← Back to NARRATA
Privacy Policy
NARRATA PRIVACY POLICY
Effective Date: July 14, 2026
Last Updated: July 14, 2026
1. Introduction
This Privacy Policy explains how NARRATA ("NARRATA", "we", "our", or "us") collects, uses, stores, shares, and protects personal information when you use our website, applications, AI-powered tools, and related services (collectively, the "Service").
We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation ("GDPR") where applicable.
By using NARRATA, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
The controller responsible for processing your personal data is:
Narrata Studio, računalniško programiranje, Jurij Žnidarčič s.p.
Republic of Slovenia
Contact:
Narrata Studio, računalniško programiranje, Jurij Žnidarčič s.p.
Štefančeva ulica 6
1210 Ljubljana, Slovenia
Company registration number (matična številka): 7543697000
Tax number (davčna številka): 12258563
Not liable for VAT under Article 94 ZDDV-1.
Email: team@narrata.studio
3. Information We Collect
Depending on how you use NARRATA, we may collect the following categories of information.
Account Information
When you create an account we may collect:
- name;
- email address;
- authentication provider;
- account identifier;
profile image (if provided by your login provider).
Subscription Information
If you purchase a subscription we may collect:
- subscription plan;
- subscription status;
- billing dates;
- transaction identifiers;
- Stripe customer identifier;
- Stripe subscription identifier;
- payment status.
NARRATA does not store your full payment card information.
Payment information is securely processed by Stripe.
AI Usage Data
When you use AI-powered features we may process:
- prompts;
- uploaded scripts;
- generated titles;
- thumbnail requests;
- generated ideas;
- AI-generated outputs;
- feature usage;
- credit usage.
This information is processed solely to provide the requested functionality.
Technical Information
We may automatically collect:
- IP address;
- browser type;
- operating system;
- device information;
- language settings;
- time zone;
- approximate location derived from IP;
- log files;
- crash reports;
- diagnostic information.
Analytics Information
We may collect anonymous or pseudonymous analytics information regarding:
- page visits;
- feature usage;
- navigation behavior;
- performance metrics;
- device characteristics.
Analytics information is used to improve the Service and user experience.
4. How We Use Your Information
We use your information to:
- provide the Service;
- authenticate users;
- create and manage accounts;
- process subscriptions;
- allocate monthly credits;
- provide AI-generated outputs;
- improve platform performance;
- detect fraud and abuse;
- protect platform security;
- communicate with users;
- provide customer support;
- comply with legal obligations;
- enforce our Terms of Service.
We do not sell your personal information.
5. AI Processing
NARRATA uses artificial intelligence technologies to provide creator-focused features.
When you submit prompts, scripts or other content, that information is processed only to generate the requested AI output.
Your content is processed only for the purpose of providing the requested Service.
User content is not used to train AI models, whether our own or those of third-party providers. Our AI providers process user content solely to return the requested output and do not retain it for model training.
6. Legal Basis for Processing
Where GDPR applies, we process personal data based on one or more of the following legal grounds:
- performance of a contract;
- compliance with legal obligations;
- legitimate business interests;
- user consent where required.
7. Payment Processing
All subscription payments are processed securely through Stripe.
NARRATA never stores your complete payment card number, CVC code or other sensitive payment credentials.
Payment information is handled directly by Stripe in accordance with Stripe's own Privacy Policy.
8. Third-Party Service Providers
To provide the Service, NARRATA relies on trusted third-party providers that perform services on our behalf or support the operation of the platform.
Depending on the features you use, these providers may include:
- Stripe (payment processing)
- Google Authentication
- Apple Sign In
- AI model providers (including OpenAI and Google)
- Cloud hosting and application infrastructure providers
- Product analytics providers
- Email delivery providers
- Other service providers required to operate the platform
These providers only receive the information necessary to perform their services and are contractually or legally responsible for protecting that information where applicable.
NARRATA is not responsible for the independent privacy practices of third-party providers.
We encourage users to review the privacy policies of those providers where appropriate.
9. Authentication Services
NARRATA supports authentication through third-party identity providers.
These may include:
- Google
- Apple
- Email authentication
When you choose to sign in using Google or Apple, we may receive information from those providers including:
- your name;
- your email address;
- your profile picture (if available);
- a unique authentication identifier.
We do not receive your passwords for Google or Apple accounts.
Authentication credentials remain managed by the respective authentication provider.
10. Data Retention
We retain personal information only for as long as necessary to:
- provide the Service;
- maintain your account;
- comply with legal obligations;
- resolve disputes;
- enforce our agreements;
- protect the security and integrity of the platform.
Retention periods may vary depending on the type of information involved.
Subscription and transaction records may be retained for longer periods where required by applicable accounting or tax laws.
Specific retention periods:
- Account data: deleted or anonymised within 30 days of account deletion;
- AI prompts and generated outputs: retained while your account is active, then delete within 30 days of account deletion;
- Accounting and invoicing records: retained for 10 years, as required by Slovenian accounting and tax legislation;
- Security and access logs: retained for up to 12 months.
11. Data Security
We implement commercially reasonable technical and organizational measures designed to protect personal information against:
- unauthorized access;
- accidental disclosure;
- alteration;
- destruction;
- misuse;
- unauthorized processing.
These measures may include:
- encrypted communications (HTTPS);
- authenticated user access;
- access controls;
- infrastructure security;
- monitoring and logging;
- secure payment processing through Stripe.
While we strive to protect personal information, no method of transmission or electronic storage can be guaranteed to be completely secure.
12. International Data Transfers
Depending on your location and the third-party providers used by NARRATA, your personal information may be transferred to and processed in countries outside your country of residence.
Where required by applicable law, we take reasonable measures to ensure that appropriate safeguards are in place for international data transfers.
Some of our providers, including OpenAI and Google, process data in the United States.
Such transfers are made on the basis of the EU–US Data Privacy Framework and/or the
European Commission's Standard Contractual Clauses (SCCs), together with supplementary measures where appropriate.
13. Your Rights
Where applicable under data protection laws, including the GDPR, you may have the right to:
- access your personal information;
- correct inaccurate information;
- request deletion of your personal information;
- restrict certain processing activities;
- object to certain processing activities;
- request data portability;
- withdraw consent where processing is based on consent;
- lodge a complaint with your local data protection authority.
Requests may be submitted by contacting:
team@narrata.studio
We may request reasonable verification of your identity before processing privacy-related requests.
If you are located in Slovenia, you may lodge a complaint with:
Informacijski pooblaščenec RS
Dunajska cesta 22, 1000 Ljubljana
gp.ip@ip-rs.si | www.ip-rs.si
If you are located elsewhere in the EU, you may contact the supervisory authority in your country of residence.
14. Automated Decision-Making
NARRATA does not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
AI-generated scores, ratings and recommendations produced by the Service are advisory outputs intended to support your own creative judgment. They do not constitute automated decisions within the meaning of Article 22 GDPR.
15. Account Deletion
You may request deletion of your NARRATA account by contacting:
team@narrata.studio
Following verification of your request, we will delete or anonymize your personal information unless we are legally required to retain certain records, including billing, accounting, fraud prevention, or other information required by applicable law.
Deletion of your account may permanently remove access to:
- subscription history;
- AI history;
- stored content;
- remaining credits;
- saved projects.
This action may be irreversible.
16. Children's Privacy
NARRATA is not intended for children under the age of 13.
We do not knowingly collect personal information from children under 13.
If we become aware that personal information has been collected from a child under 13
without appropriate authorization, we will take reasonable steps to delete that
information without undue delay.
Parents or guardians who believe that a child has provided us with personal information
may contact us at team@narrata.studio.
17. Cookies and Similar Technologies
NARRATA uses cookies and similar technologies to:
- authenticate users;
- maintain secure sessions;
- remember preferences;
- improve website performance;
- analyze usage;
- support essential platform functionality.
Additional information regarding cookies is available in our Cookie Policy.
Where required by law, users will be given the opportunity to manage their cookie preferences before non-essential cookies are placed on their devices.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
If material changes are made, we will update the "Last Updated" date at the top of this document and may provide additional notice where required by law.
Continued use of the Service after the effective date of an updated Privacy Policy constitutes acknowledgment of the revised Policy.
19. Contact Us
If you have questions regarding this Privacy Policy or our privacy practices, please contact:
NARRATA
Operated by:
Narrata Studio, računalniško programiranje, Jurij Žnidarčič s.p.
Štefančeva ulica 6
1210 Ljubljana, Slovenia
Company registration number (matična številka): 7543697000
[Not liable for VAT under Article 94 ZDDV-1.]
Republic of Slovenia
Email: team@narrata.studio