Privacy Policy

This Privacy Policy describes how PİXİR YAZILIM DANIŞMANLIK PAZARLAMA LTD. ŞTİ., the company that operates the Narvin service (“Narvin,” “we,” “us,” or “our”), handles personal information when you visit narvin.io, create an account, or use our monitoring and alerting services (collectively, the “Service”).

By using the Service you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service. For the purposes of applicable data protection law, PİXİR YAZILIM DANIŞMANLIK PAZARLAMA LTD. ŞTİ. is the data controller of the personal information described here.

We collect information you provide directly, information generated as you use the Service, and a limited amount of technical information collected automatically.

Account and billing information

When you sign up, we collect your name, email address, and authentication credentials. If you subscribe to a paid plan, our payment processor collects and processes your billing details; we store only the subscription metadata needed to manage your plan (such as plan tier and renewal status), not full card numbers.

Monitoring configuration and results

To provide the Service we store the monitors you create — the URLs and hostnames you ask us to check, their schedules and thresholds, and the results of each check (status, response time, status codes, SSL and domain expiry data, and related diagnostics).

Alert destinations

When you configure where alerts should be delivered, we store those destinations. Depending on the channels you enable, this can include:

• WhatsApp: the phone number you add to receive alerts via WhatsApp.
• Email: the email addresses you add as alert recipients.
• Other channels: tokens, webhook URLs, or channel identifiers for integrations such as Telegram, Slack, Discord, and custom webhooks. Credentials and access tokens for these integrations are encrypted at rest.

Technical and usage information

When you use the Service, we automatically collect log data such as your IP address, browser type, pages viewed, and timestamps. We use this to operate, secure, and improve the Service. See Cookies and analytics for more.

We use the information we collect to:

• Provide, maintain, and operate the Service.
• Run the monitors you configure and deliver alert notifications to the destinations you choose.
• Authenticate you, secure your account, and prevent fraud and abuse.
• Process payments and manage your subscription.
• Respond to your support requests and communicate with you about the Service.
• Understand how the Service is used so we can improve it.
• Comply with legal obligations and enforce our terms.

Narvin offers WhatsApp as one of several alert channels. When you enable it, we deliver your notifications through the WhatsApp Business Platform(Cloud API) operated by Meta Platforms, Inc. (“Meta”). This section explains how we handle data in connection with that integration.

What data is involved

• The WhatsApp phone number you add as an alert destination.
• The content of the alert messages we send you — for example, the monitor name, its status (such as down, recovered, or degraded), and a timestamp.
• Delivery metadata returned by Meta, such as whether a message was sent, delivered, or failed.

How we use it

We access and use this data, including any “Platform Data” received from Meta, solely to deliver the alert notifications you have configured and to operate and troubleshoot the WhatsApp channel. Specifically:

• We only send messages to a WhatsApp number that an account holder has explicitly added and opted in to receive alerts on.
• We send transactional alerts only. We do not send marketing or promotional messages over WhatsApp.
• We do not sell Meta Platform Data, and we do not use it for advertising, ad targeting, or to build user profiles unrelated to delivering your alerts.
• We limit our collection, use, and retention of Meta Platform Data to what is necessary to provide the feature (data minimization).

Compliance

Our use of the WhatsApp Business Platform is governed by the Meta Platform Terms, the Meta Developer Policies, and the WhatsApp Business Messaging Policy, in addition to this Privacy Policy. Your use of WhatsApp itself is also subject to WhatsApp’s own terms and privacy policy.

Your control

You can remove a WhatsApp destination at any time from within the Service, which stops future messages to that number. To request deletion of associated data, see How to delete your data.

If you are in the European Economic Area, the United Kingdom, or a region with similar laws, we process personal information on the following legal bases:

• Performance of a contract — to provide the Service you have signed up for, including running your monitors and delivering your alerts.
• Legitimate interests — to secure, maintain, and improve the Service, where those interests are not overridden by your rights.
• Consent — where required, for example when you add a destination such as a WhatsApp number to receive alerts. You can withdraw consent at any time.
• Legal obligation — where we must process information to comply with the law.

We do not sell your personal information. We share it only in the following circumstances:

• Service providers (subprocessors).We use trusted providers to run and grow the Service — for example, cloud hosting and database providers, our payment processor, our email delivery provider, analytics and advertising providers (such as Google, which we use for Google Ads conversion measurement and remarketing on our marketing site), and the messaging platforms that deliver your alerts (including Meta’s WhatsApp Business Platform and any other channels you enable, such as Telegram, Slack, or Discord). These providers process information only on our instructions and to provide their service to us.
• Legal and safety. We may disclose information if required by law, regulation, legal process, or to protect the rights, property, or safety of Narvin, our users, or others. For how we handle requests from public authorities, see our GDPR & Data Protection page.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

We can provide the current list of subprocessors on request at privacy@narvin.io.

We keep personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account and configuration data is retained while your account is open and deleted within a reasonable period after you close it.
• Monitoring resultsare retained according to your plan’s data-retention window, after which they are removed or aggregated.
• Alert destinations, including WhatsApp numbers, are retained until you remove them or delete your account.
• We may retain limited information longer where required to comply with legal obligations, resolve disputes, or enforce our agreements.

We use technical and organizational measures designed to protect your information, including encryption in transit (TLS), encryption at rest for sensitive credentials and tokens, access controls, and regular review of our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.

We and our service providers may process and store information in countries other than the one in which you live. Where we transfer personal information across borders, we rely on appropriate safeguards, such as standard contractual clauses, to protect it in accordance with applicable law.

Depending on where you live, you may have the right to access, correct, update, port, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these directly in the Service, or contact us at privacy@narvin.io and we will respond as required by law. You also have the right to lodge a complaint with your local data protection authority.

You can delete your data in two ways:

• In the app. Remove individual alert destinations (including WhatsApp numbers) from your monitor settings at any time, or delete your entire account from your account settings, which removes your personal information subject to the retention rules above.
• By request. Email privacy@narvin.iofrom the address associated with your account, with the subject line “Data deletion request.” We will verify your request and delete the relevant personal information, including any data received through the WhatsApp Business Platform, except where we are required to retain it by law.

We use cookies and similar technologies for three purposes: essential cookies that keep you signed in and remember your preferences; analytics cookies that help us understand how the Service is used; and advertising and measurement cookies.

Because we promote Narvinthrough Google Ads, we use Google’s advertising and measurement tools — including the Google Ads conversion tag and, where applicable, remarketing — to measure how our campaigns perform and to reach people who have visited our marketing site. Analytics and advertising cookies are non-essential and are set only with your consent where required; you can manage or withdraw consent at any time through our cookie controls or your browser settings, and you can opt out of personalized Google advertising at adssettings.google.com.

We do not use the information you provide as alert destinations — such as your WhatsApp number — or any data received through the WhatsApp Business Platform for advertising, and we never share it with advertising platforms.

The Service is intended for businesses and adults. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, contact us at privacy@narvin.io and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you through the Service. Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at: