Privacy policy

The controller of the data described below is Quentin Kral, publisher of the site — see the legal notice for full identification. Dedicated contact for personal data: contact@parlova.fr.

Parlova only collects the data that is strictly necessary:

• Teacher / curious / student accounts: email, display name, chosen role. This data is needed to sign in and personalise the experience.
• Anonymous game sessions (students without an account): freely entered first name, messages exchanged during the session, score and completion rate. No identifying data is required.
• Missions created: content generated by the teacher and configuration settings.

We use no tracking cookies. Our audience measurement tool (Vercel Analytics) processes the IP address transiently to produce aggregated, anonymous visit statistics (country, page visited, device type) — it is never stored or linked to a user account.

Some preferences and session information (first name entered when joining without an account, answer draft in progress, display preferences) are kept locally in your browser (localStorage) — they stay on your device and are never sent to our servers beyond their normal functional use (e.g. joining a mission).

• Authentication and access to the service
• Showing learning statistics to the teacher (student progress)
• Improving the service (aggregated, anonymised usage metrics)

We never sell, rent or share your data with third parties for commercial purposes.

Parlova is used in a school setting supervised by the teacher:

• Anonymous sessions only collect a first name freely entered by the student
• Learning exchanges are only accessible to the teacher who created the mission
• No data is used for profiling or advertising
• The teacher is responsible for informing families where necessary (Article 13 GDPR)

• Supabase — authentication and database (infrastructure hosted in Europe)
• OpenAI — AI generation of characters and dialogues
• Vercel — hosting of the web interface and audience measurement (Vercel Analytics)
• Resend — sending of transactional and notification emails (account confirmation, learning alerts)
• Lumail — management of sign-ups to the free resources (lead magnets) offered on the site; only concerns people who voluntarily sign up to these resources, separate from Parlova accounts

The data sent to OpenAI is the messages exchanged during a session. It is not used to train models (OpenAI Enterprise policy).

Emails sent by Parlova are subject to technical delivery tracking (opens, clicks) through our email provider, to ensure reliable delivery and manage unsubscriptions — never for advertising or profiling.

• Account data: kept until the account is deleted
• Game sessions: kept for 12 months, automatically purged afterwards
• Demo-mode conversations (without an account): kept for 12 months, automatically purged afterwards
• Missions created: kept until deleted by the teacher

You have the following rights, which you can exercise at any time:

• Access — obtain a copy of your data
• Rectification — correct inaccurate information
• Erasure — delete your account and all your data (available from your profile)
• Portability — receive your data in a structured format (JSON export available from your profile)
• Objection — object to certain processing

To exercise your rights: contact@parlova.fr

You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

Parlova only uses technical cookies required for authentication (user session). No tracking or advertising cookies are used.

The site's audience measurement (Vercel Analytics) works entirely without cookies: it counts page views in aggregate, without individually identifying visitors or tracking them across sites.

Your browser's local storage (localStorage), separate from cookies, is also used for some preferences and session information — see section 2.

Parlova uses the YouTube Data API (YouTube upload scope) to publish educational videos on its official YouTube channel.

• Data accessed: an OAuth2 access token linked to the platform's YouTube account. No personal data of YouTube users is collected.
• Use: the token is used exclusively to upload videos to Parlova's YouTube channel according to a publishing schedule. It is not used for any other purpose.
• Transfer: the OAuth token is never passed on to third parties, sold, or shared for commercial purposes.
• Protection: the token is stored securely and only accessible to the platform's authorised operators.
• Retention and deletion: the token can be revoked at any time from the settings of the associated Google account. It is deleted as soon as the account is disconnected.
• AI / machine-learning models: data received through Google APIs is not used to train, improve or develop AI or machine-learning models.

The use of data received through Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

For any question about your data: contact@parlova.fr