Privacy Policy

Last updated: July 23, 2026

NavloAI ("we", "us", or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

    Summary: We collect only what we need to run the service. We do not sell your data. We do not share your conversations with third parties except to process them through AI models.
  

1. Information We Collect

Account information: Your name, email address, and password (stored as a secure hash) when you register.

Usage data: Messages you send, AI responses received, token counts, and credit usage. This is needed to operate the service and calculate costs.

Payment information: Payments are processed by Stripe. We never see or store your full card number. We receive confirmation of payment and the amount.

Technical data: IP address, browser type, and device information for security and debugging purposes.

2. How We Use Your Information

To provide and operate the NavloAI service
To process payments and manage your credit balance
To send transactional emails (password resets, payment confirmations)
To improve our AI routing and system performance
To detect and prevent fraud or abuse
To comply with legal obligations

3. AI Processing

Messages you send are processed by third-party AI providers (currently DeepSeek) to generate responses. These providers have their own privacy policies. We do not use your conversations to train AI models without your explicit consent.

4. Data Storage

Your account data and transaction history are stored in a secure PostgreSQL database hosted on Supabase (Frankfurt, EU). Chat history is stored locally in your browser and is not uploaded to our servers unless you explicitly use the knowledge base feature.

5. Data Sharing

We do not sell your personal data. We share data only with:

Stripe — for payment processing
DeepSeek — to process your AI queries
Resend — to send transactional emails
Law enforcement — only when required by law

6. Cookies

NavloAI uses browser localStorage (not cookies) to store your session token and preferences. We do not use tracking cookies or advertising pixels.

7. Data Retention

We retain your account data as long as your account is active. Transaction records are kept for 7 years for legal compliance. You may request deletion of your account and data at any time.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Object to certain processing of your data

To exercise these rights, contact us at support@navlo-ai.com.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and JWT tokens with short expiry times. No system is 100% secure — if you suspect unauthorized access, contact us immediately.

10. Children's Privacy

NavloAI is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us.

11. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email. Continued use after changes constitutes acceptance.

12. Contact

For privacy questions or data requests: support@navlo-ai.com