Privacy Policy

Last updated: July 2026

What we collect

• Account information: name, email, and agency name
• OAuth tokens for Google Analytics 4 (GA4)
• Google Analytics data via the GA4 Data API: aggregated traffic and performance metrics from GA4 properties you authorize, including sessions, users, pageviews, traffic sources, conversions, and related dimensions and metrics
• Generated reports produced through the service

How we use it

We use this information solely to generate marketing reports on your behalf. We do not use it for any other purpose.

Google user data

Narratly accesses Google user data through the Google Analytics APIs using read-only access (analytics.readonly). We access this data only to retrieve the analytics metrics needed to generate your reports.

Narratly's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We do not sell Google user data.
• We do not use Google user data for advertising purposes.
• We do not allow humans to read Google user data, except (a) with your explicit consent, (b) for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized for internal operations.
• We do not transfer Google user data to third parties except as necessary to provide or improve the service, to comply with applicable law, or as part of a merger or acquisition.

Third parties

• Anthropic (Claude API) — receives analytics metrics for report generation
• Google — GA4 API and OAuth
• Railway — hosting (US West region)

We do not permit any of these providers to use your data for their own purposes.

Data sales and AI training

We never sell your data. We never use client data to train AI models. Data sent to the Anthropic Claude API is not used to train models.

Data retention and deletion

• OAuth tokens are stored, encrypted, until you disconnect the integration.
• Reports are stored for 12 months.
• You may request deletion of your data at any time by contacting contact@narratly.io. Disconnecting a Google Analytics integration revokes our access and deletes the associated tokens.

You can also revoke Narratly's access to your Google account at any time via your Google Account permissions page.

Your rights (GDPR)

You have the right to access, deletion, and portability of your personal data. To exercise these rights, contact us at contact@narratly.io.

Security

Your data is encrypted at rest (AES-256) and in transit (TLS). OAuth tokens are encrypted at rest.

Contact

Questions about this policy: contact@narratly.io

Operating entity

Narratly, operated by Mohamed Amine Bouhachimi.