DRAFT — this document was generated as a starting point and has not been reviewed by a lawyer. Have counsel review it before publishing or relying on it.
Privacy Policy
1. Who we are
Navigrate ("Navigrate," "we," "us," or "our") provides dispatch scheduling software, with drive-time estimates, for field-service businesses. Navigrate is operated from Alberta, Canada.
2. Information we collect
When you use Navigrate, we collect:
- Account information — the email address and password you use to sign up (passwords are handled by our authentication provider and never stored by us in plain text).
- Technician records you create — names, trades, vehicle identifiers, coverage areas, and home base addresses (including the coordinates we derive from them).
- Client/job records you create — your customers' names, phone numbers, and service addresses, plus job details and scheduling notes you enter.
- Usage data — basic technical information such as browser type and general error logs, used to keep the service running.
- Analytics data — the pages you view on navigrate.com and in the app, a few product events (such as starting a sign-up or checkout), and how you first arrived (the referring website, landing page, and any campaign tags in the link). When you sign up or sign in, this is linked to your account ID. It is collected with PostHog, which also records your IP address and basic browser and device details, and keeps a random identifier in your browser's local storage.
The client and technician data described above is entered by you as the account holder. Navigrate acts as a data processor for that information on your behalf.
3. How we use information
- To provide the dispatch scheduling and drive-time estimate service itself.
- To estimate drive times and geocode addresses, which requires sending address and coordinate data to the Google Maps Platform (see "Third parties" below).
- To process subscription payments, if you upgrade to a paid plan.
- To maintain, secure, and improve the product.
- To understand how people find and use the site and app (for example, which pages lead to sign-ups), using PostHog product analytics and your answer to the optional "How did you hear about Navigrate?" question. We don't sell this data or use it for advertising.
- To communicate with you about your account (e.g. billing or service notices).
- To email you about your trial (for example, a welcome note and reminders before it ends). Every one of those emails has an unsubscribe link.
We do not sell your data or your customers' data, and we do not use it for advertising.
4. Legal basis for processing (Canada)
Navigrate handles personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, as an Alberta-based operator, Alberta's Personal Information Protection Act (PIPA). We collect, use, and disclose personal information only for purposes a reasonable person would consider appropriate in the circumstances, and only with consent where required.
5. Third parties we share data with
We use a small number of service providers ("sub-processors") to operate Navigrate. Each has its own privacy practices, which we encourage you to review:
- Google Maps Platform — receives addresses and coordinates to provide geocoding, mapping, and drive-time estimates.
- Stripe — processes subscription payments. Stripe hosts checkout directly; Navigrate does not receive or store your card details.
- Supabase — hosts our database and handles authentication. Your account and job data is stored on Supabase's infrastructure with row-level access controls so only your account can read your data.
- PostHog — receives page views, a few product events (such as a completed sign-up), how you first arrived, your answer to "How did you hear about Navigrate?", your account ID once you sign up or sign in, and your IP address and browser details, so we can see what's working. It doesn't receive your email address, your password, or your customers' details.
- Resend — sends account emails, such as password resets, and emails about your trial. It receives your email address and the content of those emails.
- Netlify — hosts the Navigrate web application.
6. Data retention
We retain account, technician, and job data for as long as your account is active. If you close your account, we will delete or anonymize your data within a reasonable period, except where we're required to retain it for legal, accounting, or fraud- prevention purposes.
7. Your rights
Under PIPEDA and Alberta PIPA, you generally have the right to access the personal information we hold about you, request corrections, withdraw consent (subject to legal or contractual restrictions), and request deletion. To exercise any of these rights, contact us at info@navigrate.com.
8. Security
We apply row-level access controls so that each account can only read and write its own data, and data is encrypted in transit over HTTPS. No system is perfectly secure, and we can't guarantee absolute security.
9. Children's privacy
Navigrate is a business tool and is not directed at, or intended for use by, children.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we'll notify account holders directly where appropriate.
11. Contact us
Questions about this policy or your data can be sent to info@navigrate.com.