Privacy Policy

Last updated: August 25, 2026

1. About This Policy

This Privacy Policy explains how NarraTwin ("NarraTwin," "we," "us," or "our") processes information when you visit narratwin.com, sign in, create a visual IP, submit an article, generate images, contact us, or otherwise use the service (the "Service").

NarraTwin is a tool for article creators. It uses the reference images and text you choose to submit to create a consistent visual character and article illustrations. Your private workspace content is not published in a public gallery by default.

For privacy questions or requests, contact support@narratwin.com.

2. Information We Process

Account and authentication data

When you sign in with Google, we receive the basic account data needed to create and secure your NarraTwin account, such as your Google account identifier, name, email address, email verification status, and profile image. We also process authentication tokens and session information. NarraTwin does not receive your Google password and does not request access to Gmail, Google Drive, or other Google content.

Content you provide

Depending on the features you use, we process:

• profile images, reference photos, and character artwork;
• character names, style choices, design notes, selections, and feedback;
• article titles, article text, structure, illustration positions, and editing choices;
• prompts and instructions derived from your inputs;
• generated character images, article illustrations, versions, and exports; and
• messages and contact details you send through our contact form or support channels.

Reference photos may reveal a person's face, appearance, and other personal characteristics. Only upload images you are authorized to use. Do not upload highly sensitive documents or information that is not needed for the Service.

Service, credit, and task records

We process credit balances and transactions, AI task status, provider task IDs, generation parameters, model and cost records, retries, errors, timestamps, and other records needed to operate, troubleshoot, secure, and reconcile the Service.

Device and security data

Our hosting, authentication, and security systems may process IP addresses, user-agent information, request URLs, timestamps, language preference, session identifiers, and diagnostic or security logs. We do not currently use advertising cookies or third-party behavioral advertising on the Service.

3. How We Use Information

We use information to:

• authenticate users and maintain account sessions;
• create, store, and display your visual IP and article projects;
• analyze submitted material and generate the outputs you request;
• calculate, reserve, deduct, refund, and audit credits;
• provide exports, support, and service communications;
• protect accounts, prevent abuse and credit farming, and enforce our Terms;
• diagnose failures, recover background jobs, and maintain service reliability;
• meet legal obligations and respond to lawful requests; and
• improve Service performance and workflows using operational and aggregated information.

We do not sell your personal information. NarraTwin does not use your private photos, article content, or generated assets to train its own AI models.

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where requested, and compliance with legal obligations.

4. AI Processing

When you explicitly start analysis or generation, NarraTwin sends only the content needed for that task to WaveSpeedAI and the model services it makes available. This may include reference images through authenticated, time-limited links, article excerpts or full article text needed for the chosen operation, generated prompts, and task parameters.

AI processing can produce incorrect, unexpected, or non-unique results. Do not submit information you are not permitted to disclose to an AI provider. The provider's handling of submitted data and temporary outputs is also governed by its own policies. WaveSpeedAI states that generated media is generally retained for up to seven days, while certain prediction metadata and logs may be kept as needed. See its Privacy Policy and Data Retention Policy.

NarraTwin stores the outputs selected or retained in your private workspace so that you can review, reuse, and export them.

5. Service Providers and Disclosures

We disclose information only as needed to provide, secure, and support the Service, or when required by law. Current service providers include:

• Google — basic sign-in and account identity;
• Vercel — website hosting, application delivery, and infrastructure logs;
• Neon — managed PostgreSQL database hosting;
• Cloudflare — private R2 object storage and Turnstile abuse prevention;
• WaveSpeedAI and available model providers — requested AI analysis and image generation;
• Resend — contact-form delivery, service email, and optional newsletter subscriptions; and
• Feishu — limited operational alerts that may include an account identifier, name, email address, article title, and event metadata, but are not intended to include uploaded photos or full article content.

These providers process information under their own terms and privacy policies. They may use subprocessors and may process information in countries different from yours.

We may also disclose information when reasonably necessary to comply with law, protect users or the Service, investigate fraud or abuse, enforce agreements, or complete a merger, financing, acquisition, or transfer of the Service. If a business transfer occurs, we will require the recipient to handle personal information consistently with this Policy and applicable law.

6. Storage, Retention, and Deletion

• Account, project, and selected generated content is generally retained while your account or the relevant project remains active.
• Authentication sessions normally expire after seven days, subject to renewal during use and security controls.
• Sensitive AI request payloads retained for debugging and audit are ordinarily cleared after 30 days. Hashes, task status, credit records, cost records, and non-content metadata may be kept longer for reconciliation, security, and legal purposes.
• Replaced or deleted storage objects are placed into a deletion queue so that transient storage failures can be retried.
• Contact messages and operational logs are retained only as long as reasonably needed for support, security, dispute resolution, and legal obligations.

You can delete individual projects and can delete your account from account settings. Account deletion removes associated active database records and queues stored user files for deletion. Deletion from backups, security logs, and provider systems may take additional time, and we may retain limited records where required by law or reasonably necessary to prevent fraud, resolve disputes, or establish legal claims.

Revoking Google's access stops future Google authorization but does not by itself delete your NarraTwin account. Use NarraTwin's account deletion feature or contact us to request deletion.

7. International Processing

NarraTwin and its service providers may process information outside your country or region, including in the United States and other locations where the providers operate. Where required, we use appropriate contractual or other lawful safeguards for cross-border processing. By submitting content for an AI task, you understand that the content required for that task may be processed in those locations.

8. Your Choices and Rights

Depending on where you live, you may have the right to request access, correction, deletion, restriction, objection, withdrawal of consent, or a copy of your personal information, and to complain to a data protection authority. You can update your name and profile image, delete projects, and delete your account through the Service. You may also contact us at support@narratwin.com.

We may need to verify your identity before completing a request. Some rights are subject to legal exceptions. We will not discriminate against you for exercising applicable privacy rights.

9. Security

We use measures designed to protect information, including authenticated access controls, private object storage, time-limited signed links for AI processing, encrypted transport, and deletion retry workflows. No Internet service is completely secure, and we cannot guarantee absolute security. Please protect your Google account and notify us if you believe your NarraTwin account has been compromised.

10. Children and Images of Other People

The Service is not directed to children under 13. If local law requires a higher minimum age, users below that age may use the Service only with valid consent from a parent or legal guardian. Do not upload an image of a minor or any other person unless you have the legal authority and all required consent to do so. If you believe a child's information was submitted improperly, contact us for removal.

11. Changes to This Policy

We may update this Policy as the Service, providers, or legal requirements change. We will post the updated version and change the date above. If a change materially affects how we use existing personal information, we will provide additional notice where required.

12. Contact Us

For privacy questions, rights requests, or complaints, email support@narratwin.com or use our contact page.