Privacy Policy

1. Who We Are

NarraLoom is a content operating system designed to help businesses keep on-brand content shipping automatically while expanding AI search presence. Our Services include a recurring Publishing System and an AI Visibility System, which may involve account setup, onboarding, audit generation, content creation, workflow routing, publishing authorization, reporting, and related features.

If you have questions about this Privacy Policy or our privacy practices, you may contact us at:

2. The Personal Information We Collect

The personal information we collect depends on how you interact with NarraLoom.

A. Information you provide directly

We may collect personal information you provide to us directly, including:

• name, email address, phone number, company name, job title, and other business contact details;
• account credentials or account-related information;
• billing and transaction information, including payment-related details collected through our payment providers;
• onboarding responses and business inputs, such as tone, voice preferences, claims boundaries, no-go topics, CTA preferences, positioning details, approval preferences, and other guardrails;
• content materials, prompts, files, documents, examples, notes, images, and other inputs you submit through the Services;
• information you provide when requesting a preview, starting an audit, filling out forms, booking a call, or contacting us;
• support messages, survey responses, feedback, and communications with us.

B. Information we collect automatically

When you use the Services, we may automatically collect certain information, including:

• IP address, browser type, device type, operating system, language, approximate location derived from IP, and similar device and network information;
• pages viewed, links clicked, referring URLs, session activity, timestamps, and similar usage information;
• log files, diagnostics, crash information, performance data, and security event data;
• cookie IDs, advertising IDs, and similar identifiers collected through cookies, pixels, tags, SDKs, and similar technologies.

C. Information from connected accounts and third parties

If you connect third-party accounts or services, or if we work with vendors and service providers on your behalf, we may receive information such as:

• account or page identifiers, usernames, profile or business account metadata, permissions, tokens, and authorization status;
• workflow, publishing, delivery, or account-status information from connected platforms;
• analytics, attribution, and campaign-related information from advertising or analytics providers;
• contact, enrichment, or lead-related information from service providers where permitted by law and consistent with this Privacy Policy.

D. Audit, content, and workflow data

Because NarraLoom operates a Publishing System and an AI Visibility System, we may collect and generate data such as:

• audit inputs, evidence summaries, report state, scores, recommendations, content ideas, and related report artifacts;
• generated content, drafts, blog materials, structured copy, content history, approval history, publishing status, and related workflow records;
• guardrail checks, originality or plagiarism checks, quality checks, and related review or routing data.

E. Sensitive information

We do not intentionally request sensitive personal information unless it is necessary for a specific lawful purpose and we clearly ask for it. Please do not submit sensitive personal information or regulated data through the Services unless we have expressly told you it is appropriate to do so.

If you choose to include sensitive information in prompts, onboarding materials, uploads, support requests, or other submissions, we may process it as part of providing the Services.

3. How We Collect Personal Information

We collect personal information:

• directly from you;
• automatically through your use of the Services;
• from cookies and similar technologies;
• from connected accounts and integrations you authorize;
• from vendors, analytics providers, advertising partners, and similar service providers;
• from business partners, referrals, or lead sources, where permitted by law.

4. How We Use Personal Information

We may use personal information for the following purposes:

• to provide, operate, maintain, and improve the Services;
• to create, generate, structure, route, deliver, schedule, or publish content and other Outputs through the Services;
• to run AI Search Visibility Audits, reports, scoring, recommendations, and related workflows;
• to create and manage accounts, previews, subscriptions, and customer relationships;
• to process payments, invoices, renewals, and related transactions;
• to connect and manage authorized third-party accounts and publishing workflows;
• to personalize your experience and remember preferences;
• to communicate with you about your account, the Services, support, security, billing, product changes, and other administrative matters;
• to send marketing communications, subject to your preferences and applicable law;
• to analyze usage, measure performance, improve the Services, and develop new features;
• to monitor, detect, investigate, prevent, or address fraud, abuse, security incidents, or technical issues;
• to enforce our Terms of Service, Acceptable Use Policy, and other legal rights;
• to comply with law, legal process, or regulatory obligations.

5. Legal Bases for Processing

If you are located in a jurisdiction that requires a legal basis for processing personal information, we may rely on one or more of the following legal bases:

• performance of a contract or steps taken at your request before entering into a contract;
• our legitimate interests, such as operating and improving the Services, securing the Services, communicating with customers, and marketing our Services;
• your consent, where required;
• compliance with legal obligations;
• protection of vital interests where applicable.

6. Cookies, Analytics, and Advertising

We use cookies and similar technologies to operate the Services, remember preferences, secure the Services, analyze traffic, and support marketing and advertising.

These technologies may be used by us and by third parties, including analytics, social media, and advertising partners. Depending on your settings and applicable law, these technologies may be used to:

• keep the website functioning;
• understand site traffic and usage patterns;
• measure campaign performance;
• personalize content and advertisements;
• recognize returning visitors and devices;
• support remarketing or audience-building activities.

You can manage cookies through your browser settings and, where available, our consent tools or cookie preferences.

If applicable law treats certain advertising or analytics disclosures as a "sale" or "sharing" of personal information, you may have the right to opt out. See the "Your Privacy Rights" section below.

We may also use analytics tools to understand how visitors interact with the Services and to improve performance and user experience.

7. AI, Automation, and Content Processing

NarraLoom uses automation, machine learning, and AI-assisted systems as part of its Services. These features may support content generation, formatting, classification, summarization, review workflows, reporting, quality checks, originality checks, audit generation, and related functions.

To operate these features, we may process personal information and Customer-submitted inputs through NarraLoom systems and through third-party service providers that support hosting, content processing, analytics, automation, and related service functions.

Information submitted to AI- or automation-supported features may be used to:

• generate or refine content and reports;
• apply configured voice, rules, and guardrails;
• perform analysis, scoring, classification, or recommendations;
• route content through your selected workflow;
• detect misuse, fraud, or harmful content;
• maintain and improve service quality and reliability.

You are responsible for deciding what information you submit to the Services and for reviewing Outputs before using or publishing them.

8. When We Disclose Personal Information

We may disclose personal information in the following circumstances:

A. Service providers and subprocessors

We may disclose personal information to vendors and service providers that support our business and Services, such as providers of:

• cloud hosting and infrastructure;
• analytics;
• payment processing;
• communications and email delivery;
• customer support;
• authentication and security;
• AI, automation, and content-processing services;
• advertising, remarketing, and attribution services;
• publishing, integration, and workflow services.

These providers may process information on our behalf subject to contractual and legal restrictions.

B. Connected platforms and integrations

If you connect third-party accounts or authorize integrations, we may disclose or receive information as needed to operate those connections, including to publish, route, schedule, or track content according to your selected workflow.

C. Advertising and analytics partners

Subject to consent choices and applicable law, we may disclose identifiers, device information, usage data, and similar data to advertising, social media, and analytics partners for campaign measurement, audience development, personalization, and related purposes.

D. Corporate transactions

We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other business transaction.

E. Legal, safety, and rights protection

We may disclose information if we believe disclosure is necessary to:

• comply with law, legal process, or lawful requests by public authorities;
• enforce our agreements and policies;
• detect, investigate, or prevent fraud, security issues, or other unlawful activity;
• protect the rights, property, or safety of NarraLoom, our customers, or others.

F. With your direction or consent

We may disclose information when you ask us to do so, direct us to do so, or otherwise consent.

G. SMS and Text Messaging

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the text message services used to operate our messaging program.

All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

If you provide your phone number and opt in to SMS communications, you may receive text messages from NarraLoom related to your inquiry or account. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe at any time. Reply HELP for help or contact us at hello@narraloom.com.

9. How Long We Keep Personal Information

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with law, resolve disputes, enforce agreements, and maintain security and business records.

Retention periods may vary depending on the type of information and the reason we collected it. For example, we may retain:

• account, billing, and subscription records for as long as needed for the customer relationship and related legal or financial obligations;
• onboarding, voice, guardrail, workflow, and content history data for as long as needed to provide and support the Services;
• audit and report records for as long as needed to maintain account functionality, reporting continuity, business records, and service integrity;
• logs and diagnostics for shorter periods, except where needed for security, fraud prevention, or legal compliance;
• backups and archived data for reasonable recovery, continuity, legal, and security purposes.

When we no longer need personal information, we will delete it, anonymize it, or de-identify it where feasible. In some cases, we may retain information longer if required or permitted by law.

10. How We Protect Personal Information

We use reasonable technical, administrative, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

Security measures may include encryption, access controls, role-based permissions, multi-factor authentication, logging, monitoring, backups, and related safeguards. Our Trust Center also describes data minimization, retention and deletion controls, and customer-controlled publishing authorization.

No security measure is perfect, and we cannot guarantee absolute security.

11. International Transfers

We are based in the United States, and we may process and store personal information in the United States and other countries where we or our service providers operate.

If you use the Services from outside the United States, your information may be transferred to and processed in countries that may not provide the same level of data protection as your home jurisdiction.

Where required by law, we will use appropriate safeguards for cross-border transfers.

12. Children's Privacy

The Services are intended for business use and are not directed to children under 18. We do not knowingly collect personal information from children under 18.

If you believe a child has provided personal information to us, contact us at privacy@narraloom.com and we will take appropriate steps.

13. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, which may include the right to:

• know whether we process your personal information;
• access or request a copy of your personal information;
• correct inaccurate personal information;
• delete personal information;
• withdraw consent where processing is based on consent;
• opt out of certain marketing communications;
• opt out of targeted advertising, sale, or sharing of personal information where applicable;
• appeal a denial of a privacy request where applicable;
• limit the use of certain sensitive personal information where applicable.

You may exercise privacy rights by contacting us at privacy@narraloom.com.

We may need to verify your identity before processing certain requests. You may also designate an authorized agent where permitted by law.

Marketing opt-out

You may opt out of marketing emails by using the unsubscribe link in the email or by contacting us at privacy@narraloom.com. You may opt out of marketing text messages by replying STOP to a message from us.

Even if you opt out of marketing messages, we may still send service-related or transactional communications.

Cookies and advertising opt-outs

You can adjust cookie preferences through your browser settings and, where available, our consent tools.

If applicable law gives you the right to opt out of targeted advertising, the sale of personal information, or the sharing of personal information for cross-context behavioral advertising, you may exercise that right by contacting us or using any available privacy controls we provide.

Where required by applicable law, we will treat a legally recognized opt-out preference signal, such as Global Privacy Control, as a request to opt out for the browser or device associated with that signal.

Do Not Track

Because there is not yet a uniform standard for Do Not Track signals, we do not respond to browser-based Do Not Track signals except as otherwise required by law.

14. Additional U.S. State Privacy Disclosures

This section provides additional information for residents of U.S. states with privacy laws that apply to NarraLoom.

Categories of personal information we may collect

In the preceding 12 months, we may have collected the following categories of personal information, depending on how you interact with the Services:

• identifiers, such as name, email address, phone number, account identifiers, IP address, cookie IDs, and similar identifiers;
• customer records information, such as billing details, account records, and business contact information;
• commercial information, such as subscription records, transaction information, and purchasing history;
• internet or network activity, such as browsing activity, usage logs, interactions with our Services, and analytics data;
• geolocation data, such as approximate location derived from IP;
• audio, electronic, visual, or similar information, such as support communications, uploads, and content materials you provide;
• professional or employment-related information, such as business role, employer, or agency information;
• inferences derived from the information above, such as preferences, workflow settings, and content or marketing interests;
• sensitive personal information only where you choose to provide it or where it is otherwise processed as permitted by law.

Sources

We collect these categories from the sources described in Section 3 above.

Purposes

We use these categories for the business and commercial purposes described in Section 4 above.

Disclosures

We may disclose these categories to the categories of recipients described in Section 8 above.

Sale and sharing

We do not sell personal information for money.

However, like many online businesses, we may disclose identifiers, device data, cookie data, and internet or network activity to advertising, social media, and analytics partners in ways that may be considered a "sale" or "sharing" under certain state privacy laws, particularly in connection with targeted advertising. You may opt out as described above.

Sensitive personal information

We do not use or disclose sensitive personal information for the purpose of inferring characteristics about consumers.

Non-discrimination

We will not discriminate against you for exercising privacy rights granted by law.

Appeals

If we deny your privacy request and you have a right to appeal under applicable law, you may submit an appeal by emailing privacy@narraloom.com with the subject line "Privacy Appeal."

15. Third-Party Websites and Services

The Services may contain links to third-party websites, applications, platforms, or services. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices.

If you connect third-party accounts to NarraLoom, those third parties may collect, use, or disclose information under their own policies.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page.

If we make material changes, we may provide additional notice, such as by posting a notice through the Services or contacting you directly where required by law.

17. How to Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at: