Narriva Legal

Privacy Policy

Last updated: February 18, 2026

1. Introduction

Narriva ("we", "us", "our") is operated by NEXX LAB TECHNOLOGIES S.R.L., a company registered in Romania. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our text-to-speech service at narriva.org (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect the following categories of personal data:

  • Account information: your email address when you register for an account.
  • Content you submit: article URLs or text you submit for conversion into audio narrations.
  • Usage and request metadata: narration IDs, timestamps, selected voice settings, processing status, and similar operational data.
  • Technical data: IP address, browser type, and referring domain collected in server logs for security and abuse prevention.
  • Session data: authentication tokens stored securely to maintain your logged-in session.

3. How We Use Your Data

We use the data we collect to:

  • Provide, operate, and improve the text-to-speech Service.
  • Send account-related emails, such as one-time password (OTP) codes and service notifications.
  • Enforce usage limits and prevent abuse of the Service.
  • Maintain the security and integrity of our infrastructure.
  • Comply with legal obligations.

4. No AI Training on User Content

We do not use any content you submit to train, fine-tune, or improve any artificial intelligence or machine learning model.

This includes article URLs you provide, text extracted from those URLs, and the audio narrations generated from your content. Your content is processed solely to fulfil your service request and is never retained or used for model training purposes.

5. Data Retention

  • Account data is retained for as long as your account is active. Upon account deletion, your personal data is removed within 30 days.
  • Narration content (extracted text and generated audio files) is retained until you delete the narration or your account. Deleting a narration permanently removes the associated files from our storage.
  • Server logs are retained for up to 90 days for security and operational purposes.

6. Your Rights Under GDPR

As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate or incomplete data.
  • Erasure: request deletion of your personal data ("right to be forgotten").
  • Portability: receive your data in a structured, machine-readable format.
  • Restriction: request that we limit processing of your data in certain circumstances.
  • Objection: object to processing of your data where we rely on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Processors

We share data with the following third-party sub-processors to deliver the Service:

  • ElevenLabs (USA): text-to-speech synthesis. Article text is sent to ElevenLabs to generate audio. ElevenLabs processes this data under their own privacy policy.
  • Amazon Web Services — SES (USA): transactional email delivery (OTP codes and service notifications).
  • Cloudflare (USA): infrastructure, content delivery network, and R2 object storage for audio and text files.

All sub-processors are bound by data processing agreements and appropriate safeguards for international transfers.

8. Data Security

We implement industry-standard security measures including TLS encryption in transit, access controls on our infrastructure, and Cloudflare's edge security. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Service. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact Us

For any questions or requests related to this Privacy Policy or your personal data, please contact us at:

[email protected]