Privacy Policy
Narrativ stores as little personal data as possible. This page describes the personal data we store, the providers that process it, and your rights under the GDPR.
What we store about you
If you have a Narrativ account, we store your name, your work email address, the organisation and team you belong to, your role on each project, and the times your account was created and last signed in.
We do not store passwords. Sign-in uses one-time email links, and we store only a cryptographic hash of each link. We do not collect phone numbers, postal addresses, dates of birth, or other personal details.
Project data and responsibilities
The main content in Narrativ is your organisation's project information: interview transcripts, extracted project facts, and their history. For this data your organisation is the data controller and Linx is the data processor, acting on its instructions. For account data (name, work email, role) Linx is the controller. A data processing agreement is available on request.
When an interview transcript is submitted, we record the submitting IP address and browser user agent as part of the audit trail.
Legal bases
Account data is processed to perform our contract with your organisation. Security and audit records, such as sign-in events and submission provenance, are processed under our legitimate interest in maintaining a reliable service and audit trail. Project data is processed on the controller's instructions.
Where data is stored
All data is stored in a managed PostgreSQL database hosted by Fly.io in Amsterdam, the Netherlands, within the EU/EEA. Narrativ uses no other datastore, data warehouse, or analytics database. Automated backups are retained on a rolling window of approximately ten days.
Providers that process data
Four providers process data on Narrativ's behalf, each for a single purpose. The full list, with locations, is on the subprocessors page: Fly.io (hosting, Amsterdam), Anthropic (extraction of project facts from transcripts, under a zero-data-retention agreement, so nothing is retained after processing and nothing is used to train models), Resend (sign-in emails), and Tally (optional feedback survey). Narrativ uses no analytics services, advertising networks, or tracking pixels.
Fonts
The web app loads its fonts from Google Fonts. Your browser requests them directly from Google, which receives your IP address as part of that request. No account or project data is sent.
International transfers
Some providers are headquartered in the United States. Those transfers are covered by data processing agreements incorporating the EU Standard Contractual Clauses. Stored data remains in the EU.
Interviews run in an AI assistant
Some interviews take place in your organisation's own AI assistant, for example ChatGPT. That conversation is covered by your organisation's agreement with that provider. Narrativ receives only the final transcript, over a single-use link.
Cookies
Narrativ sets one cookie: a signed session cookie that keeps you signed in. It sets no tracking or third-party cookies, so no cookie banner is required.
Retention and deletion
Personal data is retained while an account is active. On a deletion request, data is removed from the live database and expires from automated backups within approximately ten days. Audit-log entries that reference the account keep the account's email address as part of the security record. Project data is retained, returned, or deleted according to the controlling organisation's instructions.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction, or portability, or object to processing. Contact simon@linx.pm. Where Linx acts as processor, we forward requests to the controlling organisation and assist it in responding. You may also lodge a complaint with a supervisory authority. In Norway this is Datatilsynet.
Data breaches
If a personal data breach occurs, we notify affected customer contacts and, where required, the supervisory authority without undue delay, in line with GDPR Articles 33 and 34.
Version 0.3. Last updated 17 August 2026. This document will be updated as Narrativ develops. Questions: simon@linx.pm