DRAFT — this document was generated as a starting point and has not been reviewed by a lawyer. Have counsel review it before publishing or relying on it.
Privacy Policy
1. Who we are
Navigrate ("Navigrate," "we," "us," or "our") provides dispatch scheduling software, with drive-time estimates, for field-service businesses. Navigrate is operated from Alberta, Canada.
2. Information we collect
When you use Navigrate, we collect:
- Account information — the email address and password you use to sign up (passwords are handled by our authentication provider and never stored by us in plain text).
- Technician records you create — names, trades, vehicle identifiers, coverage areas, and home base addresses (including the coordinates we derive from them).
- Client/job records you create — your customers' names, phone numbers, and service addresses, plus job details and scheduling notes you enter.
- Usage data — basic technical information such as browser type and general error logs, used to keep the service running.
- Analytics data — the pages you view on navigrate.com and in the app, a few product events (such as starting a sign-up or checkout), and how you first arrived (the referring website, landing page, and any campaign tags in the link). When you sign up or sign in, this is linked to your account ID. It is collected with PostHog, which also records your IP address and basic browser and device details, and keeps a random identifier in your browser's local storage.
- Calculator results you ask us to email — on the drive-time cost calculator you can optionally enter an email address to have your own figures sent to you. If you do, we store that address, the numbers you entered, the result, and the date. We also store a one-way hashed form of your IP address, which we use only to stop the form being abused to send mail to other people; the address itself is not kept. None of this is required to use the calculator, which works fully without it.
The client and technician data described above is entered by you as the account holder. Navigrate acts as a data processor for that information on your behalf.
3. How we use information
- To provide the dispatch scheduling and drive-time estimate service itself.
- To estimate drive times and geocode addresses, which requires sending address and coordinate data to the Google Maps Platform (see "Third parties" below).
- To process subscription payments, if you upgrade to a paid plan.
- To maintain, secure, and improve the product.
- To understand how people find and use the site and app (for example, which pages lead to sign-ups), using PostHog product analytics and your answer to the optional "How did you hear about Navigrate?" question. We don't sell this data or use it for advertising.
- To communicate with you about your account (e.g. billing or service notices).
- To email you about your trial (for example, a welcome note and reminders before it ends). Every one of those emails has an unsubscribe link.
- To send you the calculator result you asked for. That is a single message, sent because you requested it. We will not email you again off the back of it unless you also ticked the separate, unticked box asking for occasional tips on cutting drive time — which is express consent under Canada's anti-spam legislation. We record when you gave it and the exact wording you agreed to, and every tips email carries a one-click link to withdraw it.
We do not sell your data or your customers' data, and we do not use it for advertising.
4. Legal basis for processing (Canada)
Navigrate handles personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, as an Alberta-based operator, Alberta's Personal Information Protection Act (PIPA). We collect, use, and disclose personal information only for purposes a reasonable person would consider appropriate in the circumstances, and only with consent where required.
5. Third parties we share data with
We use a small number of service providers ("sub-processors") to operate Navigrate. Each has its own privacy practices, which we encourage you to review:
- Google Maps Platform — receives addresses and coordinates to provide geocoding, mapping, and drive-time estimates.
- Stripe — processes subscription payments. Stripe hosts checkout directly; Navigrate does not receive or store your card details.
- Supabase — hosts our database and handles authentication. Your account and job data is stored on Supabase's infrastructure with row-level access controls so only your account can read your data.
- PostHog — receives page views, a few product events (such as a completed sign-up), how you first arrived, your answer to "How did you hear about Navigrate?", your account ID once you sign up or sign in, and your IP address and browser details, so we can see what's working. It doesn't receive your email address, your password, or your customers' details.
- Resend — sends account emails, such as password resets, emails about your trial, and the calculator result if you ask for one. It receives your email address and the content of those emails.
- Netlify — hosts the Navigrate web application.
6. Data retention
We retain account, technician, and job data for as long as your account is active. If you close your account, we will delete or anonymize your data within a reasonable period, except where we're required to retain it for legal, accounting, or fraud- prevention purposes.
An email address left on the drive-time cost calculator is kept while it is useful for the purpose it was given for: to send the result, and, if you ticked the box, to send occasional tips. If you withdraw that consent we stop immediately, and we keep only the record that consent was given and withdrawn, because anti-spam law expects us to be able to show it. Ask us at info@navigrate.com and we will delete the row outright.
7. Your rights
Under PIPEDA and Alberta PIPA, you generally have the right to access the personal information we hold about you, request corrections, withdraw consent (subject to legal or contractual restrictions), and request deletion. To exercise any of these rights, contact us at info@navigrate.com.
8. Security
We apply row-level access controls so that each account can only read and write its own data, and data is encrypted in transit over HTTPS. No system is perfectly secure, and we can't guarantee absolute security.
9. Children's privacy
Navigrate is a business tool and is not directed at, or intended for use by, children.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we'll notify account holders directly where appropriate.
11. Contact us
Questions about this policy or your data can be sent to info@navigrate.com.