Privacy Policy
Last updated June 17, 2026
This Privacy Policy explains how Datapad Inc. (“Datapad”, “we”, “us”), the company behind Narwhal, collects, uses, and protects your information. Narwhal is an AI operations platform where human and AI agents work across your connected business tools.
What information we collect
Registration details you provide (name, email, password); information you add about your company and team; the content you create in your workspace (files, tables, skills, automations, messages); data from the tools you connect through authorized OAuth; and technical data we collect automatically (IP address, browser, device, and cookies).
How we use your information
To operate and secure the platform, run the agents and automations you configure, provide customer support, communicate with you about the service, and improve our products. We do not sell your personal data.
How we share your information
We share data with vendors that help us run Narwhal — hosting and infrastructure, AI model providers, and our payment processor — strictly to deliver the service. We may disclose information if required by law, or in connection with a merger, acquisition, or sale of assets.
Connected accounts
Integrations use managed OAuth with scoped tokens. Agents act only with the permissions you grant, and you can disconnect any tool at any time to revoke that access. Workspace content is isolated per workspace, and access to it is restricted to authorized personnel for support and troubleshooting.
Data retention and security
We retain your information for as long as your account is active or as needed to provide the service and meet legal obligations. We protect it with industry-standard measures including encryption in transit, but no method of transmission or storage is completely secure. If a breach affects your personal data, we will notify you promptly.
International transfers
Narwhal is operated from the United States, and your information is processed and stored there. If you access the service from the EEA or UK, you understand your data is transferred to the United States.
Your rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. EEA/UK residents may lodge a complaint with their supervisory authority. California residents may request disclosure of the categories of data shared and exercise their rights under the CCPA. To make a request, contact us using the details below.
Children
Narwhal is intended for business use by adults. It is not directed to children, and we do not knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy from time to time. For material changes, we will provide notice before they take effect.
Contact
The data controller is Cem Roso, CEO. For privacy requests or questions, email hello@getnarwhal.ai or write to Datapad Inc., 651 N Broad St, Suite 206, Middletown, Delaware 19709, USA.