Privacy Policy

1. Information We Collect

When you create a Narrative account, we collect the information you provide directly to us:

• Account data: email address and password
• Portfolio content: work experience, projects, skills, and any other information you add to your portfolio
• Files: images and documents you upload to your portfolio (stored on AWS S3)
• Subdomain preference: the custom subdomain you choose for your public portfolio

We do not collect payment card details directly. When billing is active, payments are processed by Stripe, which has its own privacy policy.

2. How We Use Your Information

We use the information we collect solely to provide and improve the Narrative service:

• To create and manage your account
• To display your portfolio to visitors at your chosen subdomain
• To send transactional emails (account verification, password reset)
• To respond to your support requests
• To detect and prevent fraud or abuse

We do not sell your personal data to third parties, and we do not use your portfolio content for advertising or marketing purposes.

Your use of the Service is also governed by our Terms of Service.

3. Data Storage and Security

Your account data is stored in a PostgreSQL database hosted on secure infrastructure. Passwords are never stored in plain text — they are hashed using bcrypt before storage. Portfolio files are stored on AWS S3 with access controls.

We implement industry-standard security measures including HTTPS encryption for all data in transit, HTTP security headers, and rate-limited authentication endpoints. While we take reasonable steps to protect your data, no system is completely secure.

4. Cookies

Narrative uses a single session cookie to keep you logged in. This cookie is classified as “strictly necessary” under GDPR and similar regulations — it is required for the service to function and is not used for advertising or tracking. We do not use third-party analytics or marketing cookies.

5. Third-Party Services

We use a limited set of third-party services to operate Narrative:

• AWS S3: file storage for uploaded images and documents
• Resend: transactional email delivery
• Stripe: payment processing (when billing is active)

Each of these services has its own privacy policy. We share only the minimum data necessary for each service to function.

6. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Correction: update inaccurate information in your account settings
• Erasure: delete your account and all associated data at any time from your account settings
• Portability: contact us to request a copy of your portfolio data

To exercise any of these rights or if you have questions, contact us at narrativedevteam@gmail.com.

7. Children’s Privacy

Narrative is not intended for children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have collected data from a child under 16, please contact us so we can delete it.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account, your personal data and portfolio content are permanently deleted from our systems. Deletion is immediate and irreversible.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by displaying a notice in the app. The “Last updated” date at the top of this page reflects the most recent revision.

10. Governing Law

This Privacy Policy is governed by the laws of the State of Michigan, United States, without regard to conflict of law principles.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please email us at narrativedevteam@gmail.com.