This Privacy Policy describes how GUILHERME ROCHA DE CAMARGO, registered under CNPJ no. 43.076.445/0001-68, established in Maringá/PR ("Narractive", "we", "us"), collects, uses, stores and protects the personal data of users of the platform available at narractive.ai (the "Platform" or "Service").
Data processing complies with the Brazilian General Data Protection Law (Law No. 13,709/2018 — "LGPD") and, where applicable to users located in the European Union, the General Data Protection Regulation (Regulation EU 2016/679 — "GDPR").
By using the Platform, you acknowledge that you have read this Policy.
1. Data controller
The controller of your personal data is GUILHERME ROCHA DE CAMARGO, which may be contacted at contact@narractive.ai for any matter relating to this Policy or the exercise of your rights.
2. Personal data we collect
We collect the following categories of data:
2.1. Registration and account data. When you create an account, we collect your name, email address and password (stored in encrypted form, never in readable text). During authenticated use, we process session tokens necessary to keep you signed in.
2.2. Contact data. When you use the "Contact Us" form or equivalent channels, we collect your name, email, the content of your message, the page from which the request originated and the type of interest expressed.
2.3. Navigation and technical data. We automatically collect IP address, device and browser identifiers, pages accessed, date and time of access, and data generated by cookies and similar technologies (see Section 9).
2.4. Analyzed content. The Platform processes articles and journalistic material from public third-party sources to produce narrative analyses. Such content is not provided by you and, where it contains references to individuals (for example, actors cited in news), those references derive from public sources and are processed solely for the analytical purpose described in this Policy.
We do not intentionally collect sensitive personal data for registration purposes. Please do not include such data in contact messages.
3. Purposes and legal bases for processing
We process your data for the following purposes, with the corresponding legal bases (LGPD art. 7; GDPR art. 6):
- Creating and managing your account — performance of a contract / pre-contractual steps.
- Providing and operating the Service, including authentication and delivery of analyses — performance of a contract.
- Responding to contact and support requests — legitimate interest and/or pre-contractual steps.
- Communications about the Service (operational notices and, subject to consent where required, marketing communications) — consent and/or legitimate interest.
- Security, fraud prevention and technical stability — legitimate interest and compliance with legal obligation.
- Product improvement and aggregate statistical analysis — legitimate interest.
- Compliance with legal and regulatory obligations — legal obligation.
Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
4. Data sharing
We do not sell personal data. We may share it with:
- Processors and sub-processors that provide infrastructure, hosting, database, transactional email and analytics services, acting under our instructions and bound by contractual confidentiality and security obligations.
- Public authorities, where required by law, court order or request from a competent authority.
- Third parties in the event of corporate reorganization, such as a merger or acquisition, in which case this Policy will continue to govern the transferred data.
5. International data transfers
Part of the infrastructure and service providers may be located outside Brazil or the European Union. In such cases, we adopt appropriate safeguards — such as standard contractual clauses and verification of the destination country's level of protection — in compliance with the LGPD and the GDPR.
6. Data retention
We retain data for as long as necessary to fulfill the purposes for which it was collected, subject to legal retention periods. Account data is kept while the account is active; after closure, it is deleted or anonymized, except where retention is required by legal obligation or for the regular exercise of rights.
7. Your rights
Under the LGPD (art. 18) and the GDPR (arts. 15 to 22), you may, at any time, request:
- confirmation of the existence of processing and access to your data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
- portability of your data to another provider;
- deletion of data processed on the basis of consent;
- information about the entities with which we share your data;
- withdrawal of consent;
- objection to processing based on legitimate interest;
- review of automated decisions affecting your interests, where applicable.
To exercise any right, contact contact@narractive.ai. We may request additional information to confirm your identity before fulfilling the request.
8. Security
We adopt technical and organizational measures to protect data against unauthorized access, loss, alteration or improper disclosure, including password encryption, access control and monitoring. No system is entirely immune to risk; in the event of a relevant security incident, we will take the measures and make the notifications required by applicable law.
9. Cookies and similar technologies
We use cookies strictly necessary for the operation of the Platform (for example, maintaining an authenticated session) and, subject to consent where required, analytics and performance cookies. You can manage your preferences through your browser settings and, where available, the Platform's consent panel. Disabling essential cookies may impair the operation of the Service.
10. Children and adolescents
The Platform is intended for professionals and is not directed at individuals under 18 years of age. We do not knowingly collect data from minors. Should we identify such collection without proper legal basis, we will take steps to delete the data.
11. Data protection officer (DPO)
The data protection officer responsible for handling requests from data subjects and authorities is GUILHERME ROCHA DE CAMARGO, reachable at contact@narractive.ai.
12. Changes to this Policy
This Policy may be updated from time to time. The current version will always be published at narractive.ai, with the date of last update indicated. Material changes may be communicated by additional means.
13. Contact and supervisory authority
For questions, requests or complaints about privacy, contact contact@narractive.ai.
You may also lodge a complaint with the competent authority: in Brazil, the National Data Protection Authority (ANPD); in the European Union, the supervisory authority of your country of residence.