How Narevik handles personal and project data.

Effective date: April 19, 2026. This Privacy Policy explains what information Narevik collects, how it is used, and what choices customers and prospects have.

1. Information we collect

• Contact details you send through email, forms, or direct outreach replies.
• Project information you provide for audits, copy revisions, or bot setup.
• Billing and payment information processed by Stripe.
• Basic hosting, security, and usage logs generated by the website and its providers.
• Communications, intake notes, and service delivery files related to active work.
• Chatbot conversation data generated between your website visitors and the AI bot deployed on your site (messages, timestamps, session identifiers).

2. How we use information

• To respond to inquiries and deliver the services you request.
• To process payments, issue receipts, and manage billing records.
• To review submitted website materials and prepare deliverables.
• To secure the website, prevent abuse, and maintain service quality.
• To comply with legal, tax, and regulatory obligations.

3. Service providers and tools

Narevik uses third-party providers to operate the business. These may include Stripe for payments, Google Workspace for email, Vercel for website hosting, and AI or software providers that help generate or deliver service outputs. Information is shared with these providers only as needed to run the business and deliver the service.

4. AI processing and data training

Chatbot conversations are processed through Anthropic's Claude API (primary) and Google's Gemini API (used as a fallback when the primary service is unavailable). Both are enterprise-grade APIs operated under commercial agreements.

By default under these commercial terms:

• Conversation inputs and outputs are not used to train AI models.
• Narevik does not sell your data, share it with advertisers, or use it for any purpose beyond powering the chatbot service you paid for.
• API-level logs are retained by the AI providers only for the short periods defined in their respective commercial terms (typically 7–30 days for abuse monitoring).

Chatbot conversation data that Narevik stores for service operation is kept on Supabase (US-based infrastructure), encrypted at rest and in transit.

5. International processing

Because services are delivered online, information may be processed or stored outside your country of residence. By using the services, you understand that cross-border processing may occur.

6. Sensitive information

Do not send highly sensitive personal information, health records, government IDs, payment card numbers, or confidential third-party data unless Narevik explicitly asks for it and confirms a secure collection method. Stripe collects payment card details directly and should be used instead of email for payment information.

7. Retention

Inquiry and project records are kept only as long as reasonably necessary for service delivery, support, internal recordkeeping, and legal compliance.

Chatbot conversation data is retained on active subscriptions for the purpose of monthly tuning and usage reporting. On cancellation, conversation data is automatically deleted within 90 days unless legal or tax obligations require longer retention. You may request earlier deletion by emailing hello@narevik.com.

8. Security

Narevik uses reasonable administrative and technical safeguards, but no website, email, or cloud service can promise absolute security. Customers should avoid sending information they would not want exposed over ordinary email unless a more secure method is arranged.

9. Your rights and requests

Depending on your location (e.g. EU/UK under GDPR, California under CCPA), you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. To exercise these rights, email hello@narevik.com. Narevik may need to verify your identity before taking action and will respond within a reasonable timeframe as required by applicable law.

If your website visitors interact with a chatbot deployed by you using Narevik, you (as the site operator) are the primary controller of that conversation data and are responsible for disclosing bot usage to visitors as required by local law.

10. Updates

This policy may be updated from time to time. The latest version will be posted on this page with an updated effective date.