Privacy Policy

1. Controller and contact

ParallelFolio is operated under the Rorolo brand by Jinliang Zhao. For privacy questions or requests, contact rrrr.zhao@gmail.com.

2. Information we process

• Account data, such as your email address, authentication identifiers, language, timezone, and settings.
• Portfolio records you choose to enter, including account names, trades, cash flows, positions, decisions, notes, and hypothetical paths.
• Files you choose to upload for import or recognition, together with review results and import history.
• Subscription information, such as plan, status, billing interval, Paddle customer or subscription references, and entitlement history. We do not receive or store full payment-card details.
• Security and diagnostic data, such as timestamps, request identifiers, limited device/browser information, and error logs. Sensitive portfolio contents are not intentionally written to general application logs.
• Support communications you send to us.

3. Why we process it

• Provide authentication, owner-separated storage, portfolio calculations, imports, reports, and support.
• Operate subscriptions and apply the correct plan entitlements after verified billing events.
• Protect accounts, prevent abuse, diagnose failures, and maintain service reliability.
• Comply with legal, tax, accounting, fraud-prevention, and dispute-resolution obligations that apply to us or Paddle.

4. Service providers and disclosure

We use service providers for hosting, database, authentication, email, security, and operational support. They may process information only as needed to provide those services under their applicable terms and safeguards.

For Global purchases, Paddle is Merchant of Record and independently processes checkout, payment, tax, invoice, fraud, and buyer-support data under Paddle's privacy terms. We may disclose information when required by law, to protect rights and security, or as part of a business transfer with appropriate safeguards.

We do not sell personal information or portfolio records and do not use them for third-party behavioral advertising.

5. Retention and security

We retain account and portfolio data while your account is active and for a limited period after deletion when needed for backup integrity, fraud prevention, disputes, or legal obligations. Billing and transaction records may be retained for the period required by tax, accounting, or payment rules.

We use reasonable technical and organizational safeguards, including authenticated access, owner boundaries, restricted secrets, and payment-card handling by Paddle. No internet service can guarantee absolute security, so please contact us promptly if you suspect unauthorized access.

6. Your choices and rights

• Access, correct, export, or delete your account information and factual records, subject to applicable legal exceptions.
• Cancel a paid subscription without deleting your factual records.
• Object to or restrict certain processing, or withdraw consent where consent is the legal basis.
• Complain to an applicable data-protection authority if you believe your rights were not respected.

7. International use and policy updates

Service providers may process data in countries other than yours. Where required, we rely on contractual or other lawful safeguards for international transfers. Regional deployments are intended to keep CN and Global portfolio data separated rather than synchronizing it by default.

We may update this policy as the service or law changes. Material changes will be highlighted through the service or another reasonable channel before they take effect where required.