1. Introduction
This Privacy Policy explains how Thompson Intelligence Group, LLC ("Company," "we," "us") collects, uses, discloses, and protects information when you use Narrata (the "Service"). It is incorporated by reference into our Terms of Service. By using the Service, you agree to the practices described here.
2. Information We Collect
2.1 Account Information
Email address, password (stored in hashed form), and account creation/sign-in timestamps.
2.2 Content You Provide
- Documents you upload (PowerPoint, Word, PDF files) and their extracted text and images;
- Prompts and answers you provide when using the "Start from a prompt" feature;
- Voice samples you upload for voice cloning, and the resulting synthesized voice audio;
- Edits you make to scripts, presenter notes, and brand theme settings (logos, colors);
Any content shared with you by other users, and permissions granted to you.
2.3 Usage and Device Information
Information about how you interact with the Service — pages visited, features used, presentation processing history, IP address, device and browser type, and similar technical/usage data — collected automatically to operate, secure, and improve the Service.
2.4 Cookies and Similar Technologies
We and our service providers use cookies, local storage, and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. We do not currently use these technologies for cross-context behavioral advertising, and we do not currently sell or share (as defined under California and Texas law) personal information with third parties for advertising purposes. If that changes, we will update this Policy and honor opt-out signals, including the Global Privacy Control, as required by applicable law.
3. How We Use Information
- To provide, maintain, and improve the Service, including generating research, scripts, narration, and video/caption exports from Your Content;
- To operate account access controls, including the access-code sign-up system and sharing/collaboration permissions;
- To communicate with you about your account or the Service;
- To detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service;
- To comply with legal obligations;
To generate aggregated or de-identified analytics about Service usage that do not identify you.
We do not sell your personal information, and we do not use Your Content to train general-purpose AI models operated by us or our third-party providers beyond what is necessary to generate the specific Output you request.
4. AI Processing & Third-Party Service Providers
To provide the Service's core functionality, Your Content is processed by third-party AI and infrastructure providers, which may include providers of: large language models (for research synthesis, script writing, and fact verification), text-to-speech and voice cloning services, web search and content retrieval services, and cloud hosting and database infrastructure.
These providers process Your Content as necessary to perform the specific function requested (e.g., a voice cloning provider receives your voice sample solely to generate narration audio). We select providers that maintain reasonable data protection practices, but we do not control their independent data handling and are not responsible for their acts or omissions.
5. Voice Data & Biometric Information
If you use the voice cloning feature, your voice sample and any derived voice model may constitute biometric identifier or biometric information under certain state laws, including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and the sensitive personal information provisions of the California Consumer Privacy Act (CCPA) and Texas Data Privacy and Security Act (TDPSA).
We collect and use this data only:
- (a) with your affirmative, opt-in consent at the time of upload, given separately from your general acceptance of this Policy;
- (b) to generate narration audio for the presentations you create; and
(c) we do not sell, lease, trade, disclose for cross-context behavioral advertising, or otherwise profit from biometric data.
Retention schedule. In accordance with BIPA's and CUBI's requirement that we publish a retention schedule for biometric data, we retain voice samples and derived voice models only until the earliest of: (i) your deletion of the voice profile, (ii) closure of your account, or (iii) one (1) year after your last use of the voice cloning feature, whichever occurs first, at which point we permanently destroy the data using reasonable, industry-standard deletion methods, unless a longer retention period is required by law or an active legal hold. You may delete a saved voice profile at any time from your account settings.
6. How We Share Information
- With third-party AI/infrastructure providers, as described in Section 4, solely to provide the Service;
- With other users, only when YOU choose to use the sharing feature to grant them access to a specific presentation, limited to the permissions you select;
- If required by law, subpoena, or legal process, or to protect the rights, property, or safety of the Company, our users, or the public;
In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
We do not share your presenter notes or AI-generated presenter briefings with any other user under any circumstance — this data is accessible only to the account that created it.
7. Your Privacy Choices
You may decline to provide certain information, but doing so may limit your ability to use some features (for example, the voice cloning feature requires a voice sample). Where we offer account or communication preference settings, you may update them directly in the Service. We currently do not sell or share personal information as those terms are defined under the CCPA and TDPSA; if this changes, we will provide a "Do Not Sell or Share My Personal Information" mechanism and honor the Global Privacy Control signal.
8. Data Retention & Deletion
We retain Your Content and account information for as long as your account is active, or as needed to provide the Service. You may delete individual presentations or your entire account at any time; upon deletion, we will remove Your Content from active systems within thirty (30) days, subject to limited retention for backups (not to exceed ninety (90) days), legal compliance, or fraud prevention. Biometric data is subject to the shorter, specific schedule in Section 5.
9. Security
We use reasonable administrative, technical, and physical safeguards designed to protect your information, including access controls limiting data to its owning account, encryption of data in transit, and encrypted storage where applicable. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Security Incident Notification
If we experience a breach of security compromising unencrypted personal information, we will notify affected individuals and any required regulators without unreasonable delay and in accordance with applicable law, including the Texas Identity Theft Enforcement and Protection Act, which requires notice as soon as practicable and, for breaches affecting 250 or more Texas residents, notice to the Texas Attorney General within thirty (30) days of determining a breach occurred.
11. Children's Privacy
The Service is not directed to, and we do not knowingly collect information from, anyone under 18 years of age; account creation is restricted to users who are at least 18. Because the Service is not directed to children under 13, the Children's Online Privacy Protection Act (COPPA) verifiable-parental-consent regime does not apply to our intended user base. If we learn we have collected information from a person under 18, we will delete it and terminate the associated account.
12. Your Rights & Choices (General)
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, and to withdraw consent for specific processing (such as voice cloning). To exercise these rights, contact us at legal@thompsonintelligencegroup.com. We will verify your identity before acting on a request and will respond within the time period required by applicable law.
13. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights, subject to certain exceptions:
- Right to Know/Access the specific pieces and categories of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it;
- Right to Delete personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, security, legal compliance);
- Right to Correct inaccurate personal information;
- Right to Limit Use of Sensitive Personal Information — your voice sample and derived voice model are "sensitive personal information" under the CPRA; we use this data only to provide the voice cloning feature you requested and do not use or disclose it for any purpose requiring an opt-out right under Cal. Civ. Code § 1798.121;
- Right to Opt Out of Sale/Sharing — we do not sell personal information or share it for cross-context behavioral advertising;
- Right to Non-Discrimination for exercising any of these rights;
Right to Data Portability, where technically feasible.
Categories of personal information collected in the preceding 12 months, mapped to Cal. Civ. Code § 1798.140: identifiers (email, account ID); customer records (password, in hashed form); commercial information (usage history); internet/network activity; audio/visual information (voice samples, synthesized voice audio, uploaded document content); and inferences are not currently generated for profiling purposes.
To exercise these rights, contact us at legal@thompsonintelligencegroup.com or the contact email above. We will respond within forty-five (45) days, extendable once by an additional forty-five (45) days with notice to you. You may designate an authorized agent to submit a request on your behalf, subject to identity verification. If we deny a request, you may appeal by replying to our denial notice.
14. Texas Data Privacy and Security Act (TDPSA) Rights
If you are a Texas resident, you have the right to confirm whether we process your personal data, access it, correct inaccuracies, delete it, obtain a portable copy, and opt out of processing for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. Because your voice sample is "sensitive data" under the TDPSA, we process it only with your prior, opt-in consent as described in Section 5. Beginning January 1, 2025, we will process opt-out preference signals sent via a platform, technology, or mechanism recognized under the TDPSA (e.g., the Global Privacy Control), where technically feasible. To exercise these rights or appeal a decision on your request, contact us at legal@thompsonintelligencegroup.com.
15. Other State Privacy Laws
Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Montana, and other states with comprehensive privacy laws have similar rights to access, correct, delete, and port their personal data, and to opt out of targeted advertising, sale, and certain profiling. To exercise these rights, contact us at legal@thompsonintelligencegroup.com.
16. International Users
The Service is intended for use by individuals located in the United States, and our infrastructure and processing occur in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.
17. Do Not Track Signals
Some browsers offer a "Do Not Track" signal. Because there is no common industry standard for responding to these signals, we do not currently respond to them; however, we do honor the Global Privacy Control as described in Sections 13 and 14.
18. Changes to This Policy
We may update this Privacy Policy from time to time. We will provide notice of material changes before they take effect, such as by email or an in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
19. Contact
Questions about this Privacy Policy, or requests to exercise your privacy rights, may be directed to legal@thompsonintelligencegroup.com.