NarratorHQ← Back to home

Privacy Policy

Last updated: 30 May 2026

1. Who we are

NarratorHQ ("we", "us", "our") is a client reporting automation platform for digital marketing agencies, operated by Cameron Drayton, trading as NarratorHQ, based at Carrhouse Road, Belton, Doncaster, DN9 1PG, United Kingdom. Contact: cameron@narratorhq.com.

2. Google API Services User Data Policy

NarratorHQ's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Google data we access

When you connect a Google Analytics 4 (GA4) or Google Ads account, we request read-only access to:

  • Google Analytics 4: sessions, users, conversions, channel grouping, page-level metrics, and traffic source data via the Google Analytics Data API (analytics.readonly scope)
  • Google Ads: campaign performance metrics including impressions, clicks, spend, CPA, ROAS, and keyword performance via the Google Ads API (adwords scope — read-only reporting)

We do not access personally identifiable information about your end users or your clients' customers from these platforms. We access only aggregate performance metrics.

How we use Google data — Limited Use

Data obtained from Google APIs is used solely for the following purpose:

  • Generating automated client performance reports on behalf of the agency that connected the account

We do not:

  • Use Google user data to serve advertising
  • Sell Google user data to third parties
  • Use Google user data for any purpose unrelated to report generation
  • Transfer Google user data to any other party except as necessary to operate the service (e.g., cloud infrastructure providers bound by confidentiality obligations)
  • Use Google user data to build or train machine learning models

How to revoke Google access

You can revoke NarratorHQ's access to your Google account at any time in two ways:

  1. From within NarratorHQ:Go to your client settings, open the Connections panel, and click "Disconnect" next to the Google Analytics or Google Ads connection. This immediately deletes the stored access token from our systems.
  2. From Google directly: Visit myaccount.google.com/permissions, find NarratorHQ in the list, and click "Remove Access". Revoking from Google immediately invalidates the token; any further data fetches will fail and we will mark the connection as inactive.

Google data retention and deletion

Google OAuth access tokens and refresh tokens are stored encrypted at rest using AES-256 encryption. When you disconnect a Google connection or delete your account, all stored tokens and any cached API data for that connection are permanently deleted within 24 hours. If you request data deletion by emailing cameron@narratorhq.com, we will confirm deletion within 7 days.

3. What other data we collect

Account data

When you sign up, we collect your email address, full name, and agency name. We use this to authenticate your account and send product and transactional emails.

Meta Ads and TikTok Ads data

If you connect Meta Ads or TikTok Ads via a system user access token, we access campaign and ad set performance metrics (spend, impressions, CPA, ROAS) from the Meta Marketing API and TikTok Ads API respectively. This data is used exclusively for report generation and is never sold, shared with third parties, or used to train machine learning models. The same Limited Use principles described above apply.

Usage data

We collect anonymised usage information (pages visited, features used) to improve the product. We do not sell this data.

Payment data

Payments are processed by Stripe. We do not store your card number or CVV. Stripe's privacy policy governs how payment data is handled.

4. How we use your data

  • To generate automated client performance reports on your behalf
  • To send report delivery emails and transactional notifications
  • To process subscription payments
  • To provide customer support
  • To improve our product and debug issues

We use the Anthropic Claude API to generate narrative content from your campaign data. Metric data is sent to the Claude API as part of this process. Data sent to the Claude API is governed by Anthropic's Privacy Policy. Anthropic does not use API data to train models. Data sent to Anthropic is used solely to generate the report narrative and for no other purpose.

5. Data storage and security

Your data is stored in Supabase (PostgreSQL) hosted on AWS. OAuth tokens and access tokens for third-party platforms are encrypted at rest using AES-256-GCM with unique initialisation vectors. All data in transit is protected via HTTPS/TLS. Access controls ensure only authenticated users can access their own agency's data. For more detail, see our Security page.

6. Third-party services

We use the following third-party services to operate NarratorHQ:

  • Supabase — database and authentication
  • Vercel — hosting and edge delivery
  • Stripe — payment processing
  • Resend — transactional email delivery
  • Anthropic (Claude API) — AI narrative generation from anonymised metrics
  • Google APIs — GA4 and Google Ads data access (read-only, report generation only)
  • Meta Marketing API — Meta Ads data access (read-only, report generation only)
  • TikTok Ads API — TikTok Ads data access (read-only, report generation only)

7. Data retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 90 days before deletion, giving you time to export or re-activate. Google and Meta API tokens are deleted immediately when a connection is disconnected or the account is closed. You can request immediate deletion of all your data by emailing cameron@narratorhq.com.

8. Your rights (UK/EU)

Under UK GDPR and GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Request deletion of your personal data
  • Object to or restrict processing of your data
  • Data portability — receive your data in a machine-readable format

To exercise any of these rights, email cameron@narratorhq.com. We will respond within 30 days.

9. Cookies

We use only essential cookies required for authentication (session cookies set by Supabase Auth). We do not use tracking, advertising, or analytics cookies. You can disable cookies in your browser settings, but this will prevent you from logging in.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice in the app. Continued use of NarratorHQ after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, data requests, or to request deletion of your data, contact: cameron@narratorhq.com.