Privacy Policy

Effective Date: April 22, 2025
Last Updated: August 14, 2026

This Privacy Policy explains how Narralyze LLC (“Narralyze,” “we,” “us,” or “our”) collects, uses, discloses, stores, and otherwise processes information when you visit our websites or use our software and services, including our cloud-based qualitative data analysis platform, Narralizer AI (collectively, the “Service”).

This Privacy Policy also explains the choices and privacy rights that may be available to you.

This Privacy Policy is a notice describing our privacy practices. Your use of the Service is also governed by our Terms of Service and, where applicable, other agreements between you or your organization and Narralyze LLC.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information that Narralyze LLC processes in connection with the Service, including information relating to:

Visitors to our websites;
Individuals who create or use Narralizer AI accounts;
Customers and representatives of organizations using the Service;
Individuals who communicate with Narralyze LLC; and
Other individuals whose personal information we process in operating the Service.

Users of Narralizer AI may upload research materials containing information about research participants, interview subjects, employees, customers, students, patients, or other individuals. The treatment of this Customer Content is addressed separately below because Narralyze LLC’s role in processing Customer Content may differ from its role when processing information about our own customers and users.

2. Information We Collect

We collect information in several ways.

A. Account and Customer Information

When you register for, purchase, or manage the Service, we may collect information such as:

Name;
Email address;
Username and authentication information;
Organization or institutional affiliation;
Account preferences;
Subscription information;
Billing and transaction information; and
Other information you provide when establishing or managing your account.

Payment-card information may be processed directly by our payment service providers. Narralyze LLC may receive transaction information without receiving or storing complete payment-card credentials.

B. Customer Content and Research Data

Narralizer AI allows users to upload, create, store, organize, process, and analyze information.

This information (“Customer Content”) may include:

Interview transcripts;
Qualitative datasets;
Documents;
Research notes;
Field notes;
Coding and classification information;
Research questions;
Analytical frameworks;
Audio, video, images, or other supported media;
AI prompts or instructions;
Analyses and outputs generated through the Service; and
Other information uploaded, entered, stored, or created by users.

Depending on what a user uploads, Customer Content may contain personal information, sensitive personal information, confidential information, proprietary information, or information concerning third parties.

Uploading Customer Content to Narralizer AI does not transfer ownership of that Customer Content to Narralyze LLC.

Customers and users are responsible for ensuring that they have the rights, permissions, notices, consents, or other lawful authority required to collect, upload, use, and process Customer Content through the Service.

C. Communications and Support Information

When you contact us, we may collect:

Emails and other correspondence;
Support requests;
Feedback;
Survey responses;
Information provided during troubleshooting; and
Other communications with Narralyze LLC.

If support requires access to Customer Content, such access should be limited to what is reasonably necessary to address the applicable request or problem.

D. Usage and Technical Information

When you interact with the Service, we may automatically collect information such as:

IP address;
Browser type;
Operating system;
Device type;
Device and system configuration;
Dates and times of access;
Pages or features viewed;
Actions performed;
Session information;
Navigation paths;
Performance information;
Error and diagnostic information; and
Security-related events.

We use this information to operate, secure, maintain, troubleshoot, and improve the Service.

E. Cookies and Similar Technologies

We may use cookies and similar technologies to:

Maintain sessions;
Authenticate users;
Remember preferences;
Secure the Service;
Understand Service usage; and
Improve functionality.

Additional information about the cookies and similar technologies we use is available in our Cookie Policy.

F. Information from Third Parties

We may receive information from third parties that you use in connection with the Service, including:

Authentication providers;
Identity providers;
Institutional single sign-on services;
Payment processors;
Integrations that you authorize; and
Other service providers involved in delivering the Service.

The information we receive depends on the third-party service and the permissions you provide.

3. How We Use Information

We may use personal information to:

Provide, operate, maintain, and secure the Service;
Create and administer accounts;
Authenticate users;
Process subscriptions, transactions, and billing;
Provide requested features and analyses;
Process Customer Content at the direction of users;
Provide customer support;
Diagnose technical problems;
Monitor system performance and reliability;
Detect, investigate, and prevent fraud, misuse, security incidents, and unauthorized access;
Send administrative and security communications;
Communicate about the Service;
Analyze Service usage;
Develop, maintain, and improve functionality;
Enforce our Terms of Service and other agreements;
Protect the rights, safety, security, and integrity of Narralyze LLC, our users, and others;
Comply with applicable legal obligations; and
Establish, exercise, or defend legal claims.

Where applicable law requires a particular legal basis for processing personal information, we process information based on the legal bases applicable to the relevant circumstances, which may include performance of a contract, legitimate interests, consent, or compliance with legal obligations.

4. Customer Content and Our Role as a Service Provider

Customers may use Narralizer AI to process personal information that they have collected independently.

For example, a researcher may upload an interview transcript containing information about research participants.

In such circumstances, the customer or the customer’s organization generally determines:

What information is collected;
Why it is collected;
Which individuals are included;
What information is uploaded to Narralizer AI;
What analyses are performed;
Who may access the project; and
How the resulting research information is used.

Where applicable, Narralyze LLC processes such information on behalf of the customer and according to the customer’s use of and instructions through the Service.

If you are a research participant or another individual whose information has been uploaded to Narralizer AI by one of our customers, requests concerning that information may need to be directed to the organization or researcher that collected it.

Where required, we will assist customers in responding to applicable data-protection requests in accordance with our contractual and legal obligations.

Institutional and enterprise customers may be eligible to enter into a Data Processing Addendum (“DPA”) with Narralyze LLC.

5. Artificial Intelligence and Automated Processing

Narralizer AI includes artificial intelligence and automated processing functionality designed to assist users with qualitative data analysis.

Depending on the feature selected, Customer Content may be processed using automated systems to perform functions such as:

Analysis;
Summarization;
Classification;
Coding assistance;
Identification of patterns or themes;
Retrieval of relevant information;
Generation of analytical suggestions or outputs; and
Other AI-assisted functionality requested by the user.

Third-Party AI Services

Narralyze LLC may use third-party artificial intelligence or technology service providers to provide certain functionality.

When Customer Content is transmitted to such a provider, we seek to limit the information transmitted to information reasonably necessary to perform the requested operation and to use providers under appropriate contractual and technical safeguards.

Information about material service providers that process Customer Content may be provided through our Subprocessor List or other applicable documentation.

AI Outputs

Artificial intelligence and automated systems can produce incomplete, inaccurate, or unexpected results. Users remain responsible for reviewing AI-assisted outputs and determining whether those outputs are appropriate for their research or other intended use.

6. How We Disclose Information

Narralyze LLC does not sell personal information for monetary consideration.

We may disclose information in the following circumstances.

A. Service Providers and Subprocessors

We may use third-party providers to perform services on our behalf, including:

Cloud infrastructure and hosting;
Data storage;
Artificial intelligence and machine-learning processing;
Authentication and identity management;
Payment processing;
Email and communications;
Monitoring and error reporting;
Security;
Analytics; and
Customer support.

These providers receive information as necessary to perform their functions and are subject to applicable contractual obligations.

Where appropriate, information about material providers that process Customer Content is made available through our Subprocessor List.

B. At Your Direction

We may disclose information when you direct us to do so, including when you:

Invite collaborators;
Share projects;
Enable an integration;
Export information to another service; or
Otherwise request that information be transmitted to another person or system.

C. Legal and Safety Requirements

We may disclose information if we reasonably believe disclosure is necessary to:

Comply with applicable law, regulation, subpoena, court order, or other valid legal process;
Respond to lawful requests from government authorities;
Protect the rights or property of Narralyze LLC;
Investigate fraud, abuse, or security incidents;
Enforce our agreements; or
Protect the safety or security of our users or others.

Where legally permitted and appropriate, we may seek to notify affected customers before disclosing Customer Content in response to legal process.

D. Business Transactions

Information may be disclosed in connection with an actual or proposed merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable confidentiality and data-protection requirements.

7. Data Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information and Customer Content against unauthorized access, disclosure, alteration, loss, or misuse.

Our security program may include measures relating to:

Encryption;
Authentication;
Authorization and access control;
Customer and tenant data isolation;
Infrastructure security;
Secure software development;
Monitoring and audit logging;
Backup and recovery;
Vulnerability management;
Data-integrity controls; and
Security testing.

Narralyze LLC’s security program is intended not only to establish security controls but also, where practicable, to test whether important protections continue to operate as intended.

No internet-connected service, transmission method, or storage system can guarantee absolute security. Accordingly, while we take measures designed to protect information, we cannot guarantee that unauthorized access, use, disclosure, alteration, or loss will never occur.

For additional information about how Narralizer AI protects Customer Content, please see our Security & Data Protection documentation.

8. Data Retention

We retain information for periods appropriate to the purpose for which it is processed and as necessary to operate the Service, comply with legal obligations, resolve disputes, maintain security, and enforce agreements.

Retention periods may vary according to the type of information.

Customer Content

Customer Content may be retained while an account or project remains active and as necessary to provide the Service.

Users may delete Customer Content using available Service functionality or request deletion where applicable.

Deleted Customer Content

Deletion from active systems may not result in immediate physical deletion from every backup, cache, log, or disaster-recovery system.

Residual copies may remain for a limited period where necessary for backup, security, disaster recovery, legal compliance, or system integrity. Such information remains subject to applicable safeguards until it is deleted or expires according to the applicable retention schedule.

Account, Transaction, and Legal Records

Certain account, billing, transaction, security, or legal records may be retained after account closure where required or permitted for legitimate business, security, accounting, tax, dispute-resolution, or legal purposes.

9. Data Integrity, Backups, and Recovery

Narralyze LLC uses technical and operational measures intended to maintain the integrity and availability of information processed through the Service.

These measures may include backups, recovery procedures, integrity verification, monitoring, and controls designed to identify unintended modification or corruption.

Users should nevertheless maintain independent copies of irreplaceable original research materials. Unless expressly agreed otherwise, Narralizer AI should not be treated as the sole archival repository for original research data.

Additional information regarding security, backups, and data integrity is available in our Security & Data Protectiondocumentation.

10. Your Privacy Rights and Choices

Depending on where you reside and applicable law, you may have rights concerning your personal information, including rights to:

Request access to personal information;
Request correction of inaccurate information;
Request deletion;
Request restriction of certain processing;
Object to certain processing;
Withdraw consent where processing is based on consent;
Request portability of certain information;
Opt out of certain marketing communications; and
Lodge a complaint with an applicable data-protection authority.

These rights are subject to applicable exceptions and limitations.

To submit a request concerning personal information that Narralyze LLC controls directly, contact us using the information provided below.

We may take reasonable steps to verify your identity before fulfilling a request.

Requests Concerning Customer Research Data

If your personal information appears in Customer Content uploaded by a Narralizer AI customer—for example, because you participated in a research study—the applicable customer may control that information.

In such cases, you should generally direct your request to the researcher, institution, or organization that collected your information.

If we receive a request relating to Customer Content processed on behalf of a customer, we may refer the request to that customer or assist the customer as required by applicable law and our contractual obligations.

11. California and Other U.S. State Privacy Rights

Residents of California and certain other U.S. states may have additional rights under applicable state privacy laws.

Depending on the law and circumstances, these may include rights to:

Know or access categories or specific pieces of personal information;
Correct inaccurate personal information;
Delete personal information;
Obtain information concerning categories of disclosures;
Obtain a portable copy of certain information; and
Opt out of certain forms of sale, sharing, targeted advertising, or profiling where applicable.

Narralyze LLC does not sell personal information for monetary consideration.

We will not discriminate against an individual for exercising rights provided by applicable privacy law.

12. International Data Transfers

Narralyze LLC is based in the United States, and information may be processed in the United States and other countries in which Narralyze LLC or its service providers operate.

These countries may have privacy and data-protection laws different from those in your jurisdiction.

Where required by applicable law, Narralyze LLC uses recognized mechanisms intended to provide appropriate safeguards for international transfers of personal information. These may include contractual protections such as the European Commission’s Standard Contractual Clauses and, where applicable, additional safeguards required by law.

Information concerning the geographic locations in which Customer Content is hosted or processed may be available in our Security & Data Protection documentation, DPA, or Subprocessor List.

13. European Economic Area, United Kingdom, and Switzerland

Where the GDPR, UK GDPR, Swiss data-protection law, or similar requirements apply, Narralyze LLC may act in different capacities depending on the processing activity.

For personal information collected directly from customers, website visitors, and account users for Narralyze LLC’s own purposes, Narralyze LLC may act as a controller.

For Customer Content processed on behalf of a customer, Narralyze LLC may act as a processor or service provider while the customer acts as controller or otherwise determines the purposes and means of processing.

Where required, additional terms governing such processing may be provided through our DPA.

Individuals may also have the right to lodge a complaint with the data-protection authority responsible for their jurisdiction.

14. Children’s Privacy

The Service is not directed to children under the age of 13, and we do not knowingly permit children under 13 to establish accounts through the general Service.

Additional age requirements may apply in certain jurisdictions.

However, researchers and institutions may conduct lawful research involving minors. Customer Content concerning minors is distinct from allowing a minor to establish a Narralizer AI account.

Customers conducting research involving children or minors are responsible for satisfying applicable legal, ethical, institutional-review, parental-consent, assent, and other requirements governing that research and the processing of resulting information.

If we learn that personal information was collected directly from a child through an account in violation of applicable requirements, we will take appropriate steps to address the information.

15. Research Ethics and Sensitive Information

Narralizer AI is a tool for qualitative data analysis and may be used with research involving sensitive subject matter.

Narralyze LLC does not determine whether a particular research project satisfies institutional, professional, ethical, or legal requirements.

Researchers and organizations remain responsible for determining whether their use of Narralizer AI is appropriate for their research and for satisfying requirements that may apply to:

Informed consent;
Institutional Review Board (“IRB”) or ethics committee approval;
Confidentiality commitments;
De-identification or pseudonymization;
Data minimization;
Research-participant notices;
Restrictions imposed by funding institutions;
Data-use agreements; and
Applicable privacy and research laws.

Where appropriate, users should consider removing unnecessary direct identifiers from research materials before uploading them to the Service.

16. Sensitive and Regulated Data

Customer Content may contain sensitive information.

The availability of technical security measures does not mean that Narralizer AI is automatically authorized or appropriate for every category of regulated information.

Customers are responsible for determining whether applicable laws, contracts, institutional policies, or ethical requirements permit particular information to be processed through the Service.

Narralizer AI should not be represented as HIPAA-compliant, FERPA-compliant, or certified for another specific regulatory framework unless Narralyze LLC has completed the necessary technical, contractual, and organizational requirements for that framework.

Where Narralyze LLC offers specific compliance programs or contractual arrangements, those capabilities will be identified separately.

17. Third-Party Websites and Integrations

The Service may contain links to or integrate with third-party websites, applications, or services.

When you choose to interact with a third-party service, information may be processed according to that third party’s own privacy practices.

Narralyze LLC is not responsible for the independent privacy practices of third parties that are not acting as our service providers.

We encourage users to review applicable third-party privacy policies before enabling integrations or transmitting information to external services.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our Service, technology, legal requirements, or privacy practices.

When we make material changes, we will provide notice as required by applicable law, which may include notification through the Service, by email, or through our website.

The Last Updated date at the beginning of this Privacy Policy identifies when the policy was most recently revised.

Previous versions may be made available where appropriate.

19. Contact Us

If you have questions, concerns, or requests concerning this Privacy Policy or Narralyze LLC’s privacy practices, please contact:

Narralyze LLC
3206 Tower Oaks Blvd
Rockville, MD 20852
United States

Email: narralyze@gmail.com

For security vulnerabilities or suspected security incidents, please use our designated security-reporting contact when available.