Privacy Policy

Privacy Policy

Effective Date: May 11, 2026

Narwhale respects your privacy. This Privacy Policy explains how Narwhale collects, uses, protects, and handles information when you visit our website, contact us, request access, communicate with us, or use Narwhale-related services.

For purposes of this Privacy Policy, “Narwhale,” “we,” “us,” and “our” refer to Narwhale and its website, applications, communications, account tools, payment-related tools, and related services.

1. Our Privacy Commitment

Narwhale is built around trust, privacy, security, and responsible handling of user information.

Narwhale does not sell user information.

Narwhale does not rent user information.

Narwhale does not market user information.

Narwhale does not monetize user information.

Narwhale does not share user information, mobile information, SMS consent information, transaction-related information, account metadata, communication metadata, behavioral metadata, security metadata, or operational metadata with advertisers, data brokers, lead generators, marketing companies, or third parties for advertising, marketing, promotional, lead generation, data resale, profiling, or unrelated commercial purposes.

Narwhale uses information only to operate, secure, support, provide, improve, and protect Narwhale-related services, or as required by law.

2. Information We May Collect

Depending on how you interact with Narwhale, we may collect the following categories of information.

Contact Information

We may collect your name, email address, phone number, business name, organization name, mailing address, and other information you provide when you contact us, request information, request access, or communicate with Narwhale.

Account Information

If you create or request access to a Narwhale account, we may collect account registration information, login information, authentication information, user identifiers, account status, profile information, and related account records.

Identity and Verification Information

For certain services, Narwhale may collect information needed to verify identity, confirm account access, prevent fraud, comply with legal requirements, or meet requirements of payment, banking, compliance, or security partners.

Business and Organization Information

If you use or request Narwhale for a business, merchant, club, association, nonprofit, event, utility, HOA, or other organization, we may collect information about the organization, authorized representatives, ownership, contact details, business purpose, and related account information.

Payment-Related Information

Narwhale may collect or process payment-related information needed to support payment requests, account activity, service notifications, balance-related information, transaction records, funding activity, settlement activity, merchant activity, organization activity, or related services.

Certain banking, ACH, card, wallet, identity verification, fraud prevention, and payment processing functions may be handled by regulated financial institutions, payment processors, banking partners, compliance providers, or other service providers.

Communications Information

If you contact Narwhale, we may collect the content of your communication, your contact details, the date and time of the communication, and information needed to respond to you.

SMS and Mobile Messaging Information

If you opt in to receive SMS or mobile messages from Narwhale, we may collect your mobile phone number, SMS consent status, opt-in date, opt-in method, message history, delivery status, opt-out status, and related messaging records.

Website and Technical Information

When you visit our website, we may collect limited technical information such as IP address, browser type, device type, operating system, pages visited, date and time of visit, referring page, cookie information, and basic website usage information.

Metadata

Narwhale may generate or process metadata necessary to operate and secure the service. Metadata may include authentication records, login activity, timestamps, account activity, message delivery information, request status, payment request status, transaction reference data, device information, fraud-prevention signals, security logs, operational logs, and system activity records.

Narwhale does not sell, rent, market, monetize, disclose, or share metadata for advertising, lead generation, data resale, third-party profiling, or unrelated promotional purposes.

3. How Narwhale Uses Information

Narwhale may use information for the following purposes:

To operate, provide, and maintain Narwhale services.

To respond to inquiries and support requests.

To process access requests.

To create, verify, secure, and manage accounts.

To authenticate users and protect account access.

To send service-related communications.

To send account access codes, authentication messages, support messages, security notices, payment-related notifications, and service updates.

To support payment-related activity.

To maintain records of account activity, payment requests, messages, consent, support communications, and related activity.

To detect, prevent, and investigate fraud, abuse, unauthorized access, suspicious activity, or security incidents.

To comply with applicable laws, regulations, legal requests, audits, reporting obligations, compliance obligations, and partner requirements.

To improve the reliability, security, and performance of Narwhale services.

To enforce Narwhale terms, policies, and agreements.

Narwhale does not use user information, mobile information, SMS consent data, payment-related information, account metadata, communication metadata, behavioral metadata, or operational metadata for third-party advertising, third-party marketing, third-party lead generation, data resale, or unrelated promotional purposes.

4. SMS Privacy Notice

Narwhale may send SMS messages related to two-factor authentication codes, verification codes, account access codes, authentication messages, customer support, payment-related notifications, security notices, service updates, and other Narwhale-related communications.

Message frequency may vary. Message and data rates may apply. Reply STOP to opt out. Reply HELP for help.

Narwhale does not sell, rent, share, trade, disclose, transfer, market, or otherwise make available mobile phone numbers, SMS opt-in data, SMS consent status, or text messaging originator opt-in data to third parties or affiliates for marketing, promotional purposes, lead generation, advertising, profiling, or data resale.

All categories of information described in this Privacy Policy exclude text messaging originator opt-in data and consent. SMS opt-in data and consent will not be shared with any third party, except as necessary to provide the messaging service, comply with law, prevent fraud or abuse, maintain security, or enforce Narwhale’s rights.

5. Service Providers

Narwhale may use service providers to help operate the website, hosting, security, communications, SMS delivery, account access, analytics, support, fraud prevention, identity verification, compliance, payment processing, banking connections, or related services.

Service providers may process limited information only as needed to provide services to Narwhale.

Narwhale does not permit service providers to use Narwhale user information, mobile information, SMS consent information, payment-related information, or metadata for their own advertising, marketing, lead generation, data resale, or unrelated commercial purposes.

6. Payment, Banking, and Compliance Partners

Narwhale may work with banks, payment processors, ACH providers, card networks, identity verification providers, fraud prevention providers, compliance providers, regulated financial institutions, or other service providers.

These partners may require certain information to provide payment-related services, verify identity, prevent fraud, comply with applicable law, complete transactions, or satisfy regulatory obligations.

Narwhale limits information sharing with these partners to what is reasonably necessary for those purposes.

Narwhale does not authorize payment, banking, or compliance partners to use Narwhale user information for unrelated marketing, advertising, lead generation, profiling, or resale.

7. Legal and Safety Disclosures

Narwhale may disclose information when reasonably necessary to:

Comply with law, regulation, subpoena, court order, legal process, or government request.

Protect the rights, safety, property, or security of Narwhale, users, service providers, partners, or others.

Detect, prevent, or investigate fraud, abuse, security incidents, unauthorized activity, or unlawful conduct.

Enforce Narwhale terms, agreements, and policies.

Respond to disputes, claims, audits, compliance obligations, or regulatory inquiries.

Narwhale will not disclose more information than reasonably necessary for these purposes.

8. Cookies and Website Technologies

Narwhale may use cookies, pixels, scripts, logs, or similar technologies to operate the website, improve performance, understand basic website activity, protect the website, and maintain security.

Narwhale does not use cookies or website technologies to sell, rent, market, or disclose user information to third-party advertisers or data brokers.

You may be able to disable cookies through your browser settings. Some website features may not work properly if cookies are disabled.

9. Data Security

Narwhale uses reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

No website, application, network, system, or method of electronic storage or transmission can be guaranteed to be completely secure. Narwhale cannot guarantee absolute security, but Narwhale is committed to maintaining strong security practices appropriate to the nature of the information handled.

10. Data Retention

Narwhale retains information only as long as reasonably necessary for the purposes described in this Privacy Policy, including to operate services, provide support, maintain records, comply with legal obligations, prevent fraud, resolve disputes, enforce agreements, and protect security.

Retention periods may vary depending on the type of information, the nature of the service, legal requirements, partner requirements, and operational needs.

11. Your Choices

Depending on your relationship with Narwhale and applicable law, you may request to:

Access certain information Narwhale maintains about you.

Correct inaccurate information.

Update contact information.

Opt out of SMS messages.

Request deletion of certain information.

Ask questions about how your information is handled.

Some information may need to be retained for legal, regulatory, payment, accounting, fraud prevention, security, dispute resolution, or compliance purposes.

12. SMS Opt-Out

You may opt out of Narwhale SMS messages at any time by replying STOP.

After you opt out, Narwhale may send a confirmation message confirming that you have been unsubscribed. After that, you should no longer receive SMS messages from Narwhale unless you opt in again.

You may reply HELP for help.

13. Children’s Privacy

Narwhale services are not intended for children under 13. Narwhale does not knowingly collect personal information from children under 13.

If Narwhale learns that it has collected personal information from a child under 13, Narwhale will take appropriate steps to delete that information.

14. Third-Party Links

The Narwhale website or services may contain links to third-party websites, services, or tools. Narwhale is not responsible for the privacy practices, terms, security, or content of third-party websites or services.

15. Business Transfers

If Narwhale is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to applicable law and appropriate confidentiality and privacy protections.

Narwhale will not sell user information, mobile information, SMS consent information, payment-related information, or metadata as a standalone asset to advertisers, data brokers, lead generators, or marketing companies.

16. Changes to This Privacy Policy

Narwhale may update this Privacy Policy from time to time.

If Narwhale makes material changes, Narwhale may update the effective date and provide notice as appropriate.

Your continued use of Narwhale services after an updated Privacy Policy becomes effective means you accept the updated policy.

17. Contact Narwhale

For privacy questions, requests, or concerns, contact Narwhale at:

Narwhale
Columbus, Ohio
Phone: 614.531.4028
Email: privacy@narwhale.com