Last updated: 27 August 2026
Oak & Nine (“Oak & Nine”, “we”, “us”) is a product of PLHQ Business Solutions Ltd, a Park Lane company, registered at Drumcar, Dartry, Dublin 6, Ireland. We provide software that helps a business capture how it operates and run agents against its own systems and documents. This policy explains what personal data we process, why, and the choices you have. For any privacy question or request, contact us at hello@parklanehq.com.
This policy covers our marketing site, the Oak & Nine application, and the connections you choose to make to third-party systems (such as Google, Microsoft, accounting and messaging tools). Each customer’s workspace is logically isolated from every other; when we act as a processor on behalf of a customer, that customer’s own agreement with us governs, and this policy supplements it.
When you connect a third-party system, you authorise us (through that provider’s OAuth consent) to access specific data on your behalf. Depending on what you connect, this may include:
We request the narrowest scopes needed for the features you use, and we access this data only to perform the tasks you have configured.
We do not sell your personal data, and we do not use it for third-party advertising.
Where you connect a Google account, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:
We only use Google user data to provide or improve the features you have explicitly requested inside Oak & Nine.
We do not transfer Google user data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition (with continued protection of your data).
We do not use Google user data for advertising.
We do not allow humans to read your Google user data unless: you have given specific consent; it is necessary for security purposes (such as investigating abuse); it is required to comply with applicable law; or the data has been aggregated and anonymised for internal operations.
We do not use Google user data to develop, improve, or train generalised or non-personalised AI or machine-learning models. See §6.
Oak & Nine uses large language models — provided by Anthropic, Google, and OpenAI — to power its agents. Your content and the data you connect are used only to carry out your requests within your own workspace. Your data, and any data received from Google APIs, is not used to train or improve any general-purpose or third-party AI model, and is not shared with other customers. We have arrangements with our model providers that prohibit training on data we send for processing.
We share data with service providers (“subprocessors”) who help us run the service, under contracts that require them to protect it and use it only on our instructions. These include:
A current list of subprocessors is available on request. We do not sell personal data. We may disclose data if required by law or to protect our rights, users, or the public.
Credentials for connected systems (OAuth tokens) are encrypted at rest, and each customer’s workspace is isolated so one customer cannot access another’s data. We apply access controls, encryption in transit, and least-privilege scopes. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of incidents as required by law. Data is hosted on Google Cloud in the EU (Belgium region).
We keep personal data only as long as needed to provide the service and to meet legal obligations. Account and workspace data is retained for the life of your account and deleted or anonymised within 90 days of account closure or on a valid deletion request. You can ask for a copy or a deletion of your data at any time (see §10). Disconnecting a service stops further access immediately and removes the stored credential.
Depending on where you live (including under the UK GDPR and EU GDPR), you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. Our legal basis for processing is generally the performance of our contract with you, our legitimate interests in operating and securing the service, your consent (where asked), and compliance with law. To exercise any right, email hello@parklanehq.com. You may also complain to your data-protection authority — in Ireland, the Data Protection Commission (dataprotection.ie); in the UK, the ICO. Our data-protection contact is hello@parklanehq.com.
Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement and the EU Standard Contractual Clauses. Details are available on request.
We use strictly necessary cookies to keep you signed in and to keep the service secure. We do not use advertising cookies. Where analytics or non-essential cookies are used on our marketing site, we will ask for consent as required.
Oak & Nine is a business tool and is not directed to children, and we do not knowingly collect data from anyone under 16.
We may update this policy from time to time. We will post the new version here with a revised “last updated” date and, for material changes, notify you as appropriate.
Questions, requests, or concerns about this policy or your data: PLHQ Business Solutions Ltd, Drumcar, Dartry, Dublin 6, Ireland, or email hello@parklanehq.com.