Privacy Policy

Parallel CRM ("Parallel", "we", "us") is a tool operated by Mustard Press, a direct-mail and marketing services company headquartered at 679 Brian Way, Medford, Oregon 97501, United States. You can reach us at privacy@mustardpress.com.

This policy applies to parallelcrm.com and the free campaign evaluation tool. It describes what we collect, how we use it, and the choices you have.

Information you give us through the lead form: first name, last name, business email address, phone number, and company name.

Files you upload to run an evaluation: mailer PDFs, digital ad creatives (image files or HTML5 zips), and any landing page URL you provide.

Automatically collected technical information: IP address, browser user agent, request timestamps, and aggregate performance metrics (page load timings via Vercel Speed Insights).

What we do not collect: we do not request payment information, social security numbers, government IDs, or any special categories of personal data (health, religion, political views, etc.). Please do not include these in uploaded creative.

• To run your campaign evaluation and return the scorecard to you.
• To contact you with your evaluation results, follow-up emails about your campaign, and Mustard Press service offerings related to the evaluation.
• To detect and prevent abuse of the evaluator (rate limiting, fraud prevention).
• To improve our service in aggregate — we may review patterns across evaluations to improve scoring quality, but we do not share individual evaluations.

We process your information based on (a) your consent, given when you submit the lead form, (b) our legitimate interest in operating and improving the evaluator, and (c) where applicable, contractual necessity to deliver the service you requested.

We do not sell your information. We share it only with the third-party processors that operate parts of our service:

• Vercel Inc. — application hosting, edge delivery, and aggregate performance analytics. Data may be processed in the United States.
• Neon, Inc. — managed PostgreSQL database (US-East).
• Anthropic, PBC — AI model provider used to score uploaded creative. The text and visual content of your uploads is transmitted to Anthropic for evaluation. Anthropic does not train on this content under their commercial API terms.
• HighLevel, Inc. (GoHighLevel) — customer relationship and email automation. Your contact details and evaluation results (score, summary, link, channel) are stored in our GoHighLevel sub-account.
• Customer.io, Inc. — transactional and marketing email delivery (when applicable).
• Clerk, Inc. — authentication for our team dashboard. Public evaluator users do not authenticate.

We also disclose information when required by law (subpoena, court order) or to protect rights, property, or safety.

• Evaluation session cookie: 1 hour, then expires automatically.
• Uploaded files (mailer PDFs, ad creatives): processed in memory only — we do not store the file contents after the evaluation completes. We retain a metadata record (filename, size, type) for audit purposes.
• Lead and evaluation records: retained until you request deletion or for a maximum of 36 months from your last interaction, whichever is earlier.
• Server logs and request metadata: 90 days.

We use one strictly-necessary cookie on the public evaluator: pcrm_eval_session, an HMAC-signed identifier that links you to your in-progress evaluation. It is set when you submit the lead form, expires after 1 hour, and is not used for tracking or advertising.

Vercel Speed Insights collects aggregate performance data (page-load timing, web vitals) without cookies. Vercel Analytics collects aggregate page-view data using a non-cookie session hash. We do not use Google Analytics, Meta Pixel, or other advertising trackers on the public evaluator.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information; to object to or restrict processing; and to opt out of marketing communications.

To exercise any of these rights, email privacy@mustardpress.com. We will respond within 30 days. You can also unsubscribe from marketing emails at any time using the link in any message we send.

California residents: you have the right to know what we collect, request deletion, request correction, and opt out of any "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising). To submit a request, email the address above.

We use TLS for data in transit, encryption at rest for stored data, and access controls limiting who can view your records. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you as required by law.

The evaluator is intended for business users 18 or older. We do not knowingly collect information from children under 13. If you believe a child has provided information to us, contact us and we will delete it.

Our servers and processors are located primarily in the United States. If you access the evaluator from outside the US, your information will be transferred to and processed in the US.

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated via email or a notice on the public evaluator.

Questions or requests: email privacy@mustardpress.com or write to Mustard Press, 679 Brian Way, Medford, Oregon 97501.