Privacy Policy

This Privacy Policy describes how we collect, use, and protect your information when you use Nara, and the choices you have. We collect only what we need to run the service, we never sell your data, and you can ask us to delete it at any time. Read this policy together with our Terms of Service.

1. Definitions

• Company ("we", "us", "our") refers to Nojus Veikutis, an individual business registered in Lithuania (Personal ID: 1098527), the operator of Nara.
• Service means the Nara website and application.
• Account means the account created for you to access the Service.
• Personal Data means any information that relates to an identified or identifiable person.
• Usage Data means data collected automatically when you use the Service.
• Service Provider means a third party that processes data on our behalf to help us run the Service.
• You means the person or business using the Service.

2. Information we collect

Personal Data

When you use the Service we may ask you to provide:

• your email address;
• your name;
• your brand profile, settings, and the content you create inside Nara (such as campaign drafts, calendars, and segments);
• billing details if you subscribe (handled by our payment provider; we do not store full card numbers).

Usage Data

Collected automatically when you use the Service. It may include your IP address, browser type and version, device type, the pages and features you use, the time and date of use, and diagnostic or error data. This helps us operate, secure, and improve the Service.

3. Cookies

A cookie is a small file stored on your device. Cookies can be "session" cookies, deleted when you close your browser, or "persistent" cookies, which remain until they expire or you delete them. We use:

• Necessary cookies - required for core functions such as secure login and protecting accounts against fraudulent use. The Service cannot work properly without these.
• Preference cookies - remember choices such as your language or display settings.
• Consent cookies - record your cookie choices so we can honour them.

We do not use advertising or cross-site tracking cookies. You can refuse or delete cookies in your browser settings, though necessary cookies are needed for the Service to function.

4. How we use your information

We may use your Personal Data for the following purposes:

• To provide and maintain the Service, including to monitor its usage.
• To manage your Account - to manage your registration as a user and give you access to the features available to registered users.
• For the performance of a contract - to develop, comply with, and carry out the purchase contract for the plan or services you have ordered, and any other contract with us through the Service.
• To process payments - to handle your subscription and billing.
• To contact you - by email or other electronic communication, such as notices about updates, functionality, or security, when necessary or reasonable.
• To send you news and offers - information about features, services, and offers similar to what you have used or asked about, unless you have opted out.
• To manage your requests - to attend to and handle the requests you send us.
• To secure the Service - to detect, prevent, and address fraud, abuse, and security issues, and to enforce usage limits.
• For other purposes - such as data analysis, identifying usage trends, measuring the effectiveness of our communications, and evaluating and improving the Service and your experience.
• To comply with our legal obligations.

5. Klaviyo and connected platforms

Nara may read campaign and flow performance, segment information, and engagement data from your connected account to power the features you use. We do not sell this data and do not use it for advertising. The marketing audience in your Klaviyo account belongs to you, and you remain responsible for having permission to contact them. For the personal data inside your connected account, you act as the data controller and Nara acts as a processor, handling it only on your behalf and on your instructions. You can disconnect Klaviyo at any time, which stops all further access.

6. AI features

Nara's drafting and analysis features are powered by a third-party AI provider. When you use an AI feature, the prompt - which may include your brand details and the brief you wrote - is sent to that provider to generate a response. We instruct the provider not to train its models on this data, and it is not retained beyond what is needed to return your result. The identity of our current AI provider is available on request. AI output can be inaccurate, so you are responsible for reviewing it before you use it.

7. How we share information

We do not sell your personal information. We may share your personal information in the following situations:

• With Service Providers - we may share your personal information with Service Providers to operate, secure, maintain, monitor, and analyse the use of the Service. They may use it only to perform these tasks for us and are bound to keep it confidential.
• For business transfers - we may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company.
• For legal reasons - we may disclose your personal information where required by law or a valid request by a public authority, or where we believe in good faith it is necessary to comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users of the Service or the public, or protect against legal liability.
• With your consent - we may disclose your personal information for any other purpose with your consent.

Our sub-processors

We use trusted third-party providers (sub-processors) to operate the Service. Each processes only the minimum data needed for its function and is bound by data-protection terms. They fall into these categories:

• Cloud hosting & infrastructure - running and delivering the application.
• AI / text generation - processing the prompts and briefs you submit.
• Database, authentication & storage - your account and content data.
• Payment processing - billing details; we never see or store your full card number.
• Error & performance monitoring - technical diagnostics.
• Your own connected marketing platform (for example Klaviyo) - accessed through its API only with your authorisation (see section 5).

A current list of the specific providers is available on request by contacting us. Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. How long we keep it

We keep your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, where we are required to keep records under applicable accounting and tax law), to resolve disputes, and to enforce our agreements and policies.

We also retain Usage Data for internal analysis. Usage Data is generally kept for a shorter period, except where it is used to strengthen the security or improve the functionality of the Service, or where we are legally required to keep it longer. Account and content data is kept while your Account is active and is deleted or anonymised within a reasonable period after you close it. Anonymised data, which cannot be linked back to you, may be kept without a time limit.

9. Your choices and rights

You can access, update, or correct your information at any time in your Account settings. You can also ask us to provide a copy of your data, to correct it, or to delete it - just contact us. Where we rely on your consent (for example for product news), you can withdraw it at any time. We may need to keep certain information where the law requires it. We respond to requests within a reasonable time.

If you are in the EU, EEA, or UK (GDPR)

You have the right to access, rectify, erase, restrict, or object to our processing of your personal data, and the right to data portability. We process your data on these lawful bases: performing our contract with you (to provide the Service), your consent (for optional communications), and our legitimate interests (to secure, maintain, and improve the Service). You may also lodge a complaint with your local data-protection supervisory authority.

If you are in California (CCPA / CPRA)

You have the right to know what personal information we collect and how it is used, to request its deletion, to correct it, and to opt out of any sale or sharing of your personal information. We do not sell or share your personal information, and we will not discriminate against you for exercising any of these rights.

10. Security

The security of your personal information is important to us. We use commercially acceptable means to protect it. However, no method of transmission over the internet, and no method of electronic storage, is completely secure, so while we strive to protect your personal information we cannot guarantee its absolute security.

11. Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, contact us and we will remove it. Users under the age of 18 should only use the Service with the involvement of a parent or guardian.

12. Links to other websites

The Service may contain links to websites we do not operate. If you follow a link to a third-party site, we encourage you to review its privacy policy. We are not responsible for the content or privacy practices of any third-party site or service.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new policy on this page, update the "Last updated" date, and, for material changes, notify you by email or an in-app notice. Continued use of the Service after a change means you accept the updated policy.

14. Contact us

If you have any questions about this Privacy Policy, contact us at info@tryvexa.ai.