Privacy Policy

Effective Sep 17, 2026

1. Scope

This Privacy Policy explains how Nari Labs collects, uses, shares, and protects personal information when you use our websites, applications, APIs, text-to-speech tools, voice features, and related services.

Nari Labs is operated by Nari Labs, Inc., a United States company headquartered at 300 Creek View Road, Suite 209, Newark, Delaware 19711, United States, with a mailing address at 2261 Market Street STE 85895, San Francisco, CA 94114, United States.

2. Information we collect

  • Account information, such as your name, email address, authentication provider, organization, and account status.
  • Account usage, quotas, promotional usage allowances, credit top-ups, and billing records. Payment-related information may be collected and processed as necessary to provide paid Services and process transactions, including through payment service providers.
  • Service content, including text prompts, generated audio, voice samples, settings, and related metadata you submit or generate.
  • Usage and technical data, such as API requests, request identifiers, timestamps, model and voice selections, latency, errors, approximate location derived from IP address, browser, device, and security logs.
  • Communications, including support messages, call scheduling details, feedback, and other information you send us.
  • Cookies and similar technologies needed for sessions, preferences, security, and analytics.

We use PostHog Cloud US for website and product analytics. Analytics events may include the page origin and path, page title, referrer origin and path, referrer domain, campaign parameters, link destination origin and path, link domain and text, event name, environment, browser and operating-system type and version, browser language, device type, time zone, screen and viewport size, timestamps, pseudonymous device, session, and window identifiers, and internal user and organization identifiers after sign-in. PostHog may derive approximate location from the network address before discarding the client IP.

Our analytics configuration removes URL query strings and fragments, raw IP and raw user-agent event properties before event transmission. It does not send names, email addresses, form text, prompts, audio, voice samples, transcripts, API keys, or payment details to PostHog. Session replay, automatic interaction capture, performance capture, console capture, surveys, and advertising tracking are disabled.

Analytics remains off until the visitor opts in in the EEA, United Kingdom, Switzerland, South Korea, Singapore, India, the United Arab Emirates, Saudi Arabia, Qatar, Bahrain, and locations we cannot determine. In other locations, limited analytics may begin by default. Visitors can disable analytics at any time through Cookie Settings in the site footer. We honor Global Privacy Control and Do Not Track signals everywhere. The analytics preference cookie lasts up to one year and is shared by narilabs.com and app.narilabs.com.

3. How we use information

  • provide, operate, authenticate, maintain, and improve the Services;
  • process text and audio to produce requested output;
  • review accounts, provide support, and communicate service or policy updates;
  • monitor performance, enforce limits, prevent abuse, fraud, impersonation, and security incidents;
  • comply with law and protect the rights, safety, and integrity of users, Nari Labs, and others; and
  • analyze usage, reliability, latency, errors, and other operational metrics to evaluate performance, plan capacity, and develop and improve features.

Service improvement includes troubleshooting and evaluating the functionality, reliability, and safety of the Services. We may in the future use customer text, audio, voice samples, generated output, and related feedback for research, model training, fine-tuning, evaluation, and improvement of our models and Services, subject to applicable law and customer agreements. Before introducing such use, we will provide clear notice of its scope and applicable choices and obtain consent where required. This statement describes a possible future use, not a representation that training on customer content is currently taking place. We will honor restrictions that applied when information was collected; this Policy does not retroactively override earlier privacy commitments. A signed customer agreement may impose additional restrictions.

We store customer-generated content in de-identified form for analytics, benchmarking, research, and product development, and may use that de-identified content for future model training, fine-tuning, and evaluation, subject to the notice, consent, and contractual requirements described above. We may also create and use aggregated information for these purposes where permitted by law. De-identification must address identifying information in the content itself, including text and audio, as well as associated account identifiers; removing an account name alone is not sufficient. Where we treat information as de-identified, we will maintain it in that form and will not attempt to re-identify it except as permitted by law to assess the effectiveness of de-identification.

4. How we share information

We do not sell customer data or disclose personal information for cross-context behavioral advertising. We may disclose personal information to service providers acting on our behalf, including PostHog when website analytics is enabled. Our website analytics integration receives limited website event data and does not receive service content, voice samples, or generated audio. We may share information with:

  • vendors that provide hosting, storage, authentication, analytics, communications, customer support, and security, under appropriate contractual restrictions;
  • professional advisers, auditors, insurers, and financing or transaction counterparties where reasonably necessary;
  • authorities or other parties when required by law or necessary to protect rights, safety, and the Services; and
  • a successor in connection with a merger, financing, acquisition, reorganization, or sale of assets.

5. Retention

We retain information only for as long as reasonably necessary for the purposes described here, including providing the Services, maintaining security and audit records, resolving disputes, and meeting legal obligations. Retention depends on the type and sensitivity of the information, the processing purpose, account activity, contractual requirements, and applicable legal obligations. This Policy does not promise zero retention or immediate deletion of every backup. Where lawful, limited records may remain for security, dispute resolution, or legal compliance, subject to applicable deletion requirements. We may retain de-identified or aggregated data where permitted by law.

6. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is completely secure, and we cannot guarantee absolute security. Keep your credentials and API keys confidential and contact us if you believe your account has been compromised.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, or to withdraw consent. You may also have a right to appeal a decision or complain to a regulator. We may verify your identity before fulfilling a request.

To submit a request, contact founders@narilabs.com. You can also manage certain account information and communications through the Services.

8. International transfers, biometric information, and children

Information may be processed in the United States and other countries where we or our service providers operate. Where a transfer mechanism is required by applicable law, we use the required safeguards, including contractual safeguards where appropriate. You may contact us for information about applicable transfer safeguards.

Voice samples may be personal information. Where we collect biometric identifiers or biometric information subject to an applicable law, we provide the required notice, obtain required consent, and follow applicable retention and destruction requirements. We do not sell biometric identifiers or biometric information.

The Services are not directed to children under 13, or the higher minimum age required in their jurisdiction. Do not create an account or submit personal information if you do not meet the applicable minimum age. If we learn that we collected personal information from a child in violation of applicable law, we will delete it as required by law.

9. Changes and contact

We may update this Policy and will post the revised date. We will provide additional notice of material changes where required.

Privacy questions or requests: founders@narilabs.com; Nari Labs, Inc., 2261 Market Street STE 85895, San Francisco, CA 94114, United States.