Privacy Policy
Last updated: August 26, 2026
Plain version: your customers are your customers. narra stores their details so you can run the work, shares them only with the services that actually deliver it, and never sells them. This page names every one of those services.
1. Our two roles
narra (“narra,” “we,” “us”), operated by OTMX Global LLC, provides software that businesses use to run their own work. That means we hold two different kinds of data, and our responsibility differs for each.
Your account. Information about the business using narra and the people in it. We decide how this is handled. We are the controller.
Your records. Your clients, quotes, jobs, invoices, photos and notes. This is information you collected about your customers. You decide how it is used; we process it on your instructions to provide the software. We are the processor.
If you are a customer of a business that uses narra, that business. Not narra, decides what happens to your information. See section 12.
2. What we collect
- Account information: business name, the names and email addresses of users, and sign-in credentials. Passwords are handled by our authentication provider and we never see them.
- The records you enter: clients and leads, addresses, phone numbers and email addresses, quotes, jobs, visits, invoices, payments, expenses, photos, files and notes.
- Settings: your services and prices, team, tax rates, branding, and the connections you turn on.
- Technical information: the ordinary records a web service keeps: IP address, browser and device type, and timestamps, kept for security and diagnostics.
- What you tell us: the contents of emails you send us for support.
We do not ask for, and narra is not designed to hold, payment card numbers, government identifiers or health information.
3. How we use it
We use data to provide narra to you and for nothing else:
- to run the product, showing you your records, sending the documents you ask us to send, creating requests to pay, and displaying maps and routes;
- to keep accounts secure and to investigate abuse;
- to answer your support messages;
- to understand which parts of the product are used, so that it can be improved. During the pilot this may include contacting you about your experience.
Where the law requires a legal basis, ours are: performing our contract with you, our legitimate interest in operating and securing the service, and complying with legal obligations.
4. Who we share it with
These are the services narra itself relies on. Every narra account uses them, and each receives only what it needs to do its job.
Google Cloud / Firebase: hosting, the database your records live in, authentication, file storage and server functions. This is where narra runs.
SendGrid: delivery of email narra sends on your behalf, such as a quote or an invoice. Your business is the display name; the delivery runs on narra's sending domain.
Google Maps: when an address is typed into narra or a route is drawn, that address is sent to Google to return suggestions and map tiles.
We may also disclose data where the law requires it, to protect our rights or someone's safety, or to a successor if the business is sold, in which case this policy continues to apply until you are told otherwise.
5. Services you connect
narra can connect to other services. These are off unless you turn them on, and they use your own account and credentials: you are that provider's customer, you pay them directly, and their handling of your data is governed by their terms, not ours.
- Stripe: card payments. Funds settle to your Stripe account. narra never holds your money.
- Quo or Twilio: text messages. Off by default and, in addition, only available where SMS is enabled for your account.
- Anthropic: optional assistance such as reading a receipt photo. It runs on an API key you supply, and only the content of the item you are working on is sent.
- Meta: importing leads from ad forms you run.
Disconnecting a service in Settings → Connectors stops narra sending anything further to it.
6. What we never do
We do not sell your data or your customers' data.
We do not use your records to advertise: not to you, not to your customers, not to anyone.
We do not contact your customers on our own behalf. Messages go out because you sent them, carrying your business's name.
We do not share one business's records with another. Each workspace is separated, and access is checked on every request rather than assumed.
7. Where it is stored
Your data is stored on Google Cloud infrastructure in the United States. If you are outside the United States, using narra means your information is transferred there, where privacy law differs from your own. Where a transfer mechanism is legally required, we rely on our providers' standard contractual clauses.
8. How long we keep it
- While your account is open: your records are kept until you delete them. Deleting a record in narra removes it from your workspace.
- After your account closes: we keep your data for a short recovery window, so an account closed by mistake can be restored, and then delete it. You can ask us to delete it immediately instead.
- Technical logs: kept for a limited period for security and diagnostics.
- Records we must keep: where the law requires us to retain something, such as a financial record, we keep only that and only for as long as required.
9. Security
Data is encrypted in transit and at rest by our infrastructure provider. Access to a workspace is checked against that workspace's membership on every request. Administrative access is limited to what is needed to operate and support the service.
No service can promise perfect security. If a breach affects your data we will tell you without undue delay, and tell you what we know rather than waiting until we know everything.
10. Your rights
Depending on where you live you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable form, object to or restrict some processing, and withdraw consent. Much of this you can do yourself inside narra; for the rest, email team@narraweb.com.
We will not treat you differently for exercising these rights. If you are in the EU or UK you may also complain to your data protection authority.
11. Deleting your data
You can delete individual records at any time inside narra. To have an entire workspace deleted, email team@narraweb.com from the address on the account and say so.
We will confirm, delete your records, and tell you when it is done. Backups are overwritten on their own cycle, so a copy may persist there briefly after deletion; it is not restored to the product and expires on that cycle.
12. If you are someone's customer
If a business uses narra to work for you, your details are in their workspace because they put them there. They decide what is kept and for how long.
Contact that business first. They can correct or delete your information directly. If you cannot reach them, email team@narraweb.com and we will help them action your request. We cannot make that decision for them, because the information is theirs to control rather than ours.
13. Cookies and storage
narra uses browser storage to keep you signed in and to remember preferences such as your theme and table layouts. These are necessary for the product to work.
We run no advertising trackers and no third-party analytics that profile you.
14. Children
narra is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child's information has reached narra, tell us and we will delete it.
15. Changes
We may update this policy. If a change materially affects how your data is handled we will give notice in the product or by email before it takes effect. The date at the top always says when this version was published.
Contact
Privacy questions, requests and complaints: team@narraweb.com
narra is operated by OTMX Global LLC.