Privacy Policy
Security commitments, data isolation, regulatory compliance, and user privacy rights at NAVIWO.
Data Controller & Operating Entity
Privacy commitments detailed herein are pledged and guaranteed by:
• Entité légale : NAVIWO LLC
• Numéro d'entité (Entity ID) : 0008126856
• Référence (Re) : 3294175
• Siège officiel : 1209 MOUNTAIN ROAD PL NE, STE R, ALBUQUERQUE, NM 87110
NAVIWO Golden Rule: Your Data Belongs Solely and Exclusively to You
NAVIWO LLC NEVER sells, rents, leases, or monetizes client address lists, shipper contact details, or package manifests. Complete logical data isolation is cryptographically guaranteed via Row Level Security (RLS).
01. Preamble & Roles Definition
This Privacy Policy transparently explains how personal data is collected, stored, and safeguarded when using the NAVIWO platform.
In providing the SaaS service, NAVIWO LLC acts as a Data Processor on behalf of its client agencies, who remain the Data Controllers of their own end-user information.
02. Collected Data Categories
We process two strictly delimited categories of data:
- Agency Account Data: Administrator and staff names, professional email addresses, IP security logs, Stripe billing credentials.
- Logistical Operational Data: Shipper and consignee full names, delivery addresses, phone numbers for tracking SMS/WhatsApp alerts, package descriptions and weights.
03. Purposes & Legal Bases for Processing
Data collected by NAVIWO is strictly utilized to:
- Generate cargo manifests, shipping labels, and barcode/QR codes.
- Provide automated real-time tracking updates to recipients.
- Facilitate agency invoicing and secure fee collection.
- Maintain system reliability, fraud prevention, and platform security.
04. Multitenant Architecture & Row Level Security (RLS)
Our cloud database (Supabase PostgreSQL) enforces strict native Row Level Security (RLS) on all tables.
Every agency possesses an immutable cryptographic tenant identifier. It is technically impossible for one agency to query or view records belonging to another tenant.
05. Authorized Subprocessors & No Commercial Resale
NAVIWO LLC does not sell or barter user data. Data is exclusively transferred to contractual infrastructure providers:
- Supabase Inc. (PostgreSQL, AES-256 encryption at rest, SOC 2 compliant).
- Stripe Inc. (PCI-DSS compliant credit card and bank payment processing).
- Telecom delivery partners (SMS/WhatsApp delivery notifications).
06. Data Retention Period
Manifest and parcel records are preserved as long as the agency account remains active to fulfill legal accounting requirements.
Upon account termination, agencies have thirty (30) days to download all records before database partitions are permanently erased.
07. Technical & Organizational Security Measures
NAVIWO applies top-tier cybersecurity practices:
- End-to-end TLS 1.3 / HTTPS encryption for all in-transit communications.
- Strong cryptographic password hashing (Argon2 / bcrypt).
- Automated daily encrypted database backups stored in geographically redundant centers.
08. User Rights (Access, Correction, Erasure)
Users retain the right to access, rectify, or request the deletion of their personal information at any time.
Requests can be addressed through the respective cargo agency or directly to privacy@naviwo.com.
10. Data Protection Officer Contact
For privacy inquiries or compliance questions:
NAVIWO LLC — Legal & Data Protection Division 1209 MOUNTAIN ROAD PL NE, STE R, ALBUQUERQUE, NM 87110 Email: privacy@naviwo.com