Privacy Policy

The Narrative Graph (“we,” “us,” or “our”) is committed to protecting your privacy. This policy explains what we collect on this early-access page and why. The Narrative Graph isn’t open yet — this page only lets you reserve a spot.

1. What we collect (and what we don't)

On this early-access page we collect only:

• Your email address — only if you choose to reserve a spot, so we can tell you when early access opens.
• Your answer to one question— roughly how many chapters you’ve published (a band, not a number), to understand who’s interested.
• How you got here — the campaign/ad link (UTM) and a small set of interaction events (page view, button clicks), so we know which channels reach writers.

We do not collect manuscripts, create an account, take a password, or process any payment or card details on this page. There is no payment surface here.

2. Why we may use your data (legal basis)

We’ll use your email only to tell you when early access opens. We process early-access and research data under our legitimate interest in building the product (GDPR Art. 6(1)(f) / LGPD Art. 7, IX). You can object to this or ask us to remove your email at any time — just email privacy@thenarrativegraph.com, and we’ll delete it. We keep research notes for up to 12 months, then delete them.

In more formal terms: where we rely on legitimate interests (GDPR Art. 6(1)(f) / LGPD Art. 7, IX), we have weighed our interest in building and validating The Narrative Graph against your privacy. We limit this to the minimum data needed (an email if you reserve, a chapters band, and pseudonymous page-interaction events), we do not use it to make decisions about you, and we hold it for no longer than twelve months. Because this processing rests on legitimate interests rather than your consent, you have the right to object to it at any time (GDPR Art. 21 / LGPD Art. 18); if you object, we will stop and delete your email unless we have an overriding legal reason to keep it, which for an early-access list we do not anticipate.

Separately, where you tick the optional product-updates box, we rely on your consent (GDPR Art. 6(1)(a) / LGPD Art. 8), which you may withdraw at any time without affecting the lawfulness of processing before withdrawal. You also have the rights of access, correction, deletion, portability, and to be informed about our processing (GDPR Art. 13/15/17/20 / LGPD Art. 9 and 18). To exercise any of these, email privacy@thenarrativegraph.com; we will respond within the period the law requires.

3. Cookies and analytics

We use cookies to see which ads bring writers here — nothing else. The only non-essential trackers are Google Analytics 4 and the Reddit Pixel, and they exist purely to attribute the channel that sent you. They are off by default and only run if you choose Accept on the banner (Google Consent Mode v2, denied by default for everyone). You can decline, and the page still works.

A couple of small essential cookies are always set (your consent choice, and the first ad/UTM link that brought you), because the page can’t function without them. These are not used for advertising.

4. Waitlist is not marketing

Reserving a spot is not signing up for marketing. We’ll only email you to say early access has opened. Product news is a separate, optional, unticked checkbox — opting in there is the only thing that signs you up for updates.

5. International data transfers

The Narrative Graph is operated by a team based in Brazil; our infrastructure is located primarily in the United States. By using this page you acknowledge your information may be transferred to and processed in the United States.

Because we operate from Brazil and our infrastructure and service providers are located primarily in the United States, your personal data is transferred internationally. We rely on the following service providers (processors), each acting on our instructions: our hosting and database providers (Vercel and Supabase), our email-delivery provider (Resend), our bot-protection provider (Cloudflare), and — only if you accept analytics cookies — Google Analytics and Reddit. These are the only parties that process your data on our behalf.

For transfers out of the European Economic Area / United Kingdom, we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum) together with the additional safeguards our providers offer, so that your data continues to receive an adequate level of protection. For transfers from Brazil, we rely on the transfer mechanisms permitted under LGPD Art. 33 (including standard contractual clauses and the providers’ own safeguards) pending the ANPD’s ratification of its international-transfer framework. We keep the volume of transferred data to the minimum described in this policy.

6. Your rights and contact

The Narrative Graph is the controller responsible for the personal data described in this policy. The data controller for this site is The Narrative Graph, reachable at privacy@thenarrativegraph.com. For any question about this policy or to exercise your data-protection rights, contact us at privacy@thenarrativegraph.com.

You can request access to, correction of, or deletion of your data, and you can object to our processing. To exercise any of these rights, email privacy@thenarrativegraph.com.