Privacy Policy

1. Introduction

Navly LLC ("we," "us," or "our") operates the Navly service at navly.ai. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

By using Navly, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Information You Provide

• Intake responses: Answers to our intake questionnaire, including employment status, location (zip code), salary range, benefits information, industry, career level, and related details.
• Contact information: Your first name and email address, which are required to receive your action plan.
• Chat messages: Messages you send to the AI chat companion during your session.
• Uploaded documents: Resumes, LinkedIn profiles, or other PDF documents you choose to upload for AI-powered review.

Information Collected Automatically

• Usage events: We track actions such as intake started, intake completed, plan generated, tasks completed, links clicked, and chat sessions. These events help us improve the Service.
• Device information: Device type (mobile, desktop, tablet) and browser type, collected with each event.
• Session data: A session identifier to associate your activity within a single visit.

Information We Do Not Collect

• We do not collect Social Security numbers, bank account numbers, credit card information, or government ID numbers.
• We do not use cookies for advertising or tracking across other websites.
• We do not sell your personal information.

3. How We Use Your Information

We use the information we collect to:

• Generate your personalized action plan based on your intake responses.
• Power the AI chat companion with context about your situation so it can provide relevant guidance.
• Analyze uploaded documents (resumes, LinkedIn profiles) to provide AI-powered feedback.
• Send you emails, including your plan link, progress nudges, and service updates.
• Improve the Service by analyzing usage patterns, identifying drop-off points, and understanding which features are most helpful.
• Maintain and secure the Service, including monitoring for abuse and ensuring system reliability.

4. Third-Party Services

We use the following third-party services to operate Navly. Each processes some of your data on our behalf:

• Supabase (database and authentication) — Stores your profile, intake responses, action plan, chat history, and event data. Handles magic link authentication.
• Anthropic (Claude API) (AI processing) — Processes your intake data to generate action plans and powers the chat companion. Your data is sent to Anthropic's API for processing but is not used to train their models.
• Vercel (hosting) — Hosts the Navly website and serverless API functions.
• Resend (email delivery) — Sends transactional and drip emails on our behalf.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. This includes your profile, action plan, chat history, and uploaded documents. If you request deletion of your data, we will remove it within 30 days, except where we are required by law to retain it.

6. Your Rights

You have the right to:

• Access your data: Request a copy of the personal information we hold about you.
• Correct your data: Request correction of inaccurate or incomplete information.
• Delete your data: Request deletion of your personal information.
• Unsubscribe from emails: Every email we send includes an unsubscribe link. You can opt out of drip emails at any time.

To exercise any of these rights, contact us at support@trynavly.com. We will respond within 30 days.

7. Data Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication (magic links — no passwords stored), and access controls on our database. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies and Local Storage

Navly uses essential cookies and browser local storage to maintain your session and authentication state. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not track you across other websites.

9. Children's Privacy

Navly is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.