Privacy policy

Last updated: 13 October 2026

Pardelina is an AI assistant for self-employed professionals. Each customer has their own Lina, kept apart from everyone else’s. Here we tell you plainly what data we keep, where, who else receives it and how you stay in control.

In short

We don’t use what you do with your Lina to train models.
Nobody on the team goes into your Lina without your permission.
The accounts centre keeps the bare minimum: your email and little else. It doesn’t keep passwords, cards, your name or your IP address.
Your Lina lives in Europe (Finland) and its backups go, encrypted, to Switzerland, so that not even Proton can read them.
For Lina to work, some data passes through other companies. They are all named below.
There is one thing you should know before accepting: how the internet search works today.

Who is responsible

The data controller is Christian Martín, a private individual and the creator of Pardelina.

For anything about this policy: hola@pardelina.com.

Pardelina is for people aged 18 or over and for professional use by self-employed people.

What the accounts centre keeps

The centre is cuenta.pardelina.com, where you sign in and see your account. It runs on a server from UpCloud (a Finnish company) in Madrid, with an encrypted disk. It keeps:

your email and your language;
the public keys of your passkeys, if you create any;
your sessions, and sign-in codes only as a fingerprint (SHA-256): we don’t keep the code itself;
your licence: plan, dates and status;
which Lina is yours;
how much your Lina spends on the AI model, to set usage limits (not what you talk about);
the feedback you send with “Send feedback”, which also reaches us by email.

It does not keep passwords (there are none: you sign in with a code or a passkey), cards, your name, your IP address or anything you do with Lina.

We make an encrypted backup every night.

What your Lina keeps

Your Lina lives in its own isolated container, on a dedicated Hetzner server (a German company) in Helsinki, Finland. There you will find:

your conversations;
its memory of you: what it learns to help you. You can see and delete it under “Memory”;
your files and your routines;
the accounts you trust it with so it can sign in to websites for you (its keychain);
the profile of its browser, with the sessions open on those sites.

Nobody on the team goes into your Lina without your permission. If we ever needed to, to give you support, we would ask you first.

We don’t use what you do with Lina to train models.

Backups go encrypted every night to Proton Drive (Proton AG, Switzerland). We encrypt them ourselves before they leave, so Proton can’t read them. We keep 14 daily, 8 weekly and 12 monthly copies.

The Pardelina extension

It’s optional. With it, Lina helps you in your own browser. This is what it does with your data:

What it reads: the page in the tab where you open its panel or where it does something you asked for (its visible text, its buttons and fields, its address and its title), and only while it does. It doesn’t read your other tabs or your history.
What never leaves your browser: your passwords and anything that looks like a card number.
Where it goes: to your Lina, who thinks about it with her model (GreenPT), and to the models that choose the simple steps (Perplexity, through OpenRouter, and Jev as a fallback). Below you’ll find what each one receives.
Your chat: in its panel you see your chat with Lina, the same one as in the app, and you can write to her from there.
What it keeps in your browser: the connection to your account (an access token, your name and your email), your language and how you left the panel in each tab. From there it only goes to your Lina.

You can disconnect it whenever you like in your Lina (Settings → Channels) or remove it from Chrome, and what it kept is then deleted.

Adult content, if you turn it on

It comes turned off. If you turn it on in your Lina (Settings → Privacy; over-18s only), Lina can help you with legal adult content in your browser, with the extension. Because that data can say something about your sex life, we treat it with extra care:

what Lina sees or searches of that content is thought about only by her model (GreenPT): it isn’t sent to the search engine, Jev or Perplexity;
that stretch stays in your chat, but doesn’t go into her memory of you;
the basis is your explicit consent, which you withdraw by turning it off.

Even if you don’t turn it on, anything that is adult content isn’t sent to those services or kept in her memory either.

Who receives data so that Lina can work

These companies take part in the service. We tell you what each one receives.

Internet search, during the beta

When Lina searches the internet, it uses the search engine of Parallel Web Systems, Inc. (USA). It receives what Lina searches for: the words of the search and a sentence about what it is looking for. It does not receive your conversations.

During the beta we use their standard account while we close an enterprise contract with zero retention. Until then, their terms allow them to keep what is sent to them and use it to improve their service, and we have no data transfer clauses with them.

That is why Lina avoids putting personal data in its searches, and why we ask you not to have it search for personal data about yourself or other people.

By accepting the beta terms you expressly accept that what Lina searches for goes to Parallel, in the USA, on these terms. When we have the contract, we will change this page and let you know.

GreenPT GreenPT BV, Utrecht, Netherlands

This is the model Lina thinks with (DeepSeek V4.1 Flash, served in the EU). It receives what you say to Lina and what Lina reads in order to answer you. According to its terms, it neither keeps it nor trains on it.
TypeSafe Inc. USA · its model is called “Jev”

A small model that sorts and filters the text of the pages Lina reads and searches, to keep only what answers the question. It is also the fallback for choosing the simple steps when Perplexity’s fails (below).

We use it under zero data retention (ZDR): it keeps neither what it is sent nor what it returns, nobody reviews it and it doesn’t train on it; only usage telemetry remains, for billing. Transfers to the USA rely on the EU standard contractual clauses in its DPA. Passwords and anything that looks like a card number never leave your browser.
Perplexity AI, Inc. USA · through OpenRouter, Inc. (USA)

Its model chooses the simple steps when Lina drives her browser or the Pardelina extension: it receives what she has to achieve and the page she is on (its text, its buttons and its address).

It reaches it through OpenRouter, and on every request we require zero data retention: OpenRouter only sends it to a provider that doesn’t keep what it is sent or train on it. Passwords and anything that looks like a card number never leave your browser.
Parallel Web Systems, Inc. USA · the search engine

It receives what Lina searches for on the internet. See the box above: during the beta it has different terms from the rest.
Proton AG Switzerland

The emails we send you (sign-in codes, notices about your plan) go out through Proton from hola@pardelina.com. And the encrypted backups mentioned above are kept in Proton Drive.
UpCloud Finland · server in Madrid

Hosts the accounts centre.
Hetzner Germany · server in Helsinki

Hosts the Linas.
Cloudflare

It only resolves the names of our domains (DNS): the traffic of the centre and of the Linas doesn’t go through it. The pardelina.com website (the waiting list) is hosted on Cloudflare, with its database in the EU.
Stripe

Nothing is charged during the beta. When we start charging, Stripe will handle the payment (an EU seller with Managed Payments): it will see your payment details and we never will.
Maps and weather OpenStreetMap/Nominatim, FOSSGIS and Open-Meteo

Public services that receive only the place or coordinates Lina looks up, from our server and with no data about you.
The websites Lina visits for you

They see Pardelina’s IP address and what you do on them with your account. Each has its own policy.

How long we keep it

For as long as you have an account. If you leave the beta or your plan ends:

Your Lina sleeps for 30 days (7 if you never paid). If you come back, it is just as you left it.
It moves to the archive. We make a final encrypted copy and delete its container. If you come back, we restore it.
After 24 months in the archive, it is deleted for good, backups included.

We email you when it ends, before it moves to the archive and a month before we delete it.

If you ask us to delete your account, we delete everything (your Lina and its backups), except what the law requires us to keep for invoicing. There is no invoicing during the beta.

Why we may process your data

Performing the beta terms: to give you the service.
Legitimate interest: security, abuse limits and outage notices.
Your express consent: for the search engine (Parallel) during the beta and for the waiting list.
Your explicit consent: for adult content, if you turn it on.

Cookies

Only those needed to sign in: your session at the centre, your session with your Lina and a third one that only says you’re signed in (pardelina_dentro, with no data about you), so pardelina.com takes you straight to your Lina. It’s deleted when you sign out. They are HttpOnly and do no tracking. Your browser also stores your preferences (theme, language).

No analytics, no advertising and no third parties.

Your rights

Under the GDPR you can ask us for access to your data, to correct it, to delete it, to take it with you (portability), and to object to or restrict its processing.

Write to hola@pardelina.com. We reply within a month.

During the beta, a copy of your data and account deletion are handled by hand, by email. You will also find both buttons in your account, which open that email already written.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Changes to this policy

If we change it, we will email you before the change applies. The date above says when it was last updated.

The beta terms are the other half of this agreement.