Legal
Privacy Policy
What Narroli collects, why, who helps us run it, how long we keep it, and how to delete it.
Last updated 27 October 2026
The short version
- We collect what Narroli needs to write and publish your posts: your email, your brand details, your posts, and what the social apps you connect send back.
- We don't sell your data, show ads, or use your content to train AI.
- AI providers (Anthropic or OpenAI) see the parts of your content needed to write each post or reply.
- Social media access keys are encrypted, and nothing is posted or sent without your approval.
- You can delete everything any time by emailing hello@narroli.com.
1. Who we are
Narroli (“we”, “us”) writes, schedules and publishes social media posts for you, and helps you reply to comments. The service is run by Narroli, which is responsible for your personal data.
This policy covers the Narroli app (app.narroli.com), this website, our emails and the Narroli connector for Claude, ChatGPT and other AI apps. Questions? Email hello@narroli.com.
2. What we collect
What you give us
- Your account: your email address and name. We sign you in with a link by email, so there's no password to store.
- Your brands: names, what each brand does, who it's for, topics, how you talk, sample posts, words to avoid, colours, fonts and avatars.
- Your notes and posts: the things you tell Tuck, your ideas, drafts, scheduled and published posts, templates, and the photos you upload.
- Your settings: posting times, which apps you post to, and how (Narroli posts it, or you post it yourself).
- Your own AI keys, if you choose to use your own AI instead of Narroli AI.
- Payment details, when you subscribe. These go straight to our payment provider, Stripe. We never see or store your full card number.
What we get from the social apps you connect
- Your account's username, ID and profile picture, and the access keys (“tokens”) that let Narroli post for you.
- Comments and replies on posts you published through Narroli, including the commenter's name, username and words, so you can answer them in your Inbox.
- Numbers about those posts and your account, such as views, people reached, likes, comments, shares and followers, for Analytics.
We only read what each app lets us read through its official connection, only for posts made through Narroli, and only while the account is connected. We never ask for your social media passwords, and we never scrape websites.
What we collect automatically
- Sign-in details: your IP address and browser type, kept with your sign-in session for security and to stop abuse.
- Usage records: which AI tasks ran for your account and what they cost, and what the AI apps you connect asked Narroli to do. These keep your plan's limits accurate and help us fix problems.
- Technical logs from our servers, kept for a short time to find and fix errors.
3. How we use it
- To run Narroli for you: write drafts in your voice, design slides, schedule and publish posts you approve, collect comments, suggest replies and show your numbers.
- To send you the emails the service needs: sign-in links, “ready to post” reminders, problems with a post or a connection, plan and usage notices, and receipts.
- To keep Narroli safe and working: stop spam and abuse, enforce plan limits, back up your data and fix bugs.
- To meet our legal duties, such as keeping payment records.
We don't sell your data, we don't show ads, and we don't use your posts or brand details to train AI models. We don't send marketing emails unless you ask for them.
If you're in the UK or the EU, our legal reasons are: running the service you signed up for (contract), keeping it secure and improving it (our legitimate interests), and the law (for example, tax records).
4. How AI uses your content
To write posts, replies and pictures, Narroli sends the parts it needs (your brand details, notes, the post or comment, and your instructions) to an AI provider. With Narroli AI, that's Anthropic (Claude) or OpenAI. Under their business terms, they don't use this data to train their models.
- Your own key: your content goes to the AI company whose key you added (Anthropic or OpenAI), under your agreement with them.
- AI on your computer (LM Studio or Ollama): your content goes to the model running on your own computer.
- Claude, ChatGPT or another AI app connected through the Narroli connector (MCP): that app reads what you ask it to from Narroli, under its own privacy policy. It always asks before scheduling, posting or replying.
AI can get things wrong. Nothing is posted or sent until you approve it.
7. Where your data is kept
Your data is stored on our servers in the European Union. Some of the companies above are based in the United States, so some data is processed there. Where the law requires it, those transfers are covered by the European Commission's standard contractual clauses or an equivalent safeguard.
8. How long we keep it
- Your account, brands and posts: for as long as you have an account.
- Drafts you haven't touched for 30 days are deleted automatically, along with pictures no post uses.
- Disconnecting a social account deletes its access keys straight away.
- Backups of the database are kept for 14 days, then deleted.
- Payment records are kept for as long as tax law requires, usually up to 7 years.
- When you delete your account, we delete your data within 30 days, and it leaves our backups within 14 days after that.
9. How we protect it
Everything travels over encrypted connections (HTTPS). Social media access keys and your own AI keys are encrypted before they're stored (AES-256), and they're never sent to your browser or written to logs. Keys for connected AI apps are stored only as one-way fingerprints. Only the people who run Narroli can reach the servers.
No system is perfectly secure. If something goes wrong that affects your data, we'll tell you and the authorities as the law requires.
10. Your choices and rights
Wherever you live, you can ask us to:
- Show you the personal data we hold about you, or send you a copy.
- Correct it. You can change most of it yourself in the app.
- Delete it (see the next section).
- Stop using it for a particular purpose, or limit how we use it.
Email hello@narroli.com from the address on your account. We'll reply within 30 days. If you're in the UK or the EU, you can also complain to your data protection authority (in the UK, the ICO). If you're in California, you have these rights under the CCPA too, and we don't sell or share personal information for advertising.
If you commented on a post that someone published with Narroli and want your comment removed from our records, email us too.
11. Delete your data
To delete your Narroli account and everything in it:
- Email hello@narroli.com from the address on your account, with the subject “Delete my data”.
- We'll confirm, then delete your account, brands, notes, posts, pictures, connections and keys within 30 days. Backups are cleared within 14 days after that.
- Posts already published stay on Threads, Instagram, TikTok or X until you delete them there.
To stop Narroli using a social account without deleting everything, disconnect it in Settings → Accounts. Its access keys are deleted straight away. You can also remove Narroli from the app itself:
- Instagram and Threads: open Settings, find Website permissions (Apps and websites), then remove Narroli.
- TikTok: Settings and privacy → Security → Manage app permissions.
- X: Settings → Security and account access → Apps and sessions → Connected apps.
Removing Narroli there stops it working straight away. Email us as well if you want the rest of your data deleted.
12. Children
Narroli is for adults running a brand or a business. It isn't meant for anyone under 18, and we don't knowingly collect data from children. If you think a child has given us data, email hello@narroli.com and we'll delete it.
13. Changes to this policy
If we change this policy, we'll update the date at the top. If the change matters, we'll email you before it takes effect.
14. Contact
Email hello@narroli.com.