Last Updated: July 21, 2026

If you need to access this Privacy Policy in an alternative format due to having a disability, please contact support@nara.space.

Policy Statement and Scope

This Privacy Policy of NASD Inc., d/b/a Nara (“Nara,” “we,” “us,” or “our”) is designed to help you understand how we collect, use, disclose, and retain your personal information, and how you can exercise your privacy rights. This Privacy Policy applies to personal information processed by us on our websites (including www.nara.space), the creator storefronts we host (each, a “Storefront”), our creator tools and applications, and our other online and offline offerings (collectively, the “Services”).

Two Ways We Handle Personal Information: Our Role

The Services serve two groups of people, and our role differs between them. Please read this section first, because it determines which parts of this Privacy Policy apply to you and who is responsible for your information.

i.Creators and site visitors. If you are a content creator (or prospective creator) with a Nara account, or a visitor to our own websites, Nara decides how and why your personal information is processed, and this Privacy Policy applies fully to that processing. Under U.S. state privacy laws, Nara is the “controller” or “business” for this information.

ii.End Users on Creator Storefronts. If you visit or make a purchase on a Creator’s Storefront, the personal information collected about you through that Storefront in connection with your relationship with the Creator (such as your purchases, subscriptions, and communications with the Creator) is processed by Nara on the Creator’s behalf, as a “processor” or “service provider.” The Creator is responsible for its own use of that information and for its own privacy practices. If you submit a privacy rights request relating to a Creator’s use of your information, we will route your request to the Creator and assist in fulfilling it. Notwithstanding the foregoing, Nara acts as a controller of a limited set of End User information for the following purposes of its own (the “Platform Purposes”): securing the Services and preventing fraud and abuse; complying with law and enforcing our agreements; and creating de-identified or aggregated data to operate and improve the Services.

iii.Payment information. Payments on the Services are processed by Stripe, Inc. and its affiliates (“Stripe”). Nara does not collect or store full payment card numbers. Stripe processes your payment information under its own agreements and privacy policy, available at https://stripe.com/privacy.

Notice at Collection

At or before the time of collection, California residents have a right to receive notice of our privacy practices, including the categories of personal information collected, the purposes of collection and use, whether the information is “sold” or “shared,” and how long it is retained. That information is set forth in this Privacy Policy, including the “Supplemental Notice for California Residents” below. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Personal Information Collected

The categories of personal information we collect depend on whether you are a Creator or an End User, how you interact with the Services, and the requirements of applicable law.

i.Information Creators provide to us. Account and profile information (name, email address, telephone number, username, password); business information; and communications with us. Identity and business verification (know-your-customer) information, such as government-issued identification, date of birth, taxpayer information, entity formation and beneficial ownership information, and bank account details for payouts, is collected primarily by Stripe and processed as described in their privacy policies; we receive verification outcomes and limited associated information.

ii.Social media information about Creators. With the Creator’s authorization, we collect information relating to the Creator's accounts and public presence on social media platforms (Instagram, TikTok, YouTube, and X), including public profile information and analytics, publicly available content, and publicly available engagement information relating to the Creator's content (such as comments, likes, shares, and audience metrics). We obtain this information through third-party data providers (as of the date of this Privacy Policy, Phyllo Inc.) and, in the future, may obtain it directly through platform APIs. This information may incidentally include personal information of third parties who have interacted publicly with the Creator’s content (for example, the handle and content of a public comment). We use such information solely to provide the Services to the Creator, and we do not use it to build profiles of those third parties or make any decision about them.

iii.Information End Users provide to us. When you make a purchase (including as a guest), we collect your name, email address, billing and shipping information (excluding full card numbers, which go to Stripe), your order and transaction history, tips, and subscription status; your communications and refund requests; content you submit (comments, messages, reviews); and your interactions with AI-powered features on Storefronts, including chat transcripts.

iv.Information collected automatically. When you use the Services, we and our service providers automatically collect internet protocol (IP) address, device and browser information, cookie identifiers, approximate location derived from IP address, pages visited, links clicked, content interacted with, and other usage information. See “Cookies and Similar Technologies” below.

v.Information from other sources. We may receive information from Stripe (such as verification status and transaction records), from fraud prevention and identity verification providers, from the social media data providers described above, and from publicly available sources.

Artificial Intelligence Features

i.The Services include features powered by artificial intelligence, including large language models operated by third-party model providers (a current list of our model providers is available upon request). Information submitted to these features, including Creator content and social media information used to generate suggestions, and End User chat messages, is processed by these providers on our behalf as service providers, subject to contractual restrictions.

ii.No model training. We do not use your personal information or content to train generalized artificial intelligence models, and our agreements with our model providers prohibit them from using information we submit to train their models.

iii.Automated processing. AI features generate suggestions and content; they do not make decisions that produce legal or similarly significant effects about you without human involvement. Creators review and approve AI-generated content before it is published.

iv.AI-powered conversational features are identified as AI. Chat transcripts are retained as described in “Retention of Personal Information” below.

How We Use Personal Information

i.To provide the Services: managing accounts; verifying identity in accordance with applicable law; operating Storefronts; facilitating transactions, subscriptions, payouts, and refunds; generating AI-assisted suggestions and content for Creators; providing customer and technical support; and communicating about accounts, transactions, and policy changes.

ii.For administrative purposes: pursuing our legitimate interests, such as research and development, network and information security, and fraud prevention; detecting and preventing security incidents and malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible; measuring interest and engagement in the Services; improving the Services; quality control and safety; enforcing our agreements and policies (including the Acceptable Use Policy); auditing transactions and compliance activities; and complying with our legal obligations.

iii.Marketing. We may send Creators and prospective creators marketing communications about the Services, as permitted by applicable law. You can opt out of marketing emails using the unsubscribe link. We do not use End User information collected on Storefronts for Nara's own marketing.

iv.De-identified and aggregated information. We may create de-identified and/or aggregated information from personal information, and we commit to maintain and use such information in de-identified form and not to attempt to re-identify it, except as permitted by law to test de-identification.

How We Disclose Personal Information

We disclose personal information to the following categories of recipients for the following business purposes. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

i.Service providers. Third-party vendors that help us provide the Services under written contracts, including: Stripe (payment processing, identity verification, tax reporting); our artificial intelligence model providers (described above); Phyllo Inc. (social media data); cloud hosting and infrastructure providers; analytics providers; and communications and customer support tools.

ii.Creators. If you are an End User, information about your purchases, subscriptions, tips, communications, and Storefront interactions is made available to the Creator whose Storefront you use, as described in “Two Ways We Handle Personal Information” above. Creators are contractually restricted to using End User information to serve their relationship with their End Users and are prohibited from selling it or using it for off-platform targeted advertising.

iii.Business transfers. In connection with, or during negotiations of, any merger, sale of company assets, financing, reorganization, bankruptcy, receivership, or acquisition of all or a portion of our business, your information may be transferred as part of such a transaction, as permitted by law and/or contract.

iv.Legal and safety. To comply with applicable law and regulatory requirements; to respond to legal or governmental requests or demands for information; to enforce our agreements; and to protect the rights, property, or safety of you, us, or others, including sharing with law enforcement and reporting to the National Center for Missing & Exploited Children where required.

v.Affiliates. We may share personal information with corporate affiliates consistent with this Privacy Policy.

Cookies and Similar Technologies

i.We and our service providers use cookies, pixel tags, and similar technologies to operate the Services, remember preferences, measure usage, and support security. You can control cookies through your browser settings and, where offered, our cookie preference tools; if you disable cookies, parts of the Services may not work properly.

ii.We use analytics tools that may record how visitors interact with pages of the Services (sometimes called “session replay”), configured to mask keystrokes and form inputs and excluded from checkout and chat surfaces; where required by law, these tools operate only with your consent.

iii.Opt-out preference signals. We honor browser-based opt-out preference signals, such as the Global Privacy Control (GPC), as required by applicable law. Because we do not sell or share personal information, such signals do not change our practices today, but we will treat a GPC signal as a valid opt-out request where the law requires.

Your Privacy Rights and Choices

i.Depending on where you live, you may have the right to: confirm whether we are processing your personal information and access it (including in a portable format); correct inaccurate or incomplete personal information; delete your personal information; opt out of targeted advertising, “sales,” and certain profiling (noting that we do not engage in these activities); and appeal a decision declining to act on your request.

ii.To exercise these rights, contact us at legal@nara.space. We will verify your identity using reasonable means (such as confirming control of the email address associated with your account or purchase) before fulfilling a request, and we will respond within the time required by applicable law. You may use an authorized agent by providing written authorization signed by you; we may still verify your identity directly.

iii.If your request relates to a Creator’s use of your information (for example, deletion of your purchase relationship with a specific Creator), we will route the request to that Creator and assist in its fulfillment, as described in “Two Ways We Handle Personal Information” above.

iv.Email and text communications. You can opt out of marketing emails via the unsubscribe link and of marketing texts by following the instructions in the message. You will continue to receive transaction-related communications (such as receipts and renewal reminders) regarding Services you have requested.

Supplemental Notice for California Residents

i.This section supplements this Privacy Policy for California residents under the California Consumer Privacy Act, as amended (“CCPA”). In the preceding twelve (12) months, we have collected the following categories of personal information: identifiers (e.g., name, email, IP address); personal information categories listed in Cal. Civ. Code § 1798.80(e) (e.g., contact and transaction information); commercial information (e.g., purchase histories); internet or other electronic network activity information; approximate geolocation (from IP address); audio, electronic, or visual information (e.g., content you submit; chat transcripts); professional information (Creators); and inferences used to provide the Services to Creators. We collect sensitive personal information (e.g., government identifiers collected by our verification providers) only for the purposes permitted by CCPA regulations, such as verifying identity, preventing fraud, and complying with law, and we do not use it to infer characteristics.

ii.We disclose the categories above to the categories of recipients described in “How We Disclose Personal Information” for business purposes. We do not sell personal information, we do not share personal information for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the personal information of consumers under sixteen (16) years of age.

iii.California residents have the rights described in “Your Privacy Rights and Choices,” the right to limit certain uses of sensitive personal information (which we do not use beyond permitted purposes), the right to non-discrimination for exercising their rights, and rights under California’s “Shine the Light” law to request a list of third parties to whom we have disclosed personal information for their direct marketing purposes (we do not make such disclosures).

Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Purchases on the Services are limited to individuals 18 and older. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at legal@nara.space, and if we become aware that we have collected personal information from a child under 13, we will promptly delete it unless we have a legal obligation to keep it.

Retention of Personal Information

We retain personal information for as long as needed for the purposes for which it was collected, and thereafter as needed for legal, tax, accounting, fraud prevention, or dispute resolution purposes. In general: account and profile information is retained for the life of the account plus two (2) years; transaction records are retained for at least seven (7) years to satisfy tax and accounting requirements; identity verification records are retained as required by our payment and verification partners and applicable law; AI chat transcripts are retained for twelve (12) months unless needed longer for the purposes above; and usage logs are retained for shorter operational periods. When retention ends, we delete or de-identify the information. Use of and access to personal information is restricted to personnel who have a business reason for access.

Security

We use physical, administrative, and technical safeguards designed to protect personal information, and we require our service providers to do the same. No system is completely secure; please notify us immediately at support@nara.space if you believe your account or information has been compromised.

International Users; Third-Party Links

i.The Services are operated from the United States and are directed to U.S. users. If you access the Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction.

ii.The Services may contain links to websites and services that we do not control, including Creators’ own websites and social media pages. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. Please review the privacy policies of third-party services before providing personal information to them.

Changes to this Privacy Policy

We may change this Privacy Policy from time to time to reflect changes in our practices or in applicable law. If we make material changes, we will notify you as required by applicable law (for example, by email to Creators and prominent notice on the Services) before the changes take effect.

Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, need this Privacy Policy in an alternative format, or wish to exercise your rights, contact us at legal@nara.space or by mail at NASD Inc. (d/b/a Nara), 1919 14th Street, Suite 700, Boulder, CO 80302.