Privacy Policy

1. Introduction

Parable Security, Inc. ("Parable," "we," "us," or "our") is committed to protecting the privacy of our customers, their employees, and visitors to our website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, organization name, and authentication credentials.

Employee/Recipient Data

Your organization provides employee contact information (name, email, phone number, department) for use in authorized security training campaigns. This data is provided by and controlled by your organization.

Simulation & Training Data

We collect interaction data from simulated phishing campaigns, including email opens, link clicks, form submissions, SMS responses, and voice call interactions. This data is used solely for training reporting and analytics.

Usage Data

We automatically collect device information, IP addresses, browser type, and usage patterns when you interact with our platform.

3. How We Use Your Information

• • Deliver authorized phishing simulations across email, SMS, and voice channels
• • Generate training reports and analytics for your organization
• • Improve and personalize adaptive training scenarios
• • Maintain platform security and prevent abuse
• • Communicate with account administrators about their account

4. Data Sharing & Disclosure

We do not sell personal information. We may share data with:

• Your organization: Campaign results and training analytics are shared with authorized administrators
• Service providers: Third-party services that help us deliver our platform (e.g., email delivery, SMS providers, cloud hosting)
• Legal requirements: When required by law, subpoena, or to protect our rights

5. Data Retention

We retain account and simulation data for the duration of your organization's subscription. Upon account termination, all organization data (including simulation results, recipient lists, training records, and audit logs) is permanently deleted within 90 days. Employee interaction data is retained only as long as the organization's subscription is active. Organizations may request immediate deletion of their data at any time by contacting contact@parablesecurity.ai.

6. Data Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security assessments to protect your data. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. If you are an employee enrolled in training by your organization, please contact your employer's security or IT team for data requests. Account administrators may contact us directly.

8. Contact Us

For privacy-related inquiries, contact us at contact@parablesecurity.ai