Privacy Policy

Effective date: 6 August 2026

Last updated: 15 August 2026

1. Who we are

Narrative0 ("Narrative0", "we", "us", "our") is a social analytics and listening platform operated by Cassian Labs Pte. Ltd., a company incorporated in Singapore ("the Company"). Narrative0 helps brands understand public conversation and community health across social platforms, including X (Twitter), Telegram, Discord, and YouTube.

This Privacy Policy explains what personal data we collect, how and why we use it, who we share it with, how long we keep it, and the rights you have. It applies to our website, web application, and the data our systems collect on behalf of our customers.

If you have any questions or want to exercise your rights, contact us at privacy@narrative0.xyz.

2. The two kinds of people this policy covers

Narrative0 is a business-to-business product, so this policy covers two groups:

1. Our customers — the brands and their team members who hold a Narrative0 account and use the product.
2. Community members — people who post publicly on the social platforms our customers ask us to analyze, including members of a Discord server that a customer has connected to Narrative0. We process this data on our customers' behalf to provide analytics.

3. What data we collect

3.1 From our customers

• Account and contact data: name, work email, and login identifiers.
• Configuration data: the brands, social accounts, Discord servers, and topics a customer chooses to track.
• Billing and usage data: subscription tier and product usage metrics.

3.2 Social and community data

At our customers' direction, we collect posts, messages, engagement metrics, and account or channel information from publicly available sources and from accounts, channels, communities, or servers that customers are authorised to connect.

3.3 Discord data specifically

When a customer connects a Discord server they administer, and grants our bot the required permissions, we collect:

• Message content from the channels the server's administrator has enabled for analysis — the text of messages, timestamps, and the author's Discord ID and username, used to produce conversation and sentiment analytics.
• Membership events and counts — server joins and leaves and aggregate member counts over time, used to produce community-growth analytics.

We collect Discord data through Discord's official API using the Server Members and Message Content privileged intents, solely to provide the analytics features described below. We do not collect Presence data.

3.4 Sensitive data

We do not ask users to provide government IDs, passwords, payment card numbers, health information, or other sensitive personal data. However, because social and community content is user-generated, messages may incidentally contain sensitive information.

3.5 Cookies

Our website uses only essential cookies needed to keep you securely logged in. We do not use advertising or third-party analytics cookies.

4. How and why we use data

We use the data above to:

• Provide the Narrative0 product and its analytics features (community health, sentiment, narrative and conversation insights, growth metrics, benchmarking).
• Generate insights for our customers. These include both aggregate analytics (themes, sentiment, volume, and growth trends) and the surfacing of notable individual public posts or messages, shown with their author, so a brand can see and respond to what is being said about it.
• Operate, secure, support, and improve the service.
• Communicate with our customers about their account.

4.1 How we analyze content

We use automated processing and service providers that help us analyze the content described above and turn it into insights. These providers act on our instructions and process the content only to provide the Service; they do not use it for their own purposes.

4.2 What we never do with the data

We do not:

• build behavioral or psychological profiles of individuals, map their relationships with other people, or track individuals across contexts;
• sell, rent, license, or otherwise commercialize the raw platform data;
• disclose platform data to data brokers, advertising networks, or other monetization-related services;
• use the data to make decisions about anyone's eligibility for employment, housing, insurance, credit, or similar; or
• attempt to re-identify or de-anonymize data.

5. Legal bases (where GDPR / UK GDPR applies)

Where the EU/UK GDPR applies, we rely on: performance of a contract (to provide the service to our customers); legitimate interests (to operate, secure, and improve the service and analyze public conversation, balanced against individuals' rights); and consent where required. Narrative0 acts as a controller for customer account, security, billing, and business-administration data. For data collected from customer-connected sources, Narrative0 generally processes that data on the customer's behalf.

6. Who we share data with

We share data only as follows:

• Service providers (sub-processors) who host and power the product under contract. These fall into two categories: (a) cloud infrastructure and database providers that host the application and store data; and (b) providers that help us analyze content on our instructions and only to provide the Service. We can provide the current list of our sub-processors on request.
• Legal / safety — where required by law, regulation, or valid legal process, or to protect our rights and users' safety.
• At your direction — where a customer explicitly asks us to share their data with a third party.

We do not sell personal data, and we do not share it with data brokers or advertising networks.

7. Where data is stored

We and our service providers may store and process data in a number of countries. Where personal data is transferred across borders — including to countries that may not offer the same level of data protection as your own — we rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

8. How long we keep data

We keep personal data only as long as needed to provide the service:

• While active: we retain a customer's data, and the Discord data for the servers they have connected, while their subscription is active and the connection remains in place.
• On disconnect: when a customer disconnects a Discord server, we delete the associated message content, member events, and derived insights 90 days after disconnection. During those 90 days the data is retained but not actively processed, so a server disconnected by mistake can be reconnected and its history restored; after the 90 days it is permanently deleted. A customer can also request immediate deletion at any time (see Section 9) instead of waiting out the 90 days.
• On offboard: when a customer closes their account, we delete their data (Discord included) as part of that offboarding, without a waiting period.
• On a Discord enforcement order: if Discord directs us to delete data for a server (e.g. following its own review of a report), we do so promptly, ahead of the normal 90-day window.
• On request: we delete personal data promptly following a valid deletion request (see Section 9), unless we are required to retain it by law.
• Backups: deleted data may persist for a limited period in encrypted database backups after it is removed from the live system. We keep a rolling set of the most recent 14 nightly backups, each of which is overwritten as newer ones are taken, so deleted data ordinarily clears from our backups within about two weeks. Backups are encrypted, access-controlled, and are used only to restore the service — they are never queried to serve the product. If we restore from a backup, we re-apply any deletion requests that the restored copy predates.
• Aggregated / de-identified statistics that cannot be linked to any individual may be kept longer to maintain and improve the service.

9. Your rights and how to exercise them

Depending on where you live (e.g. Singapore PDPA, EU/UK GDPR, California CCPA/CPRA), you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to withdraw consent, to data portability, and to opt out of certain processing. We do not "sell" or "share" personal data for cross-context behavioral advertising as those terms are defined under California law.

To exercise any right — including deletion or opt-out — email privacy@narrative0.xyz. This applies to Discord community members too, and a Discord server administrator can stop all processing at any time by removing the Narrative0 bot from their server.

We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.

10. Security

We use commercially reasonable safeguards to protect data, including encryption in transit and at rest, access controls, and measures to keep each customer's data separated. If we become aware of a data breach affecting personal data, we will notify affected parties and authorities as required by law.

11. Children

Narrative0 is not directed to children. We do not knowingly collect data from anyone under 13, or under the minimum age required by the laws of their country. If you believe we have such data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "Last updated" date and, where required, notify customers.

13. Contact

Cassian Labs Pte. Ltd. 60 Paya Lebar Road #06-28 Paya Lebar Square, Singapore 409051 Data Protection Officer / Privacy contact: privacy@narrative0.xyz