NAVI AI Privacy Policy

This policy applies to the NAVI AI service at ai.naviwebsite.vn and the NAVI AI mobile app on iOS and Android. The service is for business customers who subscribe to NAVI's AI chatbot.

NAVI Website's web design services are covered by a separate policy; see the Privacy Policy page.

From business customers:

• Account information: full name, phone number, email, business name, address.
• Password: stored as a bcrypt hash. We do not store and cannot read your original password.
• Knowledge base content: text you provide for the chatbot to use when answering.
• Post content: titles, text and images you compose for publishing to social media.
• Operational data: AI replies used, support request history, subscription details.

From visitors to your website, through the chatbot:

• The content of conversations between the visitor and the chatbot.
• Contact details visitors voluntarily leave: name, phone number, stated need.

We process the second group as a data processor on behalf of the business customer. The business customer decides the purpose of use and is responsible for informing visitors to their own website.

• The app stores sign-in tokens in the operating system's secure storage: Keychain on iOS, EncryptedSharedPreferences on Android.
• The app accesses your camera or photo library only when you actively choose an image to attach to a post, and uploads only the images you selected.
• The app does NOT collect contacts, location, browsing history, or advertising identifiers.
• The app contains NO advertising and uses no third-party behavioural tracking.
• The app is for signing in to and managing an existing account. Subscribing to the service happens outside the app.

To generate chatbot replies and post content, we transmit some data to OpenAI, L.L.C. (United States) — the language-model provider NAVI uses. We list it explicitly below so you know exactly what leaves our systems.

Data that IS sent to OpenAI:

• Questions visitors send to the chatbot, together with the knowledge-base excerpts relevant to those questions.
• Messages you type in the chatbot test feature.
• The topic you enter when asking AI to write a post.
• Knowledge base content, when processed into vectors for search.

Data that is NOT sent to OpenAI:

• Passwords, one-time passcodes, sign-in tokens.
• Lead lists, and the phone numbers and emails you have collected.
• Payment and invoice information.
• Images you attach to posts.

OpenAI commits not to use data submitted through its API to train its models.

In the mobile app, we ask for and wait for your consent before the first time any content is sent for AI processing. If you decline, the test chat and AI writing features do not operate and no data is sent. You may withdraw consent at any time by contacting us.

Each provider receives only the data needed for its specific role:

• OpenAI, L.L.C. — generating replies and content with language models; see section 4.
• Zalo (VNG Corporation) — delivering one-time passcodes to your phone number.
• Cloudflare, Inc. — network infrastructure, automated-access protection, and storage for images you upload.
• Meta Platforms, LinkedIn, X — only when you actively connect a social account for publishing. Post content and images are then sent to the platform you chose.
• Server and email service providers, for system hosting and notifications.

We do not sell, rent or trade your data to anyone.

• Operating the chatbot and answering visitors to your website.
• Generating post content at your request and publishing to the channels you connected.
• Managing your account, subscription and usage limits.
• Sending notifications about your account, limits and service status.
• Providing technical support when you submit a request.

We do not use your data for advertising, and we do not use your content to train AI models.

• All connections to the service use HTTPS.
• Passwords are stored as bcrypt hashes.
• App sessions use time-limited tokens, stored in the operating system's secure storage.
• Each business customer's data is isolated; every query is scoped to the signed-in account.
• Only authorised staff can access the systems, for operations and support.

• Chatbot conversation history is retained for the period included in your subscription plan.
• Account information and operational data are retained while you use the service.
• After you delete your account, we delete the related data; some transaction records may be retained to meet accounting and legal obligations.

You have the right to:

• Access and view your account data.
• Correct or update inaccurate information.
• Delete your account and related data, directly in the mobile app under Account, or by contacting us.
• Decline or withdraw consent for AI processing.
• Request a copy of your data.

If you have questions or requests regarding this policy, please contact us:

• Email: [email protected]
• Phone: +84 776 365 886
• Address: 3rd Floor, An Phu Plaza Building, 117-119 Ly Chinh Thang Street, Xuan Hoa Ward, Ho Chi Minh City, Vietnam