Privacy Policy

NaviOrca ("we", "us", or "our") operates the NaviOrca platform available at www.naviorca.ai. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our service. By using NaviOrca, you agree to the practices described in this policy.

Account information: When you register, we collect your email address and password (stored securely via Supabase Auth).

Usage data: We collect information about how you use NaviOrca, including AI chat interactions, lead search queries, email drafts generated, and emails sent through our system.

Email connection data: When you connect a Gmail or Outlook account, we store OAuth tokens and the associated email address to enable sending on your behalf. We do not read, store, or analyze the content of your existing emails.

Lead data: We store the contact information (names, email addresses, company details, social profiles) that our AI discovers at your direction. This data is stored in your private NaviOrca account and is not shared with other users.

Payment information: Payments are processed by Creem.io. We do not store your credit card number or payment details on our servers.

We use the information we collect to:

• Provide, maintain, and improve the NaviOrca service
• Process AI-powered lead discovery and email generation on your behalf
• Send emails through your connected inbox as instructed by you
• Monitor system health, usage, and costs (aggregate, not individual review)
• Communicate with you about your account, billing, and service updates
• Enforce our Terms of Service and comply with legal obligations

We share data with the following third-party services strictly to operate NaviOrca:

• Supabase — database and authentication hosting
• Vercel — application hosting and deployment
• OpenRouter — AI language model API (your prompts are processed but not retained for training)
• Composio — external search and tool integrations
• Creem.io — payment processing
• Resend — transactional email delivery for login codes

We do not sell, rent, or share your personal data or lead data with any third party for marketing or advertising purposes.

We retain your account and product data for as long as your account is active. Chat history, lead data, and email logs older than 90 days may be archived or deleted to maintain system performance. You may request deletion of your account and associated data at any time by contacting us.

We implement industry-standard security measures including encrypted connections (TLS), row-level security policies in our database, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us at eric@naviorca.ai. We will respond within 30 days.

NaviOrca uses essential cookies for authentication session management. We do not use tracking cookies or third-party advertising cookies.

NaviOrca is not intended for users under 16 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of NaviOrca after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy, please contact us at eric@naviorca.ai.