Privacy Policy

1. Overview

This Privacy Policy explains how Navo collects, uses, stores, shares, and protects information when you visit the Navo website, use public tools, create an account, join a workspace, submit financial records, communicate with us, or use the Navo application.

Navo is currently operated by Mohamad Beydoun, doing business as Navo. References to “Navo,” “we,” “us,” or “our” refer to the operator of the Navo service.

Navo is currently provided as a web application and may later be offered through official iOS and Android applications. This Privacy Policy will also apply to any official Navo mobile application that links to it.

2. Scope of this policy

This Privacy Policy applies to:

• The public Navo website.
• The Navo web application.
• Public financial calculators and preview tools.
• User registration and account authentication.
• Business, personal, and combined accounts.
• Workspace and team features.
• Customer, vendor, invoice, expense, and reporting features.
• Support, billing, demo-booking, and account communications.
• Future official Navo mobile applications that reference this policy.

This policy does not govern independent third-party websites, applications, payment services, or platforms that have their own privacy policies.

3. Information you provide directly

We may collect information that you provide when you register, configure your account, use the platform, submit forms, request support, book a demo, or communicate with Navo.

This information may include:

• Your name.
• Your email address.
• Your account type.
• Your password in securely hashed form.
• Your email-verification status.
• Your account, subscription, and trial status.
• Your business name and business details.
• Your workspace information and workspace role.
• Your support requests, feedback, and communications.
• Your legal-policy and age-eligibility confirmations.

4. Financial, business, and personal-finance information

Navo is designed to help users organize and understand business and personal financial information.

Depending on the features you use, Navo may process information such as:

• Business income and revenue.
• Personal income.
• Business and personal expenses.
• Invoices, invoice items, estimates, and payment statuses.
• Customers and customer contact information.
• Vendors, suppliers, and supplier bills.
• Recurring revenue.
• Bills, subscriptions, and recurring obligations.
• Financial goals and progress figures.
• Runway and readiness calculations.
• Baseline personal living costs.
• Safe-to-Quit and future Safe-to-Spend inputs.
• Founder draws and internal business-to-personal records.
• Reports, summaries, and financial-position calculations.

Navo does not currently require users to provide online-banking usernames or passwords, and Navo does not currently initiate bank transfers directly through the platform.

If bank-account connectivity, open-banking features, payment initiation, or other financial integrations are introduced later, this Privacy Policy and the relevant in-product disclosures will be updated before those features are made available.

5. Customer, vendor, employee, and third-party information

You may enter or import information concerning customers, vendors, suppliers, contractors, employees, workspace members, or other third parties.

This information may include:

• Names.
• Email addresses.
• Phone numbers.
• Business names.
• Billing and mailing addresses.
• Invoice and transaction information.
• Payment status.
• Notes and account-related records.

You are responsible for ensuring that you have a lawful basis and appropriate authority to provide and process third-party information through Navo.

We process this information only as necessary to provide, secure, maintain, and improve the service.

6. Technical, device, and usage information

We may automatically collect limited technical and usage information when you access Navo.

This may include:

• IP address.
• Browser type and version.
• Device type.
• Operating system.
• Language and general regional settings.
• Session and authentication activity.
• Login timestamps.
• Pages and features accessed.
• Referring pages.
• Error, performance, and security logs.
• Request metadata and application events.
• General usage patterns.

We use this information to operate the platform, maintain security, troubleshoot errors, investigate abuse, improve performance, and understand how the product is used.

7. Cookies and similar technologies

Navo uses cookies and similar technologies to maintain user sessions, authenticate accounts, protect forms, preserve necessary application state, prevent abuse, and support platform security.

Navo does not currently use third-party behavioral advertising cookies as part of its core service.

Additional details are provided in the Cookie Policy.

8. Public calculator information

Navo may provide public calculators or preview tools that process information entered by visitors.

Public calculator inputs may be processed to generate results during the active request or session.

Unless clearly stated otherwise, public calculator inputs are not automatically added to a Navo account.

If you later create an account, only information submitted during registration or through logged-in application features becomes associated with that account.

9. CSV imports and data exports

Navo intends to support importing and exporting financial and business records using CSV files and other supported formats.

When these features are available, imported files may contain customer, vendor, invoice, expense, product, service, supplier, payment, or transaction information.

Uploaded files may be temporarily stored and processed to validate, preview, map, reconcile, and import records.

Navo may also generate downloadable CSV files or other export packages when you request a copy of your data.

You are responsible for ensuring that imported files are accurate, lawfully obtained, free from malicious content, and limited to information you are authorized to process.

10. Payment and subscription information

Navo may offer Starter, Pro, Enterprise, or other paid plans.

Payments may initially be handled through supported manual or third-party payment methods, which may include Payoneer, Whish Money, OMT Pay, Neo, bank transfer, or another approved provider.

Navo may collect and retain limited payment-related information such as:

• The plan selected.
• The amount and currency.
• The payment method.
• The payment date.
• The transaction reference.
• A payment receipt or proof of payment.
• The payment-verification status.
• The subscription start and expiration dates.
• Refund, cancellation, and dispute information.

Navo does not intend to store complete debit-card or credit-card numbers.

External payment providers process payment information according to their own privacy policies, terms, and security requirements.

11. Demo bookings and Enterprise inquiries

Users and prospective Enterprise customers may book demos or submit inquiries through Navo or a third-party scheduling provider.

Information processed for this purpose may include your name, email address, company information, preferred meeting time, business requirements, and information you choose to include in the booking form.

Scheduling providers process information according to their own privacy policies and terms.

12. Email communications

We may use your email address to send service-related messages, including:

• Email-verification codes.
• Password-reset links.
• Security notifications.
• Workspace invitations.
• Invoice-delivery messages.
• Billing and payment-verification notices.
• Trial-expiration notices.
• Subscription and account-status notices.
• Support responses.
• Material updates to policies or service terms.

Some service communications are necessary to operate, protect, and administer your account and therefore may not be optional while your account remains active.

Promotional messages, if introduced, will be handled separately and will include any consent or unsubscribe mechanism required by applicable law.

13. How we use information

We may use information to:

• Create, authenticate, and manage user accounts.
• Verify email addresses.
• Provide password-reset and account-recovery features.
• Create and manage workspaces and workspace invitations.
• Provide invoicing, customer, vendor, expense, and reporting features.
• Generate financial summaries, forecasts, and calculations.
• Process data imports and exports.
• Generate and deliver invoices and reports.
• Administer trials, plans, payments, cancellations, and refunds.
• Review manually submitted payment evidence.
• Respond to support requests, feedback, and complaints.
• Schedule and conduct product or Enterprise demonstrations.
• Detect abuse, fraud, malware, unauthorized access, and security threats.
• Maintain, troubleshoot, test, and improve Navo.
• Enforce our Terms of Service and other policies.
• Comply with legal, accounting, and regulatory obligations.
• Protect Navo, its users, and third parties.

14. Legal bases where applicable

Depending on your location and the applicable law, Navo may process personal information because:

• Processing is necessary to provide the service you requested.
• Processing is necessary to perform or administer an agreement with you.
• Processing is required to comply with a legal obligation.
• Processing is necessary for legitimate business, security, or operational interests.
• You provided consent for a specific use.
• Processing is necessary to protect users, Navo, or others from fraud or harm.

Where processing depends on consent, you may withdraw that consent subject to applicable law and technical limitations.

15. Third-party service providers

Navo may rely on third-party providers for functions such as:

• Website and application hosting.
• Database hosting.
• Backups and infrastructure.
• Email delivery.
• Payment and transfer services.
• Scheduling and demo bookings.
• Error monitoring and security logging.
• File storage.
• Document and PDF generation.
• Analytics and product-performance measurement, if introduced.

These providers may process information only as necessary to perform services for Navo or as otherwise permitted by their own relationship with you.

Their handling of information is also governed by their own terms, privacy policies, security practices, and contractual obligations.

16. When we may share information

We may share information:

• With service providers that help operate Navo.
• With payment providers when processing or verifying payments.
• With email providers when delivering account or invoice messages.
• With scheduling providers when you book a demo.
• When required by law, legal process, court order, or lawful government request.
• To investigate fraud, abuse, security incidents, or policy violations.
• To protect the rights, property, safety, and security of Navo or others.
• In connection with a merger, financing, acquisition, reorganization, or sale of the Navo business.
• With your direction or consent.

Navo does not sell personal information in exchange for direct monetary payment.

Navo does not currently share personal information for cross-context behavioral advertising.

17. International data processing

Navo is operated from Lebanon and may serve users worldwide.

Navo and its service providers may process or store information in countries other than the country where you live.

Those countries may have privacy and data-protection laws that differ from the laws in your jurisdiction.

Where required, Navo will use reasonable contractual, organizational, and technical measures to protect information transferred internationally.

18. Data retention

We retain information only for as long as reasonably necessary to:

• Provide and maintain Navo.
• Administer active accounts, trials, and subscriptions.
• Maintain financial and payment records.
• Comply with legal, accounting, and tax obligations.
• Resolve disputes and payment claims.
• Prevent fraud and abuse.
• Investigate security incidents.
• Enforce our agreements.

Retention periods may differ depending on the type of information, account status, legal obligations, security requirements, and the purpose for which the information was collected.

Payment, refund, dispute, fraud-prevention, and audit records may be retained longer than ordinary account content where reasonably necessary.

19. Account deletion and the 30-day recovery period

You may request deletion of your Navo account through available account settings or verified support channels.

After an account is deleted, associated active account data may remain recoverable for up to 30 days before being permanently removed from active systems.

During this recovery period, Navo may be able to restore the account after verifying the identity and authority of the requester.

After the recovery period expires, active account content will be scheduled for permanent deletion, subject to legally required or permitted retention.

Backup copies may remain for a limited additional period until the relevant backup cycle expires.

Navo may retain limited records where required for legal, accounting, tax, payment-dispute, fraud-prevention, security, or regulatory purposes.

20. Data security

We use reasonable technical and organizational measures designed to protect information from unauthorized access, loss, misuse, disclosure, alteration, and destruction.

These measures may include:

• Password hashing.
• Authentication and access controls.
• Account and workspace authorization checks.
• Secure HTTPS connections in production.
• Cross-site request-forgery protection.
• Environment-based secret management.
• Database access restrictions.
• Audit logging.
• Security and error monitoring.
• Backups and recovery processes.

No online service, storage system, or transmission method can be guaranteed to be completely secure.

You are responsible for protecting your password, email account, device, and other credentials used to access Navo.

21. Your privacy rights

Depending on your location and applicable law, you may have the right to:

• Request information about how your personal information is processed.
• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of certain information.
• Request restriction of certain processing.
• Object to certain processing.
• Request a portable copy of certain information.
• Withdraw consent where processing is based on consent.
• Opt out of certain marketing communications.
• Submit a complaint to an applicable privacy or data-protection authority.

Privacy rights are not absolute and may be limited by applicable legal, accounting, security, fraud-prevention, contractual, or technical requirements.

Navo may need to verify your identity and authority before completing a privacy request.

22. How to submit a privacy request

You may submit a privacy request through the official support or contact channels published on the Navo website.

Please include enough information to help us identify:

• Your Navo account.
• The right or request you wish to exercise.
• The information or processing activity involved.
• Any relevant supporting details.

We may ask for additional verification information before providing, correcting, exporting, or deleting account information.

23. Workspace and business-account requests

Where information belongs to a business workspace, Navo may need to verify whether a requester is the workspace owner, an authorized administrator, an invited member, or an affected individual.

A business or workspace owner may control certain records processed through that workspace.

Individuals whose information was entered by a Navo business user may need to contact that business directly where the business, rather than Navo, determines how and why the information is processed.

24. Age eligibility and younger users

Navo requires users to confirm that they are at least 16 years old.

If the law in a user’s jurisdiction requires a higher minimum age or parental consent for online services, the user may access Navo only after satisfying those requirements.

Navo does not knowingly permit users who do not meet the applicable age requirement to maintain an account.

If we learn that an ineligible younger user submitted personal information, we will take reasonable steps to restrict the account and delete the information where required.

25. Future mobile applications

Future Navo iOS and Android applications may process additional technical information necessary to operate mobile features.

This may include:

• Device and application identifiers.
• Operating-system and app-version information.
• Authentication and security tokens.
• Crash reports and diagnostics.
• Push-notification tokens.
• App-store purchase or subscription metadata.
• Files selected for upload.
• Camera access where a receipt-scanning feature is introduced.
• Biometric-authentication status where supported and enabled.

Navo will request device permissions only when needed for an implemented feature.

Additional mobile-specific notices may be displayed inside the application or through the applicable app store.

26. Automated decision-making and artificial intelligence

Navo does not currently use artificial intelligence to make legal, credit, employment, investment, insurance, or similarly significant decisions about users.

Financial indicators, forecasts, readiness scores, and calculations currently shown by Navo are generated from user-provided data and defined application logic.

If Navo later introduces artificial-intelligence features or automated processing that materially affects users, this Privacy Policy and the relevant in-product disclosures will be updated.

27. Business transfers

If Navo is incorporated, reorganized, financed, merged, acquired, sold, or transferred, information may be disclosed or transferred as part of that transaction.

Any successor responsible for personal information will remain subject to applicable privacy obligations and any commitments communicated to users.

28. Changes to this policy

Navo may update this Privacy Policy when the product, technology, providers, payment methods, mobile applications, legal requirements, or business operations change.

The revised policy will display an updated effective date.

Where a change materially affects how registered-user information is collected, used, shared, or retained, Navo will make reasonable efforts to notify affected users by email or through the application.

29. Contact

Questions, requests, or concerns regarding this Privacy Policy may be submitted through the official support or contact channels published on the Navo website.

Navo is operated by Mohamad Beydoun, doing business as Navo, in Beirut, Lebanon.