Privacy Policy

Last updated: November 7, 2026

Naratek is operated by R.A.S Investments and Finance ("Naratek", "we"). Naratek is a platform where businesses run their work in one place: a website, tables and a CRM, AI agents, automations, and connections to outside services such as Facebook, Instagram, TikTok, Google and monday.com. This policy explains what information we collect, why, how it is stored and how it can be deleted. It applies to app.naratek.ai and to the business workspaces at *.naratek.ai.

Who is responsible for the data

• Account details of business owners and their team members: Naratek is responsible.
• Information about the business's own customers, such as leads, contacts and conversations: the business is responsible. Naratek processes it on the business's behalf and only according to its instructions.

What we collect

1. Account details: name, email address and business name. If you sign in with Google, also your Google account identifier.
2. Data from accounts the business connects. When a business owner signs in with Facebook and grants permissions, we receive only what they approved, depending on those permissions:
   • The name and ID of the Facebook user who connected.
   • The list of Pages they manage, and content and engagement of the Pages they choose: posts, comments and reach data.
   • Ad accounts, campaigns, ads and performance data.
   • Leads from the business's lead forms: what people entered in the form, such as name, phone, email and answers to questions.
   • Access tokens that let us perform actions on the business's behalf.
3. Technical data: IP address, browser type, and usage and security logs.

How we use it

• To show the business its own data in its workspace: Pages, posts, campaigns, performance and leads.
• To save new leads into the business's CRM tables and notify the business about them.
• To perform actions the business owner requested or approved, such as publishing a post or creating an ad. No action on an outside account and no spending happens without the business owner's request or approval.
• To secure the service and prevent abuse.

We do not sell data, do not use it for our own or anyone else's advertising, and do not train AI models on it. We use data received from Meta in accordance with the Meta Platform Terms.

Artificial intelligence

When a business uses the platform's AI features, the content relevant to the request is sent to model providers (Anthropic and OpenAI) only to produce the answer. It is sent through their business APIs, which under their terms do not use it for training. Access tokens and secrets are never sent to any model.

How data is stored

• Each business has its own separate database; one business cannot see another business's data.
• Access tokens are stored encrypted (AES-256-GCM) with a key unique to each business. They are never displayed and never written to logs.
• Our servers run on Google Cloud, and all traffic is encrypted (HTTPS).

Who we share it with

Only with providers that operate the service for us: Google Cloud (servers and storage), Anthropic and OpenAI (AI features), and an email service for sign-in codes and notifications. Beyond that, we disclose data only when the law requires it.

Retention and deletion

• While a connection is active, the data is kept in the business's workspace.
• Disconnecting Facebook on the Connections screen deletes the access tokens immediately, and no further data is received from that account.
• Data the business has already saved, such as a lead added to its CRM, stays under the business's control, and the business can delete it at any time.
• When an account is closed or a deletion request is made, we delete the data within 30 days.

Full instructions are on the data deletion page.

Your rights

You may ask to access, correct or delete your data, or withdraw consent, under the Israeli Privacy Protection Law and the GDPR where it applies. If you filled in a lead form of a particular business, you can contact that business directly, and we will help the business carry out your request. Contact: amir@naratek.ai.

Children

The service is intended for businesses and is not intended for anyone under 18.

Changes

When we update this policy we will also update the date at the top. We will notify account owners of material changes.

Contact

Naratek, operated by R.A.S Investments and Finance · amir@naratek.ai · naratek.ai