Skip to main content

Last updated: June 10, 2026

Privacy Policy

Parental Leave Pro ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information when you use parentalleavepro.com or any related services (the "Service").

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Service.

1. Information we collect

1.1 Information you provide directly

The Service collects only the information needed for the feature you choose to use. Most data, including your full intake answers, stays in your browser by default. The categories below describe what we collect and where it lives.

  • Planning intake. You enter information such as your state, employer name, employer size, length of employment, average weekly wage, expected child arrival date, paid time off balances, and partner details. Intake answers are stored in your browser session only and are not transmitted to our servers unless you take one of the actions below.
  • Account creation. If you create an account to save your plan or share it with a partner, we collect your email address and (if you set one) a password hash. Passwords are never stored in plaintext; we use industry-standard hashing.
  • Purchase. When you buy a paid plan ($99 Essential, $199 Complete, or $299 Premium), we collect your email address and your purchase record (which tier, when, what plan it applies to). Payment information (card number, expiration, CVV, billing address) is collected and processed directly by our PCI-compliant payment processor, Stripe. We do not see or store your full card number; we receive only a tokenized reference and the last four digits.
  • Pay-in-4 or Affirm. If you choose to split payments on Complete or Premium, your repayment information is collected and processed by Klarna or Affirm directly. Their privacy policy governs that data.
  • HR policy upload. If you upload your employer's parental leave policy (PDF or DOCX), we process the document on our servers to extract the relevant terms (weeks of paid leave, percentage of pay, coordination type). The document and the extracted text are retained for the life of your plan so you can review the extraction and re-run analysis. You can delete an uploaded policy at any time from your account.
  • Filing-deadline reminders (Complete and Premium tiers). If you opt in to reminders, we store the milestone dates from your plan and your email address on our servers so we can send the reminder emails. You can disable reminders at any time, which deletes the stored reminder schedule.
  • Leave Watch ($24/year add-on). If you opt in to Leave Watch, we store your state, your employer policy details (if uploaded), and your contact email so we can notify you when state PFML rules or your STD terms change in a way that affects your plan. You can cancel Leave Watch at any time, which stops monitoring and removes the stored monitoring profile.
  • Contact us. If you email us, the contents of your email and your email address are stored by our email provider.

1.2 Information collected automatically

  • Usage data. Our hosting provider (Vercel) collects standard web request logs, including your IP address, browser type, pages visited, and approximate geographic location for security, abuse prevention, and analytics purposes.
  • Cookies and similar technologies. See Section 5 below.

1.3 Information we do not collect

  • We do not collect Social Security numbers or government identifiers.
  • We do not collect full payment card numbers. Card information is collected and processed by our PCI-compliant payment processor (Stripe). We receive only a tokenized reference and the last four digits of the card.
  • We do not collect biometric data, health diagnoses, medical records, or genetic information. (Plans involve pregnancy-related dates, but no diagnostic detail is collected.)
  • We do not knowingly collect any personal information from children under 18.

2. How we use your information

We use the information we collect to:

  • Operate the Service and provide you with personalized parental leave estimates and plans
  • Improve and develop the Service
  • Respond to your inquiries and provide customer support
  • Maintain the security and integrity of the Service
  • Comply with legal obligations

We do not sell your personal information for monetary consideration. We do not share your personal information with third parties for their own marketing purposes.

3. How we share information

We share information only in the following limited circumstances:

  • Service providers. We share specific information with the vendors who help us operate the Service:
    • Hosting: Vercel (web hosting), Supabase (database and account storage), Cloudflare R2 (uploaded-document storage).
    • Payments: Stripe (card processing). Klarna and Affirm if you select pay-in-4 or Affirm at checkout.
    • Email: Resend (transactional and reminder emails). Klaviyo (lifecycle and marketing emails, if you opt in).
    • AI processing: Anthropic (Claude API) for HR policy extraction. Anthropic does not retain inputs or use them for model training under our API terms.
    • Observability: Sentry (error monitoring), PostHog (product analytics. Opt-in via cookie consent only).
    Each vendor is bound by contract to use the data only for the purposes we authorize.
  • Legal compliance. We may disclose information if required by law, subpoena, or other legal process, or to protect our rights, property, or safety, or the rights, property, or safety of others.
  • Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you and any successor entity will be bound by this Privacy Policy.
  • With your consent. For any other purpose, we will obtain your consent.

4. Data retention

We retain information only for as long as needed to provide the Service and for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

  • Intake answers kept only in your browser: deleted when you close your browser tab or clear site data.
  • Saved plans, uploaded HR policies, and reminder schedules: retained for the duration of your account, plus 90 days after account deletion to allow recovery if requested. You may delete any of these at any time from your account.
  • Account email and purchase record: retained for the duration of your account, plus the period required by U.S. tax and accounting law (typically 7 years for purchase records).
  • Tokenized payment references at Stripe: retained for as long as we maintain you as a customer; Stripe's retention is governed by their privacy policy.
  • Email correspondence: retained for as long as needed to maintain the customer-service relationship.
  • Web request logs (Vercel): retained per Vercel's default retention policy.

5. Cookies and tracking technologies

The Service uses a limited set of cookies and similar technologies. See our Cookie Policy for details. In general:

  • Strictly necessary cookies. Required for the Service to function. No consent required.
  • Functional cookies. Remember your preferences (such as cookie-consent choices). Set only after you accept.
  • Analytics cookies. Help us understand how the Service is used. Set only after you accept.
  • Marketing cookies. The Service does not currently use marketing cookies.

You can manage your cookie preferences via the cookie banner on first visit and in the Cookie Policy.

6. Data security

We use industry-standard technical and organizational measures to protect your information, including HTTPS encryption in transit and secure cloud infrastructure. No method of transmission over the internet or electronic storage is fully secure, however, and we cannot guarantee absolute security.

7. Your privacy rights

7.1 California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, share, and disclose
  • Request access to and copies of your personal information
  • Request deletion of your personal information
  • Request correction of inaccurate personal information
  • Opt out of the sale or sharing of your personal information (we do not sell or share personal information for cross-context behavioral advertising)
  • Limit the use and disclosure of sensitive personal information
  • Non-discrimination for exercising your rights

7.2 Connecticut residents (CTDPA)

If you are a Connecticut resident, you have similar rights under the Connecticut Data Privacy Act, including the rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling activities.

7.3 Other U.S. state privacy laws

Residents of Virginia, Colorado, Utah, Texas, Oregon, and other states with comprehensive privacy laws have similar rights. We honor verifiable requests from residents of these states to the extent required by the applicable law.

7.4 European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, UK, or Switzerland, you have rights under the GDPR or equivalent laws, including the rights to access, correct, delete, restrict processing, object to processing, data portability, and to lodge a complaint with your local supervisory authority. The legal bases for our processing are: performance of a contract (providing the Service), legitimate interests (improving and securing the Service), consent (cookies and email communications), and compliance with legal obligations.

7.5 How to exercise your rights

Email [email protected] with your request. We will respond within the timeframe required by the applicable law (typically 30–45 days). We may need to verify your identity before fulfilling certain requests.

8. Children's privacy

The Service is intended for adults planning parental leave. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will delete it. If you believe we may have collected information from a child under 18, please contact us at [email protected].

9. International data transfers

The Service is hosted in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the U.S., which may have different data protection laws than your jurisdiction. By using the Service, you consent to this transfer.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated by posting an updated notice on the Service or, if you have provided an email address, by email.

11. Contact

Questions about this Privacy Policy or our privacy practices? Contact [email protected].