Privacy Notice

1. Who we are

Navii Inc. ("Navii", "we", "us") operates the Navii startup validation workbook. Navii Inc. is the data controller for the personal data described in this notice.

2. What we collect

• Account data: first name, email address, and login credentials
• Workbook content: the answers and notes you enter while using the Service
• Support and waitlist messages: your name, email, and the content of your message
• Usage and device data: pages visited, approximate location, IP address, and device identifiers

Payment details are collected and processed by Paddle, our Merchant of Record; we do not see or store your card details.

3. Why we use it

• To create and manage your account (legal basis: performance of our contract with you)
• To provide the Service and sync your workbook across devices (contract)
• To keep the Service secure and prevent fraud (legitimate interests)
• To improve the product (legitimate interests)
• To respond to support and waitlist requests (legitimate interests / consent)
• To meet legal obligations, such as tax and accounting records (legal obligation)

4. Who we share it with

• Service providers that help us run the Service (hosting, database, analytics, support tooling)
• Paddle, our Merchant of Record, for the sale of the product, payments, tax compliance, and invoicing
• Professional advisers (legal, accounting) where needed
• Authorities where required by law

We do not sell your personal data.

5. Retention

We keep your data for as long as your account is active and as long as needed for the purposes above. When data is no longer needed, we delete or anonymise it. You can request deletion of your account at any time.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. You may also have the right to complain to your local data protection authority. To exercise any of these rights, contact us and we will respond within one month.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls that limit who can see your information.

8. Cookies

We use essential cookies and local storage to keep you signed in and to save your work. We do not use advertising or marketing cookies. You can clear cookies and site data in your browser settings, though signing in requires the essential ones.

9. Changes

If we change this notice, we will update the date above and, for significant changes, notify you by email or in the Service.