Legal1. Introduction
Welcome to Nava ("we," "our," "us," or "Company"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit and interact with our website, mobile applications, and related services (collectively, the "Service"). Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service.
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide to us, including:
- Account Information: Name, email address, phone number, username, password, and profile information
- Communication Data: Messages, feedback, comments, and inquiries you send us
- Transaction Information: Payment details, billing address, and purchase history (processed securely through third-party payment providers)
- Support Requests: Information you provide when contacting our customer support team
2.2 Information Collected Automatically
When you access our Service, we automatically collect certain information:
- Device Information: Device type, operating system, browser type, and unique device identifiers
- Usage Data: Pages visited, features accessed, time spent, clicks, and interactions with our Service
- Log Data: IP address, access time, and referring website
- Location Data: Approximate location based on IP address (we do not collect precise GPS data without consent)
3. How We Use Your Information
We use the information we collect for various purposes:
- Service Delivery: Providing, maintaining, and improving our Service
- Account Management: Creating and managing your account, authentication, and verification
- Communication: Responding to inquiries, sending updates, announcements, and customer support
- Analytics: Analyzing usage patterns to improve functionality and user experience
- Marketing: Sending promotional materials and newsletters (with your consent)
- Security: Protecting against fraud, unauthorized access, and other security threats
- Legal Compliance: Complying with applicable laws, regulations, and legal processes
- Business Operations: General business purposes, aggregated analytics, and service optimization
4. Information Sharing and Disclosure
We do not sell your personal information. However, we may share your information in the following circumstances:
4.1 Service Providers
We share information with trusted third-party service providers who assist us in operating our Service, including:
- Payment processors and financial institutions
- Cloud hosting and storage providers
- Analytics providers
- Communication and email service providers
- Customer support platforms
These service providers are contractually obligated to use your information solely to provide services to us and maintain confidentiality.
4.2 Legal Requirements
We may disclose your information when required by law or when we believe in good faith that disclosure is necessary to:
- Comply with applicable laws, regulations, or legal processes
- Enforce our Terms of Service and other agreements
- Protect the security or integrity of our Service
- Protect the rights, privacy, safety, or property of Nava, users, or the public
4.3 Business Transfers
If Nava is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
4.4 Aggregated and Anonymized Data
We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.
5. Data Security
We implement appropriate technical, administrative, and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption (in transit and at rest): Scrambling sensitive data into an unreadable format both while it is being transmitted across networks and while it is stored on servers.
- Secure authentication protocols: Utilizing robust verification methods, such as complex passwords or multi-factor authentication, to confirm a user's identity before granting access.
- Access controls and role-based permissions: Restricting system and data access so that individuals can only view or modify the specific information necessary for their job functions.
- Regular security audits and assessments: Routinely inspecting and testing systems to proactively identify and fix vulnerabilities before they can be exploited.
- Employee training on data protection practices: Educating staff on security policies, safe data handling, and how to recognize common cyber threats to minimize human error.
However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information only as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy.
- Account Information: Retained while your account is active and for a reasonable period thereafter for legal and business purposes
- Transaction Data: Retained for the period required by law for accounting and tax purposes
- Communication Records: Retained as needed to provide support and resolve disputes
- Marketing Data: Retained until you unsubscribe or opt-out
You may request deletion of your personal information at any time, subject to legal and contractual obligations.
7. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
7.1 Right to Access
You have the right to request access to the personal information we hold about you.
7.2 Right to Rectification
You have the right to request correction of inaccurate or incomplete personal information.
7.3 Right to Erasure
You have the right to request deletion of your personal information, subject to certain legal exceptions.
7.4 Right to Data Portability
You may have the right to receive your personal information in a structured, commonly-used, and machine-readable format.
7.5 Right to Opt-Out
You have the right to opt-out of marketing communications by clicking the "Unsubscribe" link in our emails or adjusting your notification preferences in your account settings.
7.6 Right to Restrict Processing
You have the right to request that we restrict the processing of your personal information under certain circumstances. This means you can ask us to pause the use of your data, for example, while we verify the accuracy of the information or if you have contested our processing of it based on legitimate interests.
7.7 Right to Object
You have the right to object to the processing of your personal information at any time, particularly when we process your data based on our legitimate interests or for direct marketing purposes. If you object, we will stop processing your personal information for those specific purposes unless we can demonstrate compelling legitimate grounds that override your interests.
7.8 Right Related to Automated Decision-Making and Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. You may request human intervention, express your point of view, and contest decisions made through automated systems.
To exercise any of these rights, please contact us using the information provided in Section 11.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies (such as pixels, web beacons, and local storage) to:
- Remember your preferences and login information
- Understand how you use our Service
- Provide personalized content and advertisements
- Analyze traffic and improve our Service
| Cookie Type | Purpose | Retention Period | Examples |
|---|---|---|---|
| Essential / Strictly Necessary | Required for core site functionality, navigation, and security features | Session (deleted when browser closes) | Session ID, CSRF token |
| Functional / Preference | Remember your preferences, settings, and login state to personalise your experience | Up to 1 year | Language, theme, login state |
| Analytics / Performance | Collect anonymised usage data to help us understand how users interact with our Service | Up to 2 years | Google Analytics, Mixpanel |
| Marketing / Targeting | Track browsing activity across sites to deliver relevant advertisements | Up to 2 years | Ad pixels, retargeting tags |
You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Service. The table below sets out the types of cookies we use and their typical retention periods:
9. Children's Privacy
Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.
If you believe we have collected information from a child, please contact us immediately at the address provided in Section 11.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Your continued use of our Service following the posting of an updated Privacy Policy means you accept and agree to the changes.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Nava
Response Time: We will respond to your inquiry within 30 days of receipt.
12. Additional Information for Specific Jurisdictions
Depending on your location, additional rights and protections may apply. For information specific to your jurisdiction, please refer to any supplementary privacy notices or contact us directly.
This Privacy Policy is effective as of March 26, 2026. It is recommended that you review this policy with legal counsel to ensure it complies with all applicable laws and regulations in your jurisdiction, and customize it based on nava's specific data practices and services.
Built by experts
