Overview
This Privacy Policy describes how NaviCS AI collects, uses, stores, discloses, and otherwise processes personal information in connection with the Services.
Information We Process
Depending on how the Services are used, information may include:
Account Information
- name;
- email address;
- organization information;
- authentication information;
- account and subscription information.
Customer and Business Data
Information submitted by customers through the Services may include:
- contact information;
- customer records;
- lead information;
- business records;
- communications;
- workflow information;
- documents and knowledge-base content.
Communications Data
Depending on enabled functionality:
- telephone numbers;
- call metadata;
- call events;
- call recordings;
- transcripts;
- communication content;
- communication outcomes.
Technical Information
We may process:
- IP address;
- browser and device information;
- authentication events;
- application logs;
- audit events;
- API activity;
- error and diagnostic information.
Billing Information
Payment-related information may be processed through applicable payment providers.
NaviCS AI may receive limited payment-related information necessary to maintain billing records and reconcile transactions.
How We Use Information
We may use information to:
- provide and operate the Services;
- authenticate users;
- maintain accounts;
- process transactions;
- execute workflows;
- operate Digital Employees;
- provide customer support;
- monitor platform performance;
- detect and prevent fraud or abuse;
- maintain security;
- troubleshoot failures;
- maintain audit records;
- comply with legal obligations;
- enforce contractual terms;
- improve the Services where permitted.
AI Processing
The Services may process customer-provided information through configured AI models and AI service providers.
The specific providers and processing arrangements applicable to a customer may depend on the configuration and service used.
Under legal review. Final description of model-provider processing, training restrictions, subprocessors, and customer-specific processing terms.
Telephony and Recording
Where voice functionality is enabled, the platform may process call metadata, audio, transcripts, and related events.
Recording functionality is subject to configuration, applicable consent requirements, and the Telephony / Voice Calling Policy.
Customers are responsible for ensuring that required notices and consents are obtained.
Legal Bases
Where applicable law requires a legal basis for processing, the applicable basis may include:
- performance of a contract;
- compliance with legal obligations;
- legitimate interests;
- consent;
- other legally recognized grounds.
Under legal review. Final jurisdiction-specific legal-basis mapping.
Data Sharing
Information may be shared with service providers and subprocessors that support the Services, including providers for:
- cloud infrastructure;
- telecommunications;
- AI processing;
- email and messaging;
- authentication;
- monitoring and security;
- payment processing;
- customer support.
The specific subprocessors applicable to the Services should be identified in the applicable subprocessor documentation.
Under legal review. Final subprocessor list and contractual status.
International Transfers
The Services may involve processing in multiple countries or regions depending on infrastructure and service-provider configuration.
Under legal review. Confirm actual processing locations, transfer mechanisms, and applicable cross-border transfer requirements before publishing definitive residency or transfer claims.
Data Security
NaviCS AI maintains technical and organizational measures intended to protect information against unauthorized access, disclosure, alteration, or destruction.
Certain sensitive credentials are encrypted at rest.
Security controls may differ depending on the information type and service configuration.
We do not represent that security measures eliminate all risk.
Data Retention
Information is retained for periods necessary to provide the Services, satisfy contractual requirements, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce agreements.
Under legal review. Final retention schedule and jurisdiction-specific retention periods.
Under legal review. NaviCS AI should not represent a specific universal retention period until the applicable retention schedule has been legally approved and technically enforced.
Deletion
Customers may have contractual or legal rights to request deletion of applicable personal information.
Deletion may be subject to:
- legal retention obligations;
- security and fraud-prevention requirements;
- accounting requirements;
- dispute resolution;
- technical backup cycles;
- other applicable obligations.
Under legal review. Final deletion workflow, timelines, exceptions, and customer-facing process.
Data Subject Rights
Depending on applicable law, individuals may have rights relating to their personal information, including rights to:
- access;
- correction;
- deletion;
- restriction;
- objection;
- portability;
- withdrawal of consent.
Requests may be submitted through the applicable privacy contact channel.
Under legal review. Final jurisdiction-specific rights and response process.
Children’s Privacy
The Services are intended for business use and are not directed toward children.
We do not knowingly seek to collect personal information from children in violation of applicable law.
Changes to this Privacy Policy
We may update this Privacy Policy periodically.
The current version will identify its effective date and version.
Material changes may be communicated through the Services or other reasonable means.
Contact
Privacy inquiries may be submitted through the official NaviCS AI privacy or legal contact channel.