This Privacy Policy describes how Naro("we," "us") collects, uses, and shares personal information when you use our website and services at https://usenaro.com.
1. Data controller
The operator of Naro is responsible for processing personal data described in this policy. For privacy requests, contact privacy@example.com.
2. Information we collect
Account and authentication. If you register or sign in, we process your email address, authentication identifiers, and profile information provided by you or your identity provider (for example, Google OAuth).
Content you provide. Text you paste, brand assets you may upload (such as fonts or logos), brand settings, and documents you save or share through the service.
Usage and technical data. IP address, device and browser type, general location derived from IP, pages viewed, timestamps, and similar diagnostics needed to operate and secure the service.
Cookies and similar technologies. We use cookies or local storage for session management, preferences (such as theme), and analytics as described below.
Payments. If you make a purchase, our payment processor receives payment details; we typically receive limited billing metadata (for example, subscription status), not your full card number.
3. How we use information
We use personal information to:
- Provide, maintain, and improve Naro;
- Authenticate users and prevent fraud or abuse;
- Process transactions and communicate about your account or the service;
- Analyze usage in aggregate to understand performance and product usage;
- Comply with legal obligations and enforce our terms;
- Send service-related messages (you may opt out of marketing where applicable).
4. Legal bases (EEA, UK, Switzerland)
Where GDPR or similar laws apply, we rely on: (a) performance of a contract with you; (b) legitimate interests in running, securing, and improving the service (balanced against your rights); (c) consent where required (for example, certain cookies or marketing); and (d) legal obligation where applicable.
5. How we share information
We do not sell your personal information. We share information with service providers who process data on our instructions ("subprocessors"), such as:
- Cloud hosting and infrastructure (for example, deployment platform providers);
- Authentication and database services (for example, Supabase or similar);
- Payment processing (for example, Lemon Squeezy);
- Analytics (for example, privacy-oriented product analytics where configured).
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger or asset sale (with notice where appropriate).
6. International transfers
If you access the service from outside the United States, your information may be processed in the U.S. or other countries where we or our providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for transfers from the EEA, UK, or Switzerland.
7. Retention
We retain personal information only as long as needed for the purposes above, unless a longer period is required by law. Account data is kept while your account is active and for a reasonable period afterward. You may request deletion as described below.
8. Security
We implement technical and organizational measures designed to protect personal information. No method of transmission or storage is 100% secure; use strong passwords and protect your account credentials.
9. Your rights and choices
Depending on your location, you may have the right to access, correct, delete, or export your personal information; object to or restrict certain processing; withdraw consent where processing is consent-based; and lodge a complaint with a supervisory authority.
California (CCPA/CPRA).California residents may request to know, delete, or correct personal information we hold, and to opt out of "sale" or "sharing" (we do not sell personal information in the conventional sense; see above). We will not discriminate against you for exercising these rights.
To exercise rights, email privacy@example.com. We may verify your request before responding.
10. Children
Naro is not directed at children under 13 (or the age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, contact us and we will take appropriate steps.
11. Cookies
We use essential cookies for security and core functionality. Where we use non-essential cookies or analytics, we will rely on consent where required. You can control cookies through your browser settings.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page and revise the "Last updated" date. For material changes, we will provide additional notice when appropriate.
13. Contact
Privacy questions or requests: privacy@example.com.