PRIVACY

Narro Technologies, Inc. operates the Service. For privacy questions or requests, email info@thenarro.com with the subject "Privacy Request". We will treat that mailbox as the contact point for personal-information requests under this Policy.

We collect personal information that identifies you or can be reasonably associated with you, and other information that is not reasonably identifiable on its own. Depending on how you use the Service, this may include:

• Account data such as name, email address, phone number, profile photo, professional title, and authentication identifiers
• Workspace and company-record data such as legal names, identifiers, team and employee details, and listing profile fields
• Customer content such as data-room files, financials, legal documents, pitch decks, messages, comments, and notes
• AI and memory data such as assistant chats, drafts, and optional persistent memories you save
• Audio or video if you use recording, practice, or assessment features
• Payment metadata such as billing email, plan, seat counts, and limited payment-method details returned by our processor (we do not store full card numbers)
• Verification data such as government-issued ID or business registration documents if a feature requires identity checks
• Device and log data such as IP address, browser type, app version, pages viewed, and approximate location derived from IP

We use personal information for specific purposes, including:

• Providing the Service you requested, including accounts, workspaces, listings, data rooms, Pitch Studio, and collaboration
• Operating AI features you choose to use, such as drafting, Q&A, and memories, as described in the AI section
• Processing payments, seats, and invoices
• Securing the Service, preventing fraud, and investigating abuse
• Sending transactional messages (security, billing, invites, product notices required to operate the Service)
• Sending promotional messages only where we have a lawful basis, including consent where required (for example CASL)
• Complying with law, including tax, accounting, or a lawful request
• Improving the Service using aggregated or de-identified usage signals

For Canadian privacy law (PIPEDA), we collect, use, and disclose personal information for the purposes described in this Policy and for purposes a reasonable person would consider appropriate in the circumstances. Where we need consent, you may withdraw it, subject to legal or contractual restrictions and reasonable notice. For users in a jurisdiction that requires a statutory legal basis (for example GDPR, if it applies), we rely on performance of a contract, legitimate interests in operating and securing the Service, consent for optional marketing or optional AI training features, and legal obligation.

If you use Narro AI features (including Moxie or OMEN), we process the prompts, files, and context you provide so the assistant can respond. Those features may send necessary context to subprocessors that host the models. AI output can be wrong; it is not legal, financial, or investment advice.

We do not use your confidential workspace content to train third-party foundation models unless you opt in to a feature that clearly says it will do so. You may object to an automated decision that produces a legal or similarly significant effect by emailing info@thenarro.com with the subject "Privacy Request". Matching and ranking tools are assistive; humans in your workspace remain responsible for decisions.

We keep personal information only as long as needed for the purposes in this Policy. Account and workspace records are kept while the account or workspace is active. After you close an account or delete a workspace, we delete or de-identify personal information we do not need, generally within a reasonable period, except where we must keep it longer for billing, security logs, dispute resolution, backups, or law. Pitch recordings, assessments, and assistant memories are kept until you or a workspace administrator delete them, or until the workspace is closed, subject to those same exceptions.

Depending on your jurisdiction, you may request to access, correct, or delete personal information, withdraw consent (where processing is based on consent), or complain about our handling of your information. Canadian residents may contact the Office of the Privacy Commissioner of Canada. If GDPR, UK GDPR, or US state privacy laws apply to you, you may have additional rights, including to portability, restriction, or to appeal a denial, and you may lodge a complaint with your local authority.

To make a request, email info@thenarro.com with the subject "Privacy Request" and tell us which right you want to exercise. We will verify your identity before acting. Some information cannot be deleted from your profile screen alone — for example billing records or files an administrator must remove from a company workspace. We will explain those limits when we respond.

• Access, correction, or deletion of personal data we hold about you
• Withdrawal of marketing consent by using the unsubscribe link or emailing us
• Objection to automated decision-making that produces a legal or similarly significant effect
• Cookie controls through your browser, as described above

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These include encryption in transit (TLS), encryption at rest for files stored on our hosting infrastructure, access controls so that employees and vendors see only what they need, and monitoring for abuse. No method of transmission or storage is completely secure. You can help by choosing a strong password, not sharing it, and signing out on shared devices.

If we become aware of a breach that creates a real risk of significant harm, we will notify affected individuals and, where required, the Privacy Commissioner of Canada or other authorities, in the manner the law requires.

We may update this Privacy Policy. We will change the "Last Updated" date and, for material changes, notify you by email to the address on your account or by a notice in the Service before the change takes effect where required. Continued use after the effective date means you acknowledge the updated Policy, except where a law requires a different form of consent.

Privacy requests and questions: info@thenarro.com, subject "Privacy Request". You may also write to us through the contact details published on thenarro.com.

Last Updated: This Privacy Policy was last updated on August 24, 2026.