Privacy Policy
Effective date: August 11, 2026
1. Introduction and Scope
This Privacy Policy explains how Navrivon Systems ("we," "us," or "our") collects, uses, discloses, and safeguards information when you visit our website, use the NavFlew service, or interact with our communications. This policy applies to the NavFlew website and the AI front desk automation service (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy. Please read it carefully.
2. Who We Are
NavFlew is operated by Navrivon Systems, a remote-first technology company building automation tools for dental and aesthetic clinics. If you have any questions about this policy, you can reach us at info@navrivon.com.
3. Information We Collect
Information you provide to us. We collect information you submit directly, such as your name, email address, clinic or organization details, and any content you provide when requesting a demo, creating an account, or contacting us.
Patient-related data processed through the Service. When clinics use NavFlew to automate their front desk, the Service may process patient information such as names, contact details, appointment preferences, conversation history, and related scheduling data. This information is processed on behalf of the clinic, which remains responsible for it.
Information collected automatically. When you visit our website, we may automatically collect technical information such as your IP address, browser type, device information, pages visited, and referring URLs.
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service;
- Respond to inquiries, requests, and support questions;
- Automate front desk conversations, scheduling, and follow-ups on behalf of clinics;
- Improve, personalize, and secure the Service;
- Send administrative messages, updates, and marketing communications where permitted;
- Comply with legal obligations and enforce our Terms of Service.
5. Legal Bases for Processing
Depending on your location and the nature of the data, we process personal information on one or more of the following legal bases:
- Contract: processing necessary to provide the Service you requested;
- Legitimate interests: operating, securing, and improving our Service;
- Consent: where you have given us explicit consent, which you may withdraw at any time;
- Legal obligation: where processing is required by law.
For patient data processed on behalf of clinics, the clinic is generally the data controller, and we act as a data processor under their instructions.
6. Cookies and Similar Technologies
We may use cookies, pixels, and similar technologies to enhance your experience, analyze usage, and remember preferences. You can control cookies through your browser settings; however, disabling cookies may affect the functionality of the Service. We do not use cookies to collect sensitive health information.
7. How We Share Information
We do not sell your personal information. We may share information in the following circumstances:
- Service providers: with trusted vendors who help us operate the Service (e.g., hosting, analytics, communication platforms), under confidentiality obligations;
- Communication platforms: when the Service connects to third-party platforms such as WhatsApp or Instagram to send and receive messages on your behalf;
- Business transfers: in connection with a merger, acquisition, or sale of assets;
- Legal requirements: where required by law, regulation, or a valid legal request;
- With your consent: as otherwise described to you at the point of collection.
8. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When a clinic terminates its use of the Service, we will delete or return patient data in accordance with our agreement and applicable law.
9. International Data Transfers
Information we collect may be processed and stored in data centers located outside your country of residence. When we transfer personal information across borders, we take reasonable steps to ensure it is protected in accordance with this policy and applicable data protection laws, including using standard contractual clauses or equivalent safeguards where required.
10. Your Privacy Rights
Depending on your jurisdiction (including under the GDPR, CCPA/CPRA, and similar laws), you may have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate or incomplete information;
- Request deletion of your personal information;
- Object to or restrict certain processing;
- Receive your data in a portable format;
- Withdraw consent at any time, where processing is based on consent;
- Lodge a complaint with a supervisory authority.
To exercise these rights, contact us at info@navrivon.com. We will respond within the timeframes required by applicable law. For patient data, clinics are responsible for responding to data subject requests and may use the Service to fulfill them.
11. Children's Privacy
The Service is not directed to children, and we do not knowingly collect personal information from children under the age of 13 (or the applicable age of consent in your jurisdiction). If you believe a child has provided us with personal information, please contact us, and we will take steps to delete it.
12. Security of Your Data
We implement reasonable technical, administrative, and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We encourage clinics to use strong credentials and limit access appropriately.
13. Third-Party Links
The Service may contain links to third-party websites or platforms that are not operated by us. We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their privacy policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above and notify you of material changes through the Service or by other reasonable means. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.
15. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: info@navrivon.com
- Navrivon Systems — [Registered address]
This document is provided for informational purposes and does not constitute legal advice. Please consult a qualified attorney to tailor this policy to your business and jurisdiction.