Privacy Policy
Last updated: February 19, 2025
1. Data Controller
The data controller responsible for your personal data is:
NarratiX
Email: support@narratix.app
Website: narratix.app
This Privacy Policy applies to the narratix.app website and the NarratiX desktop applications. It explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable EU/EEA data protection law.
2. Data We Collect and Legal Basis
We only collect data that is strictly necessary. The table below outlines what we collect and the legal basis under GDPR Article 6:
| Data | Purpose | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Name, email address | Purchase processing, license delivery, support | Art. 6(1)(b) — Performance of a contract |
| Payment data (handled by Stripe) | Secure payment processing | Art. 6(1)(b) — Performance of a contract |
| Hashed device identifier, license key | License activation and anti-fraud | Art. 6(1)(b) — Performance of a contract; Art. 6(1)(f) — Legitimate interest |
| IP address, browser type, OS, referrer URL | Website analytics, fraud prevention | Art. 6(1)(f) — Legitimate interest |
| Affiliate referral code (localStorage) | Attributing purchases to affiliate partners | Art. 6(1)(f) — Legitimate interest |
We do not collect any personal files, scripts, videos, or content you create with our tools.
3. Affiliate Disclosure
Our website contains affiliate links, including links to ElevenLabs. If you click these links and make a purchase, we may receive a commission at no extra cost to you. This does not influence our editorial content or recommendations.
4. Third-Party Processors
We share your data only with the following processors, each bound by data processing agreements:
- Stripe, Inc. (USA) — Payment processing. Transfers to the USA are covered by Stripe's Standard Contractual Clauses. stripe.com/privacy
- Resend, Inc. (USA) — Transactional email delivery. resend.com/legal/privacy-policy
- Supabase, Inc. (USA) — Database hosting. Data is stored in EU-region servers where available. supabase.com/privacy
- Vercel, Inc. (USA) — Website hosting and edge delivery. vercel.com/legal/privacy-policy
Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).
5. Data Retention
We retain your personal data only as long as necessary:
- Purchase records (name, email, transaction ID): retained for 10 years to comply with EU accounting and tax obligations.
- License activation data: retained for the duration of your active license.
- Support correspondence: retained for 2 years after resolution.
You may request deletion of your data at any time (subject to legal retention obligations).
6. Your Rights Under GDPR
As an EU/EEA resident, you have the following rights:
- Right of access — Request a copy of the personal data we hold about you.
- Right to rectification — Request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") — Request deletion of your data where there is no overriding legal reason to retain it.
- Right to restriction — Request that we restrict processing of your data in certain circumstances.
- Right to data portability — Receive your data in a structured, machine-readable format.
- Right to object — Object to processing based on legitimate interests.
- Right to lodge a complaint — You have the right to lodge a complaint with your national data protection supervisory authority. In Slovakia, this is the Úrad na ochranu osobných údajov SR. You may also contact the supervisory authority in your country of residence.
To exercise any of these rights, email us at support@narratix.app. We will respond within 30 days.
7. Cookies and Local Storage
Our website uses the following storage technologies:
- Strictly necessary cookies: Used for core website functionality. No consent required.
- localStorage: We store affiliate referral codes in your browser's localStorage to correctly attribute purchases. This data stays on your device and is not transmitted to third parties.
We do not use advertising cookies, cross-site tracking cookies, or any third-party analytics cookies.
8. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. All data in transit is encrypted via TLS/SSL. Payment data is handled exclusively by Stripe, a PCI DSS Level 1 certified processor — we never see or store your full card details.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by updating the date at the top of this page. We encourage you to review this policy periodically.
11. Contact
For any questions or to exercise your rights, contact us at:
support@narratix.app