Privacy Policy

Last updated: September 18, 2026. Parcel is operated by Yehuda Schur. This policy explains how Parcel handles information when you visit our website, use the brokerage workspace or connect Gmail. For privacy questions and access, correction or deletion requests, contact yehudaschur@gmail.com.

1. Information we process

2. Why we use information

We use information to authenticate you, operate your workspace, retrieve property information, analyze materials, prepare documents and messages, maintain conversation context, support sharing you request, diagnose problems and protect the service. AI outputs are suggestions and can be inaccurate; review them before relying on them or sharing them.

3. Optional Gmail connection and permissions

Gmail authorization is separate from signing in to Parcel. You choose a Google account and approve Google's consent screen. Parcel requests gmail.readonly to read messages, attachments and mailbox settings used by these features; gmail.compose to create Gmail drafts and support sending; gmail.send to send messages you authorize; and userinfo.email to identify the connected mailbox. The compose permission also permits draft management, even though Parcel's current workflow focuses on creating drafts. Parcel does not request permission to permanently delete your Gmail messages.

Offline authorization allows Parcel to refresh access without asking you to reconnect for every request. Authorization credentials are encrypted in Parcel's server storage and associated with your account. Gmail content may be used to organize inbox items, suggest replies, identify relevant deals and create sourced notes. First connection enables inbox reading and clearly matched attachment filing for refreshes; you can change these permissions in Settings. When filing is enabled, original attachments and source metadata may be saved to a clearly matched deal; uncertain destinations require your selection. These processes run during inbox refresh, not continuous background Gmail monitoring.

Connecting Gmail does not authorize autonomous outreach. Creating a Gmail draft or sending from the email workflow requires your explicit action after final review, including the sanitized signature when available. A prepared in-app draft is distinct from a draft saved to Gmail. Review recipients, content and attachments before confirming.

4. Google data and Limited Use

Use of information received from Google APIs is governed by the Google API Services User Data Policy, including its Limited Use requirements, and the Google Workspace user data and developer policy. These rules also apply to derived information and transfers to providers supporting Gmail features.

Parcel uses Google data for the user-facing features described here. Parcel does not sell Google data, use it for advertising or creditworthiness decisions, or operate a process that trains generalized AI models on it. Google's rules prohibit using or retaining this data to develop, train or improve non-personalized AI models. They also restrict human access to specific user consent, security needs, legal requirements or permitted aggregated and anonymized internal operations. This notice does not represent Google approval or an independent compliance certification.

5. AI and other service providers

Relevant prompts, selected files, workspace context and authorized email content may be sent to AI services to provide the feature you use. Parcel includes OpenAI and Anthropic integrations; an optional Moonshot AI (Kimi) fallback can process inbox content when configured. A connected AI account or enabled fallback can affect which provider receives a request. Use of these services for inference is distinct from training a general-purpose model. We do not promise zero retention by every provider.

Google provides Gmail authorization and mailbox services; Clerk supports authentication and, when selected-plan checkout is activated, subscription billing processing. A checkout provider processes the payment method and subscription confirmation; Parcel receives the account, plan, subscription and payment-status references needed to operate access, not full card numbers. Checkout is currently unavailable, so choosing a plan does not begin billing. Separately, optional hosted payment-method setup uses Stripe: card details are entered on Stripe, while Parcel stores customer/setup references and can display card brand, last four digits and expiration. Saving a method is not a purchase authorization. Hosting, database and file-storage services process application records. Mapbox, Google Maps, NYC public-data sources and configured search/property-data providers process the requests needed for their features. Provider availability and configuration may vary; contact us for information about providers handling your data.

6. Sharing and team copies

Your private workspace is associated with your account. If you share a deal or document with a team, its permitted members can access the shared material. A member may save an independent copy through Add to mine. Removing the original, unsharing it or removing team membership does not recall an already admitted independent copy or a downloaded file. Shared documents or notes can contain imported email information; review their contents and your authority to share them. We may also disclose information when legally required or necessary to address fraud, abuse or security incidents, subject to the Google-data restrictions above.

7. Retention, disconnection and deletion

Workspace records remain available for ongoing work and continuity. Trial expiration does not automatically delete them. Retention varies by record and provider; we do not currently publish a fixed deletion schedule covering every record, log, file and backup. Removing a visible item is not a guarantee that all related records, independent copies or backups have been erased.

To stop future Gmail access, disconnect Gmail in Parcel Settings. This removes Parcel's stored authorization grant; revocation at Google is attempted separately and may fail. You can also revoke Parcel in Google's connected-app controls. Disconnection does not erase imported files, saved notes, message-review records or other workspace content. Turning off attachment filing stops that feature without deleting previously imported files.

To request access, correction or account/data deletion, email yehudaschur@gmail.com from your account email, identify the account and describe the information concerned. We may need to verify your identity and clarify the scope. Do not send passwords, authorization tokens or full card details. Requests are handled individually, including review of related files, retained records and backups; complete account erasure is not currently a one-click feature. We will explain applicable limitations, including records that must be retained by law and copies controlled by other recipients. Applicable privacy rights depend on your location.

The saved-work JSON export contains your deal, buyer and organization records, including saved analysis. It is not a complete account archive and does not include original attachment binaries or complete communication history. Contact us to request other records.

8. Security and changes

Parcel uses account-based access controls and encrypted stored Gmail credentials. No service is immune to unauthorized access, loss or interruption; this policy is not a security certification. Report suspected unauthorized access to the contact above. We will update this policy when practices change and seek additional consent before using Google data for a new purpose where required. The date above identifies this version.