Data Processing Agreement

Last updated: June 2026  ·  NarrateIQ, a service of Diaz Strategic Enterprises LLC  ·  2045 S Pleasant Valley Road, #1098, Winchester, VA 22601  ·  ndiaz@narrate-iq.com

Contents
  1. Overview
  2. Roles: Controller and Processor
  3. Scope of Processing
  4. Subprocessors
  5. Security Measures
  6. Data Return and Deletion
  7. Requesting a Signed Copy
1

Overview

This page summarizes the terms NarrateIQ offers agencies that need a formal Data Processing Agreement (DPA) for their own compliance, client contracts, or vendor-review process. It is not itself a signed legal agreement; it describes what a signed DPA with NarrateIQ will contain. If your agency needs a counter-signed copy, see Requesting a Signed Copy below.

2

Roles: Controller and Processor

Your agency (the "Controller") determines what advertising account data is connected and for what purpose. NarrateIQ (the "Processor") processes that data solely to generate and deliver the reports you configure. NarrateIQ does not sell data, use it for advertising, or use it to train AI models.

3

Scope of Processing

NarrateIQ processes campaign-level performance metrics only: spend, clicks, impressions, conversions, CPA, CTR, and similar aggregate metrics retrieved via official Google Ads, Meta Ads, LinkedIn Ads, and TikTok Ads APIs. NarrateIQ does not access customer lists, audience data, or any personally identifiable information belonging to your clients' end customers.

4

Subprocessors

NarrateIQ uses the following subprocessors to deliver the Service: Anthropic (report generation via the Claude API), SendGrid (email delivery), and Railway (application hosting). A current list is maintained and provided on request. We will notify you of any new subprocessor that will handle your data before it goes into effect.

5

Security Measures

Access to advertising accounts is read-only and granted via official OAuth flows; NarrateIQ cannot modify, pause, or otherwise alter any campaign. Credentials and tokens are stored encrypted. Dashboard access is protected by authentication, and raw performance data is retained for 14 days for week-over-week comparisons before being permanently deleted.

6

Data Return and Deletion

On request, or automatically upon cancellation of your subscription, NarrateIQ will delete all stored client data within 30 days, except where retention is required by law. You may request an export of your report history at any time before deletion.

7

Requesting a Signed Copy

Email ndiaz@narrate-iq.com with your agency name and we'll send a signed DPA reflecting these terms, typically within 2 business days.