Privacy Policy

Narrative OS is a content intelligence and planning platform operated by Iranic Digital, based in Nairobi, Kenya ("we", "us"). This policy covers the Narrative OS web application at narrativeintelligence.online and its related services.

Required to operate the service:

• Account information: your name, email address, a unique user ID and, for email sign-up, a securely hashed password (we never store passwords in readable form).
• Workspace information: the workspaces (brands) you belong to, your role and permissions.
• Security and operational records: sign-in attempts and outcomes, rate-limit counters, recent authenticated application interactions, account-access status, administrator actions, activity and audit records, and error diagnostics. Our application security records use hashed IP identifiers and masked emails. Hosting and authentication services may separately process connection information, including IP addresses.

Content you choose to provide: website URLs, uploaded PDF documents, written or pasted notes, competitor information, comments, and content you write or edit in Content Studio.

Content generated for you: research understanding, briefs, competitor analysis, strategic recommendations, content opportunities, content plans, calendar items, drafts, version history and notifications.

Optional integrations: if you connect LinkedIn, we store the LinkedIn organization page details you select, the access tokens LinkedIn issues, and records of posts published through Narrative OS.

Google sign-in is offered only as a way to log in. When you choose it, Google shares your basic profile with us: your name, email address, profile picture URL and a Google account identifier. We request only the standard sign-in scopes (openid, email, profile). We do not access your Gmail, Google Drive, Google Calendar, contacts or any other Google service.

We use Google sign-in information to identify your account, display your identity and protect access. New accounts require a verified email from a domain not on our maintained personal-email-provider list; existing accounts retain their established sign-in method. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google sign-in data for advertising or AI model training.

You can revoke access through your Google Account permissions and manage your Narrative OS account through Settings.

• Creating and managing accounts, authentication and workspace access.
• Running research, analysing your knowledge sources and competitors, and generating recommendations, plans and draft content.
• Publishing content to LinkedIn when you explicitly choose to publish.
• Sending service emails such as account confirmation, password resets and workflow notifications.
• Protecting the service: rate limiting, abuse prevention, security monitoring and troubleshooting.
• Responding to support and privacy requests.

We do not sell personal information and do not use it for advertising.

To generate research, recommendations, plans and content, relevant workspace material (such as your knowledge sources, research results and draft text) is sent to Google's Gemini AI model through the Gemini API. Only the information needed for the requested task is sent. AI output is labelled as generated and you remain in control of what is saved or published. Content is not published automatically.

• Hosting, database, storage and authentication services: process account information, sessions and workspace material to operate the application.
• AI and search services: receive task-relevant research material, queries and draft content for analysis and generation.
• Email delivery services: receive recipient addresses and message content for account and service communications.
• Optional identity and publishing platforms: provide sign-in information or receive the content you explicitly publish through a connected workspace.

We may also disclose information if required by law or to protect the rights and safety of users and the service.

Data is transmitted over encrypted HTTPS connections. Workspace permissions and database access rules restrict access according to membership and authorized administrator roles. AI and publishing credentials remain server-side; authentication session tokens are used by your browser. Sign-in attempts are rate limited and security events are recorded. No system is perfectly secure.

Suspension blocks personal access but retains account data and workspace memberships; a platform Super Admin must reactivate access. Deletion removes authentication access, memberships and personal profile information. Shared workspace documents, research, content and necessary business history are retained for the workspace rather than erased when an individual leaves. A last administrator must transfer administration before suspension or deletion.

Activity logs and email delivery records are purged after 14 days. Security events, including account-management outcomes, are subject to the existing 30-day cleanup window. Recent application activity is tracked from this release, not reconstructed historically. AI execution and provider-call records remain for spending controls and caching; no fixed deletion period is promised for those records. Provider-managed logs, backups and published copies may follow their own retention rules. We may retain information required for legal obligations or resolving disputes.

We use browser storage to keep you signed in (an authentication session token) and to remember interface preferences. We do not use advertising or third-party tracking cookies. Signing out removes the session.

Depending on applicable law, including Kenya's data-protection law, you may request access, correction, export or deletion, or object to processing. Use the contact details below for requests or complaints. Account suspension and deletion are available in Settings, subject to identity verification and safe workspace administration. You can disconnect LinkedIn in Settings and revoke Google access from your Google Account.

Narrative OS is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children; contact us if you believe a child has provided data and we will delete it.

We are based in Kenya, and our service providers may process data in other countries, including the United States and the European Union. By using the service you understand that your information may be processed outside your country.

We may update this policy. The effective date identifies the current version. Additional notices will be provided where required by applicable law.

Iranic Digital, Nairobi, Kenya. Email: murigironald4@gmail.com.