Security Overview

Narratora is built around the idea that your source material belongs to you. Whether you upload screenplays, financial reports, research papers, interview transcripts, or unpublished manuscripts, our job is to help you turn that material into finished content — not to inspect, share, or reuse it. This page explains how we protect your data while it is in our care.

1. Data isolation and access control

Every user’s projects, source documents, and generated content are stored in a managed cloud database with Row-Level Security (RLS) policies. The rule is simple: users can only read and write their own data. There is no shared data lake, no cross-account querying, and no anonymous public access to your content.

Access is gated by authenticated sessions. Backend operations that touch user data run through authenticated server functions that verify the caller’s identity before executing any query.

2. Where your files live and how long we keep them

When you upload a screenplay, PDF, transcript, or other source file, it is stored in your own private area inside Narratora’s managed cloud backend. Your files are kept there only for as long as your account is active — so you can return to a project, edit it, regenerate it, or export it later.

If you delete a project, its source files and generated outputs are removed. If you delete your account, all of your stored projects, uploaded materials, and generated content are removed within a reasonable period. Some records, such as billing or legal data, may need to be kept longer for tax or compliance reasons, but those records do not include your uploaded scripts or source files.

For unreleased screenplays, confidential studio material, pilots, or other sensitive work, this means the file exists only in your account while you need it, and is removed when you choose to delete it.

3. Encryption

Data is encrypted in transit using TLS/HTTPS, and encrypted at rest by the managed cloud database provider. Payment information is handled by Stripe and never stored on our servers.

4. AI data handling

Your uploaded source material is sent to AI models solely to generate the output you requested. We do not use your documents, scripts, transcripts, or generated content to train AI models, and we do not retain prompts or outputs for model improvement. Each generation is processed as a transactional request tied to your account.

5. Infrastructure

Narratora runs on managed cloud infrastructure with automatic patching, redundancy, and infrastructure-level monitoring. The underlying platform handles physical security, network isolation, and database hardening; our application layer enforces the authentication, access control, and data-handling rules described above.

6. Authentication

Accounts are protected by password-based authentication with secure session management. We support strong, unique passwords and session tokens that expire and rotate automatically. We do not store plaintext passwords.

7. Backups and business continuity

The managed database provider performs automated backups and point-in-time recovery. This means your data is protected against infrastructure failures and can be restored to a consistent state if needed. Backup copies are stored in the same managed environment and are subject to the same access controls as live data.

8. Compliance posture

We design Narratora with security and privacy in mind, but we do not currently hold SOC 2, ISO 27001, HIPAA, PCI DSS, or other formal certifications. If your organization requires a specific compliance framework, please contact us and we can discuss whether our current controls meet your needs or what additional arrangements may be possible.

9. Vulnerability reporting

If you believe you have found a security issue in Narratora, please email support@narratora.com with enough detail for us to reproduce and investigate. We take reports seriously and will respond as quickly as we can.

10. What we do not do

• We do not sell your data or source material.
• We do not use your content to train AI models.
• We do not allow employees to browse user projects unless required for a specific support request with your permission.
• We do not store your full payment card information.

11. Contact

For security questions or to request more information, reach out to support@narratora.com.