NavaNex Privacy Notice

Last Modified: December 10, 2025

Effective Date: December 10, 2025


When you use NavaNex, you trust us with your personal data. We're committed to keeping that trust. That starts with helping you understand our privacy practices.

This notice describes the personal data ("data") we collect, how it's used and shared, and your choices regarding this data.


Table of Contents


I. Overview

Scope

This notice applies when you use NavaNex's apps, websites, or services, whether you are renting equipment or providing delivery services.

This notice describes how we collect and use your data when you use NavaNex's platform for autonomous lawn mowing equipment rental and delivery services.

This notice specifically applies if you:

  • Rent Equipment through the NavaNex platform as a Customer
  • Provide, or start or complete an application to provide, delivery and logistics services through the NavaNex platform as a Delivery Partner (also referred to as "Driver")
  • Use our websites or mobile applications to access any NavaNex services

Those who use NavaNex to either request, receive, or provide services are collectively referred to as "users" in this notice.

Geographic Scope

Our privacy practices are subject to applicable laws in the places in which we operate. The Services are currently available in:

  • Malaysia
  • United States
  • Singapore

The types of data processing that such laws require, allow, or prohibit vary globally. Therefore, if you access NavaNex's services from different jurisdictions, our data processing practices described in this notice may differ based on local requirements.

Regional Privacy Rights

In addition, please note the following if you use NavaNex in:

United States:

  • California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). See Section IV for details.
  • Residents of Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws may have additional rights.

Malaysia:

  • Your data is processed in accordance with the Personal Data Protection Act 2010 (PDPA).

Singapore:

  • Your data is processed in accordance with the Personal Data Protection Act 2012 (PDPA).

European Economic Area (EEA), United Kingdom (UK), and Switzerland:

  • If you access our services from these regions, additional protections under the General Data Protection Regulation (GDPR) and equivalent laws apply.

Please contact us at support@navanex.ai with any questions regarding our practices in a particular country or region.


II. Data Collections and Uses

A. The Data We Collect

NavaNex collects data:

  1. That you provide
  2. When you use our services
  3. From other sources detailed below

1. Data You Provide

This includes:

Data CategoryData Types
a. Account InformationFirst and last name
We collect data when you create or update your NavaNex account.Email address
Phone number
Physical address (for deliveries)
Profile picture
Login credentials (password stored securely via AWS Cognito)
Payment method information
Communication preferences
Currency and locale preferences
b. Delivery Partner Application InformationAll Customer account information, plus:
This includes information submitted during the Delivery Partner application process.Date of birth
Government-issued photo ID (driver's license)
Driver's license number and expiration date
Vehicle information (make, model, year, license plate)
Vehicle registration documents
Proof of insurance (provider name, policy number, documents)
Bank account information (for earnings disbursement)
Social Security Number or Tax ID (for tax reporting, US only)
c. Background Check InformationInformation submitted to our background check provider (Checkr), including:
Required for Delivery Partner eligibility.Criminal history (where permitted by law)
Driving record
Identity verification results
d. Demographic DataDate of birth (to verify age eligibility)
We collect demographic data if necessary to enable certain features or verify eligibility.
e. Identity Verification InformationGovernment-issued identification documents (driver's license, passport)
This refers to data we collect to verify your account or identity.User-submitted profile photos
Document images for verification
f. User ContentRatings and feedback you provide about Delivery Partners, equipment, or service
This refers to data we collect when you upload content or provide feedback.Photos uploaded for customer support or to document equipment condition
Communications with customer support
Survey responses

2. Data Collected When You Use Our Services

This includes:

Data CategoryData Types
a. Location DataFor Customers:
Delivery address (converted to latitude/longitude for routing)
Approximate location when browsing available services
For Delivery Partners:
Precise GPS location during active deliveries (collected continuously while the app is in use)
Location history for completed deliveries
Route information between pickup and delivery points
b. Order and Rental InformationEquipment rental details (type, duration, dates)
This refers to the details we collect about your orders and rentals.Delivery and pickup addresses
Order history and status
Subscription details and billing cycle
Rental period information
Equipment condition at delivery and return
For Delivery Partners:
Earnings and transaction history
Delivery statistics (completed deliveries, acceptance rate, ratings)
Availability status
c. Usage DataApp features or pages viewed
This refers to data about how you interact with NavaNex's apps and websites.Access dates and times
App crashes and error logs
Search queries
Interactions with notifications
d. Device DataDevice type and model
This refers to data about the device(s) you use to access NavaNex.Operating system and version
Device identifiers
IP address
Mobile network information
Browser type (for web access)
Preferred language settings
e. Communications DataChat messages between Customers and Delivery Partners
This refers to data we collect when you communicate through our platform.Customer support inquiries and responses
Communication timestamps
Call logs (duration, not content, unless recorded with notice)
f. Payment and Transaction DataPayment method type (card, bank transfer, digital wallet)
This refers to financial data associated with your transactions.Transaction amounts and currency
Payment status and history
Refund information
For Delivery Partners:
Earnings ledger
Withdrawal history
Bank account details (last 4 digits displayed, full details stored securely by Stripe)

3. Data From Other Sources

These include:

Data CategoryData Types
a. Background Check ProvidersBackground check status and results
We receive data from Checkr for Delivery Partner verification.Driving record information
Identity verification results
b. Payment ProcessorsPayment confirmation and status
We receive data from Stripe regarding payment transactions.Fraud detection signals
Saved payment method information
Bank account verification status (for Delivery Partners)
c. Authentication ProvidersAccount information from Google or Apple when you sign in using those services
If you create or access your account using Google or Apple Sign-In.Email address
Name (if provided by the authentication provider)
d. Users or Others Providing InformationReports or feedback about you from other users
Evidence relating to equipment damage, disputes, or claims
Referral information (if you were referred by another user)

B. How We Use Data

NavaNex uses data to enable reliable and convenient equipment rental and delivery services. We also use data:

  • To enhance the safety and security of our users and services
  • To prevent and detect fraud
  • For customer support
  • For research and development
  • To send non-marketing communications to users
  • In connection with legal proceedings

1. To Provide Our Services

NavaNex uses data to provide, personalize, maintain, and improve our services.

Data UsesData Used Includes
a. Creating and updating your accountAccount information
Demographics
Identity verification information
b. Enabling services and features, including:Account information
- Processing equipment rental requestsLocation data
- Matching Customers with available Delivery PartnersDevice data
- Enabling navigation to delivery and pickup locationsOrder/rental information
- Calculating ETAs and tracking delivery progressUser content
- Enabling subscription management
- Processing recurring deliveries
c. Calculating prices and feesAccount information
For Customers: rental fees, delivery fees, taxesLocation data
For Delivery Partners: earnings calculationsOrder/rental information
Transaction data
d. Processing payments, including:Account information
- Charging for rentals and subscriptionsPayment data
- Processing refundsTransaction history
- Disbursing Delivery Partner earningsBank account information (Delivery Partners)
- Managing saved payment methods
e. Personalizing your experience, including:Account information
- Showing relevant equipment and servicesLocation data
- Remembering your preferencesOrder history
- Pre-filling delivery addressesUsage data
f. Generating receipts and order confirmationsAccount information
Order/rental information
Payment data
g. Informing you of changes to our terms, services, or policiesAccount information
Contact information
h. Performing necessary operations to maintain our services, including troubleshooting software bugs and operational problemsDevice data
Usage data
Error logs

2. For Safety, Security, and Fraud Prevention

We use your data to help maintain the safety and security of our services and users.

Data UsesData Used Includes
a. Verifying your account, identity, and compliance with NavaNex's terms, safety requirements, and Community Guidelines, including:Account information
- Running background and driving record checks for Delivery PartnersBackground check data
- Verifying government-issued identification documentsIdentity verification information
- Confirming phone and email ownershipGovernment-issued ID
- Verifying insurance and vehicle registration (Delivery Partners)Location data
User content
b. Preventing, detecting, and combating fraud, including:Account information
- Detecting duplicate or fake accountsDevice data
- Identifying potentially fraudulent payment activityIdentity verification information
- Preventing account takeoversPayment data
- Detecting altered or false document submissionsUsage data
c. Monitoring for safety incidentsLocation data
- Tracking Delivery Partner location during deliveriesOrder/rental information
- Enabling GPS tracking for equipment recovery if unreturnedCommunications data
- Identifying unusual activity patternsUser content

3. For Customer Support

Data UsesData Used Includes
Investigating and addressing user questions and concerns, including:Account information
- Resolving order or delivery issuesCommunications data
- Processing refund requestsOrder/rental information
- Addressing equipment damage claimsLocation data
- Responding to account inquiriesUser content
- Investigating reported misconductDevice data

4. For Research and Development

Data UsesData Used Includes
We use data for analysis, research, and product development, including:Account information
- Improving our matching algorithmsLocation data
- Enhancing delivery routingOrder/rental information
- Developing new features and servicesUsage data
- Testing and troubleshooting new productsDevice data
- Analyzing service performanceUser content (anonymized)

5. For Non-Marketing Communications

Data UsesData Used Includes
This includes:Account information
- Service announcements and updatesContact information
- Order and delivery notificationsOrder/rental information
- Safety alerts
- Account security notifications
- Terms of Service or Privacy Policy updates

6. For Legal Proceedings and Requirements

Data UsesData Used Includes
We use data to:Account information
- Investigate or address claims or disputes relating to use of NavaNex's servicesCommunications data
- Satisfy requirements under applicable laws, regulations, or insurance policiesOrder/rental information
- Respond to legal process or governmental requests, including from law enforcementLocation data
- Enforce our Terms of ServicePayment data
User content

C. Core Automated Processes

NavaNex uses automated processes to enable certain parts of our services, including functions essential to our business such as matching, pricing, safety, and fraud detection and prevention.

These processes allow NavaNex to provide a seamless and safe experience to users. This section describes how these automated processes work, including how they impact your NavaNex experience and the personal and non-personal data used to enable them.

You may contact NavaNex at support@navanex.ai if you have questions or concerns regarding these processes.

1. Matching

NavaNex uses algorithms to efficiently match Customers requesting equipment delivery with available Delivery Partners.

How it works:

The matching process is triggered when a Customer places an order for equipment rental and delivery. Our algorithms evaluate various factors to determine the best available Delivery Partner for a given delivery request, including:

  • The Delivery Partner's current location and proximity to the equipment pickup point
  • The delivery destination
  • Traffic conditions and estimated travel time
  • Delivery Partner availability status
  • Historical delivery performance data
  • Future reservation data

The delivery request is then communicated to matched Delivery Partners. Once a delivery is accepted, we send confirmation to both the Delivery Partner and the Customer.

We continually refine our matching process to provide the best experience to all users on our platform.

2. Pricing

When you rent equipment or provide delivery services, NavaNex uses algorithms to determine pricing.

For Customers:

Rental prices and delivery fees are calculated based on factors including:

  • Equipment type and rental duration
  • Delivery distance and location
  • Current demand and availability
  • Applicable taxes and surcharges
  • Any promotional offers or discounts applied

For Delivery Partners:

Earnings are calculated based on factors including:

  • Base delivery fee
  • Distance traveled
  • Time spent on delivery
  • Any applicable bonuses or incentives
  • NavaNex's service fees (which are subtracted from gross earnings)

3. Safety, Security, and Fraud Prevention

NavaNex uses algorithms to help prevent and detect safety incidents or fraud against NavaNex or our users.

Verification processes:

  • Document verification: We use automated tools to validate that government-issued identification documents submitted by Delivery Partners are valid, unaltered, and not associated with any other account.
  • Account security: We monitor for signs of account takeovers, unauthorized access, and suspicious login activity.
  • Payment fraud detection: We analyze payment patterns to identify potentially fraudulent transactions.

Fraud detection:

We use automated processes to identify patterns that may indicate fraudulent or unsafe behavior, including:

  • Detecting duplicate accounts or attempts by previously deactivated users to create new accounts
  • Identifying altered or fraudulent document submissions
  • Monitoring for unusual transaction patterns

Consequences:

If automated processes flag potential fraud or safety concerns, your account may be subject to additional review, restrictions, or deactivation. If your account is deactivated, you have the right to appeal. Please contact customer support for more information on the appeal process.


D. Cookies and Related Technologies

NavaNex and its partners use cookies and other online identifiers on our apps, websites, and online services for purposes described in this notice.

What Are Cookies?

Cookies are small text files that are stored on browsers or devices by websites, apps, online media, and ads. NavaNex uses cookies and similar technologies for purposes such as:

  • Authentication: Recognizing you when you sign in to use our services
  • Preferences: Remembering your settings by storing information about how you've customized the services (such as language preferences)
  • Security: Helping protect your account and detect potentially fraudulent or abusive activity
  • Analytics: Understanding how users interact with our services to improve them
  • Performance: Monitoring and improving the performance and reliability of our services

Technologies We Use

Session Cookies: Temporary cookies that expire when you close your browser. These are used to maintain your session while you use our services.

Persistent Cookies: Cookies that remain on your device for a set period or until you delete them. These help us recognize you as an existing user.

Local Storage: A web storage mechanism that allows websites to store data locally within your browser.

Device Identifiers: Unique identifiers associated with your device that help us recognize your device across sessions.

Analytics Services

We use analytics services, including Vercel Analytics, to help us understand how users interact with our web services. These services collect information about:

  • Pages you visit
  • Time spent on pages
  • How you arrived at our site
  • Technical information about your device and browser

This information helps us improve our services and user experience.

Your Choices

You can control cookies through your browser settings. Most browsers allow you to:

  • See what cookies are stored and delete them individually
  • Block third-party cookies
  • Block all cookies
  • Clear all cookies when you close your browser

Please note that blocking or deleting cookies may impact your ability to use certain features of our services.

For mobile apps, you can manage device identifiers through your device settings:

  • iOS: Settings > Privacy > Tracking
  • Android: Settings > Google > Ads

E. Data Sharing and Disclosure

We share your data with other users where necessary to provide our services, at your request, or with your consent. We also share data with our affiliates, subsidiaries, service providers, and partners; for legal reasons; or in connection with claims or disputes.

NavaNex may share data:

1. With Other Users

This may include sharing data with:

RecipientData Shared
Customers (if you are a Delivery Partner)First name
Profile photo
Vehicle information (make, model)
Real-time location during delivery
Delivery status and ETA
Ratings
Delivery Partners (if you are a Customer)First name
Delivery address
Phone number (for delivery coordination)
Order details (equipment type, special instructions)
Users who referred youWe may share limited data as necessary to calculate referral bonuses

2. With Your Consent or at Your Request

This may include sharing data with:

RecipientData Shared
Emergency servicesIn the event of an emergency, we may share your name, phone number, location, and order/delivery information with emergency responders
Insurance companiesIf you are involved in an incident or submit an insurance claim relating to NavaNex services, we will share relevant data with the insurance company for claims processing

3. With NavaNex Service Providers and Business Partners

We work with third-party service providers and partners to help us provide, maintain, and improve our services. These include:

Service Provider TypePurposeExamples
Cloud infrastructure providersHosting and data storageGoogle Cloud Platform (GCP), Amazon Web Services (AWS)
Payment processorsProcessing payments, managing saved payment methods, disbursing Delivery Partner earningsStripe
Background check providersConducting background checks for Delivery Partner eligibilityCheckr
Authentication providersEnabling sign-in with third-party accountsGoogle, Apple
Mapping and navigation servicesAddress geocoding, routing, and ETA calculationsGoogle Maps
Analytics providersUnderstanding service usage and performanceVercel Analytics
Customer support platformsManaging customer inquiries and support ticketsβ€”
Communication servicesSending SMS notifications and verification codesβ€”

These service providers are contractually required to protect your data and use it only for the purposes for which it was shared.

4. With NavaNex Subsidiaries and Affiliates

We share data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf.

5. For Legal Reasons or in the Event of a Claim or Dispute

NavaNex may share your data if we believe it's required by applicable law, regulation, legal process, or governmental request, including requests from law enforcement.

This includes sharing data:

  • To comply with a subpoena, court order, or other legal process
  • To respond to a government or regulatory inquiry
  • To protect the rights, property, or safety of NavaNex, our users, or the public
  • To enforce our Terms of Service or other agreements
  • To investigate potential violations of our policies
  • In connection with legal claims, disputes, or litigation

We may also share data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.

6. Sale of Personal Information

NavaNex does not sell your personal information. We do not exchange your personal data for monetary consideration.


F. Data Retention and Deletion

NavaNex retains your data for as long as necessary for the purposes described in this notice. Users may request account deletion through the NavaNex apps or by contacting customer support.

Retention Periods

We retain your data for as long as necessary for the purposes described above. Those periods vary depending on the type of data and the purposes for which we collect and maintain it.

Data CategoryRetention PeriodReason
Account InformationLife of account + 7 yearsTax, legal, and regulatory compliance; fraud prevention
Order/Rental Information7 years from transactionTax and legal compliance; dispute resolution
Location Data (Delivery Partners)Deleted upon account deletionNot required for legal compliance once account closed
Payment Transaction Data7 years from transactionTax, legal, and regulatory compliance
Background Check InformationLife of account + 7 yearsRegulatory compliance; fraud prevention
Communications Data7 yearsCustomer support; dispute resolution; legal compliance
Identity Verification Documents3 years from collectionFraud prevention; regulatory compliance
Device and Usage Data7 yearsSecurity; fraud prevention; service improvement

We may retain data for longer periods where required by law or where necessary for purposes such as ongoing legal proceedings.

Account Deletion

You may request deletion of your account at any time through:

  • The Account Settings menu in the NavaNex app
  • Contacting customer support at support@navanex.ai

Before your account can be deleted:

  1. All outstanding payments must be settled
  2. All rented equipment must be returned
  3. Any active subscriptions must be cancelled
  4. For Delivery Partners: Any withdrawable earnings balance of $10 or more must be withdrawn first

What happens when you delete your account:

Upon receiving your deletion request, we will:

  1. Cancel active services: All pending orders will be cancelled, and all subscriptions will be terminated
  2. Anonymize personal data: Your personal information (name, email, phone, address, profile photo) will be replaced with anonymized placeholders
  3. Delete location history: For Delivery Partners, GPS location history will be permanently deleted
  4. Remove uploaded documents: Profile photos, license images, insurance documents, and other uploaded files will be deleted from our storage
  5. Delete authentication credentials: Your account will be removed from our authentication system

Data retained after deletion:

Certain data may be retained after account deletion as required by law or for legitimate business purposes:

  • Financial transaction records: Transaction amounts and dates (without personal identifiers) are retained for 7 years for tax compliance
  • Fraud prevention data: A hash of your account information may be retained to prevent previously deactivated users from creating new accounts
  • Legal compliance: Data may be retained if required for ongoing legal proceedings, regulatory requirements, or dispute resolution

We generally complete the deletion process within 90 days of your request, except where retention is necessary for the reasons described above.

Data Portability

You may request a copy of your data in a portable format. To request your data, please contact us at support@navanex.ai. We will provide your data in a commonly used, machine-readable format (such as JSON or CSV) within 30 days of your request.


III. Choice and Transparency

NavaNex enables you to access and/or control data that NavaNex collects, including through:

  • Privacy settings
  • Device permissions
  • In-app ratings
  • Communication preferences

You may also request access to or copies of your data, make changes or updates to your account, request account deletion, or request that NavaNex restrict its processing of your data.

1. Privacy Settings

You can set or update your preferences regarding data collection and sharing through your Account Settings in the NavaNex app.

Communication Preferences:

You can control the types of communications you receive from NavaNex:

  • Transactional messages: Order confirmations, delivery updates, pickup reminders, and payment receipts. These cannot be disabled while your account is active, as they are essential to providing our services.
  • Account notifications: Security alerts, Terms updates, and account-related information. These cannot be disabled while your account is active.
  • Service messages: Important information about the Services, equipment, or your subscription. These cannot be disabled while your account is active.
  • Promotional communications: Special offers, new features, and marketing messages. You may opt out of promotional communications at any time through your Account Settings or by following the unsubscribe link in any promotional email.

Notification Settings:

You can manage push notification preferences through:

  • The NavaNex app settings
  • Your device's notification settings

2. Device Permissions

Most mobile device platforms (iOS and Android) have defined certain types of device data that apps cannot access without your permission. You should check the available settings on your device.

Location Permissions:

  • Customers: We request location access to help you set your delivery address and to show available services in your area. You can deny or revoke this permission, but you will need to manually enter your address.
  • Delivery Partners: We require location access to match you with delivery requests and enable customers to track deliveries. Location access is required to provide delivery services.

You can manage location permissions through your device settings:

  • iOS: Settings > Privacy & Security > Location Services > NavaNex
  • Android: Settings > Apps > NavaNex > Permissions > Location

Other Permissions:

PermissionPurposeRequired?
CameraTaking profile photos, photographing equipment conditionOptional
Photo LibraryUploading profile photos, uploading equipment photosOptional
NotificationsReceiving order updates, delivery alertsRecommended

3. In-App Ratings

After each delivery, Customers and Delivery Partners can rate each other. Ratings help maintain quality and safety on our platform.

Your Rating:

  • You can view your average rating in the Account section of the app
  • Ratings are displayed as an average of all ratings you have received
  • Individual ratings are not disclosed to protect the privacy of the person who submitted them

How Ratings Are Used:

  • Ratings help us identify issues and maintain service quality
  • Consistently low ratings may result in account review or restrictions
  • You may contact customer support if you believe a rating was unfair

4. User Data Requests

NavaNex provides multiple ways to learn about, control, and submit questions about how we handle your data.

Access and Portability

You have the right to:

  • Access your data: View the personal information we have collected about you
  • Download your data: Request a copy of your data in a portable, machine-readable format

How to request your data:

  1. Contact us at support@navanex.ai
  2. Include "Data Access Request" or "Data Portability Request" in the subject line
  3. Provide your account email address for verification

We will respond to your request within 30 days (or sooner if required by applicable law).

Changing or Updating Data

You can edit your personal information through the NavaNex app:

  • Profile information: Name, email, phone number, profile photo
  • Delivery address: Add, edit, or remove saved addresses
  • Payment methods: Add, edit, or remove saved payment methods
  • Communication preferences: Update your notification and email preferences

For information you cannot update through the app (such as Delivery Partner documentation), please contact customer support.

Deleting Data

You may request deletion of your account and personal data as described in Section II.F above.

Objections and Restrictions

You may request that we:

  • Stop using your data for certain purposes
  • Limit our use of your data to only what is necessary for providing services

To make such a request, contact us at support@navanex.ai. Please note that NavaNex may continue to process data after such objection or request to the extent necessary to provide our services or as required or permitted by law.

Complaints

Depending on your location, you may have the right to file a complaint with a data protection authority regarding NavaNex's handling of your data. See Section IV for contact information for relevant authorities.

5. Do Not Track

Some browsers have a "Do Not Track" (DNT) feature that lets you tell websites you do not want your online activities tracked. Currently, there is no industry standard for how companies should respond to DNT signals. NavaNex does not currently respond to DNT signals, but you can manage tracking through the cookie and device settings described above.


IV. Legal Information

A. Data Controllers and Data Protection Officer

Data Controller:

Neurogrid Technologies Inc. is the data controller responsible for the processing of your personal data when you use NavaNex's services globally.

Contact Information:

Neurogrid Technologies Inc. Email: support@navanex.ai

Data Protection Officer:

You may contact our Data Protection Officer at:

  • Email: support@navanex.ai
  • Mail: Neurogrid Technologies Inc., Attn: Data Protection Officer

For questions regarding data processing or to exercise your data protection rights, please use the contact information above.


B. Our Legal Bases for Using Your Data

Data protection laws in some countries and regions, including the European Economic Area (EEA), United Kingdom (UK), Switzerland, Brazil, Malaysia, and Singapore, require NavaNex to have a "legal basis" for using your data. The following are the legal bases that NavaNex relies on:

Legal BasisDescriptionData Uses
ContractThis legal basis applies when we must use your data to provide our services and fulfill our contractual obligations to you under our Terms of Service.Creating and updating your account
Processing equipment rental requests
Matching Customers with Delivery Partners
Calculating prices and processing payments
Enabling delivery tracking and communications
Generating receipts
Providing customer support
ConsentThis legal basis applies when you voluntarily agree to our collection and use of your data. Where we rely on consent, you have the right to withdraw it at any time.Processing promotional communications
Collecting location data (Customers)
Using certain cookies and tracking technologies
Legitimate InterestsThis legal basis applies when NavaNex has a legitimate purpose for using your data, and such processing is necessary for that purpose and does not override your privacy rights.Preventing and detecting fraud
Maintaining safety and security
Research and development
Improving our services
Enforcing our Terms of Service
Legal ObligationThis legal basis applies when we are required to use your data to comply with the law.Responding to legal process
Tax reporting and compliance
Retaining records as required by law
Reporting to government authorities as required

C. Legal Framework for Data Transfers

NavaNex operates and processes user data globally. We comply with applicable legal frameworks relating to the transfer of data.

International Data Transfers:

Your data may be processed in countries other than where you live, including in the United States, where NavaNex's servers and operations are located. This may result in processing of your personal data in countries whose data protection laws may differ from those in your home country.

Data Transfer Safeguards:

When we transfer user data internationally, we do so on the basis of:

  • Adequacy decisions: Transfers to countries that have been determined to provide adequate data protection
  • Standard Contractual Clauses (SCCs): Contracts approved by data protection authorities that require recipients to protect your data
  • Your consent: Where appropriate and permitted by law
  • Contractual necessity: Where the transfer is necessary to provide our services to you

Our Commitments:

NavaNex is committed to protecting your personal data regardless of where you are located or where your data is processed. This includes:

  • Securing user data when in transit (using encryption) and at rest
  • Implementing company-wide training regarding privacy and data security
  • Implementing internal policies and procedures to limit access to, and use of, user data
  • Limiting government and law enforcement access to user data, except where required by law or where users have consented

D. Regional Privacy Rights

For California Residents (CCPA/CPRA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Your Rights:

  1. Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.

  2. Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.

  3. Right to Correct: You have the right to request correction of inaccurate personal information.

  4. Right to Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. NavaNex does not sell your personal information.

  5. Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to purposes necessary to provide our services.

  6. Right to Non-Discrimination: You have the right not to be discriminated against for exercising your privacy rights.

Categories of Personal Information Collected:

Under CCPA categories, we collect:

  • Identifiers (name, email, phone number, address, device identifiers)
  • Financial information (payment card details, bank account information for Delivery Partners)
  • Geolocation data (delivery addresses, real-time location for Delivery Partners)
  • Professional information (Delivery Partner credentials, background check results)
  • Internet activity information (usage data, browsing history within our services)
  • Inferences (preferences derived from your use of our services)

How to Exercise Your Rights:

To exercise your California privacy rights, contact us at support@navanex.ai or call us at +1 (786) 504-4762. We will respond to verifiable requests within 45 days.

Authorized Agents:

You may designate an authorized agent to submit requests on your behalf. We may require verification that you authorized the agent to act on your behalf.

For Virginia, Colorado, Connecticut, and Other US State Residents

Residents of states with comprehensive privacy laws may have similar rights to those described for California residents. Please contact us at support@navanex.ai to exercise your rights.

For EEA, UK, and Switzerland Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent laws:

Your Rights:

  1. Right of Access: You have the right to request access to your personal data.

  2. Right to Rectification: You have the right to request correction of inaccurate personal data.

  3. Right to Erasure: You have the right to request deletion of your personal data under certain circumstances.

  4. Right to Restriction: You have the right to request restriction of processing of your personal data.

  5. Right to Data Portability: You have the right to receive your personal data in a portable format.

  6. Right to Object: You have the right to object to processing of your personal data based on legitimate interests.

  7. Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

How to Exercise Your Rights:

To exercise your GDPR rights, contact us at support@navanex.ai.

Filing Complaints:

You have the right to file a complaint with a supervisory authority if you believe our processing of your personal data violates applicable law. Contact information for EU data protection authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

For UK residents, you may contact the Information Commissioner's Office (ICO) at: https://ico.org.uk/

For Malaysia Residents (PDPA)

If you are located in Malaysia, your data is processed in accordance with the Personal Data Protection Act 2010 (PDPA).

Your Rights:

  1. Right of Access: You have the right to access your personal data held by us.
  2. Right to Correction: You have the right to request correction of your personal data.
  3. Right to Withdraw Consent: You have the right to withdraw consent to the processing of your personal data.
  4. Right to Prevent Processing: You have the right to prevent processing that is likely to cause damage or distress.

How to Exercise Your Rights:

Contact us at support@navanex.ai to exercise your rights under Malaysian law.

For Singapore Residents (PDPA)

If you are located in Singapore, your data is processed in accordance with the Personal Data Protection Act 2012 (PDPA).

Your Rights:

  1. Right of Access: You have the right to request access to your personal data.
  2. Right to Correction: You have the right to request correction of errors or omissions in your personal data.
  3. Right to Withdraw Consent: You have the right to withdraw consent to the collection, use, or disclosure of your personal data.

How to Exercise Your Rights:

Contact us at support@navanex.ai to exercise your rights under Singapore law.

Filing Complaints:

You may file a complaint with the Personal Data Protection Commission (PDPC) at: https://www.pdpc.gov.sg/


E. Children's Privacy

NavaNex's services are not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe that your child has provided personal information to us, please contact us at support@navanex.ai. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.


F. Security

NavaNex implements technical and organizational measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption: Data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption
  • Access Controls: Access to personal data is limited to employees and contractors who need it to perform their job functions
  • Authentication: We use secure authentication mechanisms, including AWS Cognito for user authentication
  • Payment Security: Payment information is handled by Stripe in compliance with PCI DSS standards
  • Regular Review: We regularly review and update our security practices

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.


G. Updates to This Privacy Notice

We may occasionally update this notice. If we make significant changes, we will notify you in advance through:

  • The NavaNex app
  • Email to the address associated with your account
  • A notice on our website

We encourage you to periodically review this notice for the latest information on our privacy practices.

Use of our services after an update constitutes acceptance of the updated notice to the extent permitted by law.


H. Contact Us

If you have questions or concerns about this Privacy Notice or our privacy practices, please contact us:

General Privacy Inquiries:

Data Protection Officer:

Customer Support:

Mailing Address: Neurogrid Technologies Inc. 131 Continental Drive, Suite 305, Newark, DE, 19713, USA

We will respond to your inquiry within 30 days, or sooner if required by applicable law.


This Privacy Notice was last updated on December 10, 2025.