Parsd

GDPR overview

Compliance is claimed explicitly: the security page states that the solution is fully GDPR compliant. The privacy policy, last updated 29 August 2025, names Parsd AB, corporate identity number 559327-4664, as controller, represented by chief executive Alexandra Kafka Larsson, with hello@parsd.com as the contact for exercising rights. Access, rectification, erasure, objection and portability are all listed. Clause 10.1 of the terms provides for an Article 28 data processing agreement whenever Parsd processes personal data on a customer's behalf. A dated sub-processor list is published and split between EU and non-EU providers, and the vendor states it is re-architecting its systems to bring all sub-processing inside the EU. The policy also positions the app under the EU AI Act as limited-risk for its generative features. No DPO is named, and no Article 27 representative is designated, the publisher being established in Sweden.

Who owns the data?

The terms are explicit on ownership. Clause 8.3 states that all data uploaded to, owned by or created by the customer remains the customer's property, and that Parsd makes no intellectual-property or ownership claim over it. What the vendor takes is a licence, not title: clause 10.2 grants Parsd the right to process that data, itself or through a third party, for the sole purpose of delivering the service, and the published sub-processor list names who those third parties are. The same clause adds a separate consent covering anonymised usage data, which Parsd may analyse to improve the service, the user experience and security, including for the benefit of its other customers. Content uploaded by the customer is never used to train AI models.

Reuse rights

Because customers keep ownership of what they upload, they can reuse their own material and the outputs built from it without asking Parsd for permission; nothing in the terms restricts how the results are published, cited or commercialised. Portability is contractual rather than self-service: clause 10.3 lets the customer request an export in a common machine-readable format such as CSV or JSON, delivered as a download, and Parsd may charge a reasonable fee announced in advance. Clause 10.4 requires at least fourteen calendar days' written notice before the end of the agreement if the customer wants that export. In the other direction, the customer's licence to use the platform is non-exclusive and non-transferable, accounts are personal and may not be shared, and reselling or sublicensing the service requires Parsd's written consent. Parsd may use a customer's name and logo for marketing only with written permission.

Data retention & training

Hosting summary

Parsd names no hosting country and reasons by region instead. For the platform itself, the published list places application infrastructure and text generation on Google Cloud Platform in the EU, the vector database of document embeddings on Pinecone in the EU, and file conversion with Cloud Convert and HTML-to-Markdown conversion with Jina AI also in the EU. Outside the EU, in the United States, sit Deepgram for speech-to-text, OpenAI for generation and embeddings, LangSmith for orchestration and monitoring, and Google for authentication. Customer administration relies on further EU providers including BankID, Fortnox, HubSpot, Scrive and Zoom, with Stripe and Fireflies in the United States. The list was last updated on 12 August 2026 and the vendor states it is re-architecting the system to move all sub-processing into the EU, a change described as under way rather than complete. Jurisdiction is Swedish: the agreement is governed by Swedish law with the Stockholm district court in first instance.