NarrateIQ is operated by Diaz Strategic Enterprises LLC, a Virginia limited liability company ("Company," "we," "us," or "our"). This Privacy Policy describes how we collect, use, disclose, and protect information in connection with NarrateIQ ("the Service").
This policy applies to: (a) agency subscribers and their authorized users who access the Service; and (b) visitors to narrate-iq.com. It does not apply to your clients' end customers, whose data you are responsible for under your own agreements with them.
By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, do not use the Service.
NarrateIQ serves marketing agencies, not consumers. The advertising data you connect belongs to your clients' ad accounts, and you represent that you have authorization to share it with us. We are a data processor with respect to that data and you are the data controller.
We collect the minimum data necessary to provide the Service:
| Data Type | What It Is | Why We Collect It |
|---|---|---|
| Account information | Name, email address, agency name | To create and manage your account and deliver reports |
| Ad campaign metrics | Spend, impressions, clicks, conversions, CTR, CPA (campaign level only) | To generate your weekly performance report |
| API credentials | OAuth tokens and API access credentials for connected ad platforms | To retrieve campaign data on your behalf |
| Billing information | Handled entirely by Stripe. We never see or store your card number, CVV, or full payment details. | To process subscription payments |
| Usage data | Log data, IP addresses, browser type, pages visited, timestamps | To operate, secure, and improve the Service |
| Communications | Emails and messages you send us | To respond to your inquiries and support requests |
We do not collect personally identifiable information about your clients' end customers. We access only campaign-level performance metrics, not audience demographics, creative assets, or individual user data from ad platforms.
We use the information we collect to:
| Purpose | Details |
|---|---|
| Provide the Service | Generate and deliver your advertising performance reports |
| Manage your account | Create accounts, process subscriptions, send transactional emails |
| Improve the Service | Analyze usage patterns to fix bugs and improve features |
| Security and fraud prevention | Detect and prevent unauthorized access and abuse |
| Legal compliance | Meet our obligations under applicable law |
| Communications | Respond to support requests and send service-related notices |
We do not sell, rent, or trade your personal information or advertising data. We do not use your advertising data to train AI models. We do not use your data for behavioral advertising or share it with data brokers.
We process your information on the following legal bases:
Contract performance: Processing necessary to provide the Service you subscribed to, including generating reports and managing your account.
Legitimate interests: Processing necessary for our legitimate business interests, such as improving the Service, preventing fraud, and maintaining security, where those interests are not overridden by your rights.
Legal obligation: Processing required to comply with applicable law.
Consent: Where we rely on your consent (e.g., optional marketing communications), you may withdraw consent at any time by contacting us.
NarrateIQ uses the following third-party services to operate. We share only the minimum data necessary for each service to function. Each provider has its own privacy policy governing its use of data:
| Service | Purpose | Data Shared |
|---|---|---|
| Anthropic (Claude AI) | AI report generation | Normalized campaign metrics (no PII beyond what appears in campaign names) |
| SendGrid (Twilio) | Email delivery | Recipient email addresses and report content |
| Stripe | Payment processing | Name, email, billing address (we never see card numbers) |
| Google Ads API | Campaign data retrieval | OAuth tokens for authorized accounts |
| Meta Marketing API | Campaign data retrieval | OAuth tokens for authorized accounts |
| Railway | Cloud hosting and infrastructure | Application data as hosted on their platform |
We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies. Changes to these providers may affect how your data is handled, and we will update this policy accordingly.
We may disclose your information in the following circumstances:
Service providers: To the third-party providers listed above, strictly to operate the Service.
Legal requirements: If required by law, regulation, legal process, or governmental authority, including to comply with a subpoena, court order, or similar legal demand.
Protection of rights: When we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Diaz Strategic Enterprises LLC, our users, or others.
Business transfers: In connection with any merger, acquisition, sale of assets, or transition of service to another provider, in which case subscriber information may be among the transferred assets. We will notify you via email and/or a prominent notice on the Service if such a transfer occurs, and you will have the opportunity to object.
With your consent: When you have explicitly authorized us to do so.
We will not sell, rent, or share your personal information with third parties for their own marketing purposes.
We retain different categories of data for different periods based on operational need and legal requirements:
| Data Type | Retention Period |
|---|---|
| Raw campaign metrics | Up to 14 days for week-over-week comparison, then deleted |
| Generated reports | Duration of active subscription, then deleted within 30 days of cancellation |
| Account information | Duration of account plus up to 90 days after closure for legal/dispute purposes |
| Billing records | 7 years as required for tax and accounting purposes |
| API credentials | Duration of active subscription; revoked and deleted upon cancellation |
| Log data | Up to 90 days for security and operational purposes |
We reserve the right to retain data for longer periods where required by law or where necessary to resolve disputes, enforce agreements, or protect our legal rights.
We implement commercially reasonable technical and organizational measures to protect your information from unauthorized access, loss, or disclosure, including: encryption of data in transit via HTTPS/TLS, encrypted storage of API credentials and access tokens as environment variables, access controls limiting data access to personnel who need it, and regular review of our security practices.
No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
You are responsible for maintaining the security of your account credentials. We are not liable for any unauthorized access to your account resulting from your failure to secure your credentials.
Our website (narrate-iq.com) may use cookies and similar tracking technologies to operate the site and understand how visitors use it. Types of cookies we may use:
| Type | Purpose |
|---|---|
| Essential cookies | Required for the website and Service to function (e.g., session management, authentication) |
| Analytics cookies | Help us understand how visitors use the site (aggregate, anonymous data) |
You can control cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning properly. We do not use cookies for behavioral advertising or cross-site tracking.
Do Not Track: Some browsers offer a "Do Not Track" setting. We honor Do Not Track signals by not employing behavioral tracking when we detect this signal.
The Service is intended solely for use by adults operating professional marketing businesses. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal information from a minor, we will promptly delete it. If you believe we have inadvertently collected information from a minor, please contact us at ndiaz@narrate-iq.com.
Subject to applicable law, you may have the right to:
| Right | What It Means |
|---|---|
| Access | Request a copy of the personal information we hold about you |
| Correction | Request correction of inaccurate personal information |
| Deletion | Request deletion of your personal information, subject to legal retention requirements |
| Portability | Receive your data in a structured, machine-readable format where technically feasible |
| Objection | Object to processing based on legitimate interests |
| Restriction | Request restriction of certain processing in specific circumstances |
| Revoke ad platform access | Remove NarrateIQ's access to your advertising accounts directly through Google Ads or Meta Business Manager settings at any time |
To exercise any of these rights, email ndiaz@narrate-iq.com with your request. We will respond within 30 days. We may need to verify your identity before processing requests. We reserve the right to deny requests that are manifestly unfounded, excessive, or that would require disclosure of another person's information.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply:
Controller and Processor: With respect to your own personal data (your account information), Diaz Strategic Enterprises LLC acts as the data controller. With respect to your clients' advertising data that you connect to the Service, you are the data controller and we are the data processor. Agencies requiring a Data Processing Agreement may request one via our DPA page.
International Transfers: We are based in the United States. If you access the Service from the EEA, UK, or Switzerland, your data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction. We rely on Standard Contractual Clauses and other appropriate safeguards for such transfers where required. By using the Service, you consent to this transfer.
Your Rights: In addition to the rights described in Section 11, EEA users have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data in accordance with applicable law.
Retention: We retain your personal data only as long as necessary for the purposes described in this policy or as required by law.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:
Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing: We do not sell or share personal information as defined under the CCPA. You do not need to opt out.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
Categories of Information Collected: Identifiers (name, email, IP address), commercial information (subscription records), internet activity (usage logs), and professional information (agency name). We do not collect sensitive personal information as defined under the CPRA beyond what is necessary to provide the Service.
To submit a verifiable consumer request under the CCPA, email ndiaz@narrate-iq.com. We will respond within 45 days. We may need to verify your identity before processing your request.
We may update this Privacy Policy from time to time at our sole discretion. If we make material changes, we will notify you by email to the address associated with your account and update the "Last updated" date at the top of this page. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.
We encourage you to review this policy periodically. If you object to any changes, you must stop using the Service and cancel your subscription.
Questions about this Privacy Policy or requests to exercise your rights? Contact Diaz Strategic Enterprises LLC (operating as NarrateIQ) at ndiaz@narrate-iq.com. We respond to all privacy inquiries within 30 days.