Privacy Policy

Last updated: 2025-04-10

1. Introduction

Welcome to Narravid. We respect your privacy and are committed to protecting your personal data. This Privacy Policy informs you about how we collect, use, and process your personal data when you use our website and services, as well as your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. The Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

  • Identity Data: includes first name, last name, username or similar identifier
  • Contact Data: includes email address and telephone numbers
  • Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website
  • Usage Data: includes information about how you use our website and services
  • Generated Content Data: includes content inputs provided by you (which may contain personal data, depending on your input)
  • Marketing and Communications Data: includes your preferences in receiving marketing from us and our third parties and your communication preferences

3. How We Use Your Data

We will only process your personal data when permitted by law. Most commonly, we rely on the following legal bases under Article 6 of the GDPR:

  • Performance of a contract: to provide and maintain our service
  • Legal obligation: to comply with applicable legal requirements
  • Legitimate interests: to monitor and improve our services, maintain security, and prevent abuse
  • Consent: where we ask for your consent, such as for optional communications or cookies

4. Data Sharing and Third Parties

We use trusted third-party services to operate and improve our platform. These providers may process personal data on our behalf:

  • Auth0: User authentication and registration
  • Stripe: Payment processing
  • OpenAI, ElevenLabs, Suno, Luma Dreamlabs, ImmersityAI, Creatomate: Content generation services (may receive user input that could contain personal data)
  • Vercel: Frontend hosting
  • AWS S3: Backend hosting and file storage
  • Beehiiv: Email newsletter service for sending updates, managing waitlist, and marketing communications

Some of these providers may be located outside the EU/EEA. In such cases, data transfers are carried out in compliance with Chapter V of the GDPR, based on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including legal, accounting, or reporting obligations. User accounts and associated data will be deleted if they remain inactive for an extended period, in accordance with GDPR-compliant retention rules.

6. Data Security

We implement appropriate technical and organizational security measures to prevent unauthorized access, misuse, loss, or disclosure of your personal data. Access is limited to those with a business need to know.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access – obtain a copy of your personal data
  • Right to rectification – correct inaccurate data
  • Right to erasure – delete your data ('right to be forgotten')
  • Right to restriction of processing – limit how we use your data
  • Right to data portability – receive your data in a usable format
  • Right to object – object to data processing based on legitimate interests
  • Right to withdraw consent – if processing is based on your consent

8. Marketing and Newsletter

If you have opted to join our waitlist or receive our newsletter, we process your email address and name (if provided) to send you updates about our product launch, service information, and marketing communications. This processing is based on your consent, which you can withdraw at any time by clicking the unsubscribe link in our emails or contacting us directly. We use Beehiiv as our newsletter service provider, which helps us manage subscriber lists, send emails, and track engagement metrics (such as email opens and clicks) to improve our communications.

9. Supervisory Authority

You have the right to lodge a complaint with a data protection authority. For users located in Germany, the competent authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 27, 91522 Ansbach, Germany

https://www.lda.bayern.de

10. Contact Us

If you have any questions or concerns about this Privacy Policy or how we process your data, please contact us at:

Email: contact@narravid.io
Phone: +49 1729165076
Address: Narravid, Friedrich Ebert Ring 31, 97072 Würzburg, Germany