1. Who this notice applies to
This notice applies to people who visit NaraOps, create or use a NaraOps account, submit feedback, subscribe, or otherwise interact with the service. NaraOps is a UK-based software service operating under the NaraOps name.
Privacy enquiries and data-rights requests can be sent to privacy@naraops.com.
2. Information we process
Account and access information
We process your email address, sign-in and session information, access cohort or entitlement, trial status and feedback you choose to submit.
Launch attribution and activation
If you start account creation from a campaign-tagged NaraOps link, we may store limited source information such as campaign, medium, source, landing path and referring host with your account. We also record a small set of authenticated product milestones such as building a workspace, generating a brief, using Ask NaraOps, submitting feedback or starting checkout. This is used to understand which launch activity leads to useful trials and paying customers. It does not include raw operational rows, and NaraOps does not use third-party advertising trackers or anonymous behavioural-tracking cookies for this launch funnel.
Billing information
Payments and subscriptions are handled by Lemon Squeezy as merchant of record. NaraOps receives limited billing and subscription information needed to grant and manage access, such as subscription status, relevant identifiers and payment state. NaraOps does not receive or store your full card number.
Operational files
CSV and Excel files you load into the NaraOps workspace are designed to be processed locally in your browser. NaraOps does not intentionally upload the raw rows in those files to its server. A local workspace may be stored on the device in browser storage so you can continue your analysis.
Document and image extraction
If you choose to extract a PDF, photograph, scan, Word document or text document, the selected file is sent through NaraOps to OpenAI so that proposed structured records can be returned. This happens only after you select the extraction action and acknowledge the processing notice. NaraOps does not intentionally write the original document or its raw bytes to its account database. OpenAI processes the content as a NaraOps service provider under the applicable API data terms and retention controls.
Extracted values, source excerpts, confidence information, your corrections and approval status are held in the local browser workspace. They do not enter NaraOps analysis until you approve and use them. If you connect a local folder, the browser may store the folder permission handle and a local import ledger on that device. NaraOps can scan it only while the site is open and the browser continues to grant permission.
Ask NaraOps
When you use Ask NaraOps, the browser sends a compact analytical summary of the verified metrics and joined evidence needed to answer your question. Raw operational rows are not intentionally included in that request.
Technical and security information
Hosting and security providers may process ordinary technical information such as IP address, request metadata, timestamps and security logs as part of delivering and protecting the service. NaraOps also keeps time-windowed per-account AI request counters so abnormal Ask NaraOps or document-extraction bursts can be throttled without storing raw operational rows in those counters. Stale windows are opportunistically deleted as later AI requests are processed.
3. Why we use personal information
We use personal information to provide and secure accounts, send sign-in codes, manage trials and subscriptions, respond to feedback and support requests, operate the service, prevent abuse, improve reliability and meet legal obligations.
Depending on the activity, our lawful basis is usually performance of a contract or steps requested before entering a contract, our legitimate interests in operating and protecting NaraOps, or compliance with legal obligations. Where consent is required for a particular future feature, we will ask for it separately.
4. Service providers
NaraOps currently relies on service providers including Cloudflare for hosting and database infrastructure, Resend for sign-in email delivery, Lemon Squeezy for payments and subscription management, and OpenAI for Ask NaraOps responses and user-requested document extraction. These providers process data only to the extent needed for the relevant service and under their own contractual and privacy obligations.
5. Cookies and local browser storage
NaraOps uses a strictly necessary session cookie to keep you signed in. The product also uses browser storage for local workspace and action data. We do not currently use non-essential advertising or behavioural-tracking cookies. If that changes, this notice and any required consent controls will be updated first.
6. International transfers
Some technology providers may process information outside the UK. Where required, we rely on appropriate contractual or legal safeguards for international transfers.
7. How long we keep information
We keep account, entitlement, feedback, billing-reference and security information for as long as reasonably necessary to provide the service, maintain records, resolve disputes, prevent abuse and meet legal obligations. Raw CSV and Excel files and original documents submitted for extraction are not intended to be retained in the NaraOps account database. A document is necessarily processed in transit for the extraction request, and the relevant service provider's API retention terms may apply. Local browser data, extracted records, folder permissions and the import ledger remain on the device until they are cleared by the user or browser.
8. Your responsibilities when uploading operational data
You should only use data that you are authorised to use. During the review beta, do not upload highly confidential information, special-category personal data, regulated personal data, credentials, secrets or other information that would require controls beyond the current beta security posture.
9. Your UK data-protection rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict use of your personal information, object to certain processing, and receive certain information in a portable form. You can raise a request using the privacy contact above.
You also have the right to complain to the UK Information Commissioner's Office (ICO) if you are concerned about how your personal information is handled.
10. Children
NaraOps is a business software service and is not intended for children.
11. Security and beta status
We use reasonable technical and organisational measures appropriate to the current service. No online service can guarantee absolute security. The review beta is still undergoing production hardening and is intended for non-confidential testing data.
12. Changes to this notice
We may update this notice when the service, providers or legal requirements change. Material changes will be reflected on this page before new processing begins where required.