all its assets, your information may be transferred as part of that transaction. We will notify you via email before your information becomes subject to a different privacy policy.

Legal requirements

We may disclose your information if required to do so by law, subpoena, court order, or to protect the rights, property, or safety of Parity, our users, or the public.

With your consent

We may share your information for any other purpose with your explicit consent.

4. Cookies and Tracking

CookieTypePurposeDuration
Session cookie (auth token)EssentialKeeps you logged inSession / 7 days
CSRF tokenEssentialPrevents cross-site request forgerySession
PostHog analyticsAnalyticsMeasures feature usage and session behaviorUp to 1 year

We do not use advertising cookies or sell your browsing data to ad networks.

Do Not Track: We do not currently respond to browser Do Not Track (DNT) signals, as there is no uniform industry standard for how services should respond. To opt out of analytics tracking, see Section 6.

Managing cookies: You can clear cookies in your browser settings at any time. Clearing essential cookies will sign you out of the Service.

5. Data Retention

The following table summarizes how long we retain each category of data:

Data typeRetention period
Execution records7 years (financial compliance)
Audit events12 months
Evidence packages7 years (or customer-configured)
Usage events24 months
Session / authoring data90 days
Account dataWhile active, then 90 days after deletion
Personal data (after erasure request)Anonymised immediately; activity logs retained
  • Input documents: Documents you upload to run a flow are processed to produce your results and are not retained after the run completes. Evidence Records — which are stored and tied to your execution history — contain a structured record of what ran, what was decided, and what the output fields were, but do not contain your original document content.
  • Compiled flow specifications: The compiled logic and configuration of flows you create are retained while your account is active and for 90 days after deletion, consistent with your account data.
  • Analytics data: Aggregated/anonymized usage data may be retained indefinitely for product improvement purposes.
  • Legal holds: If your data is subject to a legal hold, we may retain it beyond the periods above until the hold is released.

6. Your Rights and Choices

Regardless of where you are located, you may:

  • Access your data: Request a copy of the personal information we hold about you.
  • Correct your data: Update your account information in Settings at any time.
  • Delete your account: Delete your account via Settings > Account > Delete Account. This deletes your profile, workflows, and execution history. Some data (e.g. billing records) may be retained as required by law.
  • Export your data: Contact us at support@parity.work to request a copy of your execution history.
  • Opt out of product emails: Use the unsubscribe link in any marketing email.
  • Object to analytics: Contact us at support@parity.work to opt out of PostHog tracking.

To exercise these rights, contact us at support@parity.work. We will respond within 30 days.

California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you additional rights:

  • Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, our business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., legal obligations, active transactions).
  • Right to correct: You may request that we correct inaccurate personal information we hold about you.
  • Right to opt out of sale or sharing: We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
  • Right to limit use of sensitive personal information: We do not use sensitive personal information for purposes beyond those necessary to provide the Service.
  • Right to non-discrimination: We will not discriminate against you for exercising any CCPA rights.

To submit a CCPA/CPRA request, contact us at support@parity.workwith the subject line “California Privacy Request.” We will respond within 45 days, with one 45-day extension if needed.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

  • Encryption in transit (TLS) and at rest
  • Access controls limiting who can view user data
  • Authentication tokens with expiration and rotation

No security measure is perfect. If you discover a security vulnerability, please report it to support@parity.work.

In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by applicable law, including state breach notification laws.

8. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us at support@parity.work and we will delete it.

9. International Transfers

Parity is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US. By using the Service, you consent to this transfer.

10. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party tools. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through Parity. We are not responsible for the privacy practices of third-party websites or services.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy with a revised “Last Updated” date. For material changes, we will notify you by email or via an in-app notice at least 30 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance.

12. Governing Law

This Privacy Policy and any disputes arising from it are governed by the laws of the State of Delaware, without regard to its conflict-of-law principles, consistent with our Terms of Service. By using the Service, you consent to the exclusive jurisdiction of the state and federal courts located in Delaware for any disputes not subject to arbitration.

13. Contact Us

For privacy-related questions or to exercise your data rights:

support@parity.work1044 Bridgewater Park Dr.Hoover, AL 35244

Version 2026-07-06