1.1 Introduction
Yapa Technologies Pty Ltd ("Yapa", "we", "us", "our") operates the Navo platform (navosuite.com). We are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and, where applicable, the GDPR.
Plain English: We collect only what we need to run Navo. We do not sell your data. We use Supabase for storage, Stripe for payments, and Resend for email. You can request deletion at any time.
1.2 What We Collect
Account information
- Name and email address (required to create an account)
- Business name and ABN (optional)
Usage data
- Feasibility inputs and outputs
- Project data (costs, tasks, contacts, documents, photos)
- Suburb searches and data queries
- Activity logs (logins, actions, timestamps)
Payment information
- Billing details are processed and stored by Stripe. Navo does not store full card numbers.
Technical data
- IP address, browser type, device type, operating system
- Cookie identifiers
1.3 How We Use Your Information
- To provide, operate, and improve the Navo platform
- To process payments via Stripe
- To send transactional emails via Resend
- To provide customer support
- To comply with Australian legal obligations
- To analyse platform usage in aggregate (anonymised)
We do not use your data for advertising. We do not sell, rent, or trade your personal information to third parties.
1.4 Data Storage and Security
Your data is stored on Supabase infrastructure in Australia (ap-southeast-2, Sydney). All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Supabase Row Level Security ensures your data is logically isolated from other accounts.
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database, auth, storage | All platform data |
| Stripe | Payment processing | Billing details only |
| Resend | Transactional email | Name, email, message content |
| Vercel | Hosting | Request metadata only |
1.4b International Data Transfers
Your data is primarily stored in Australia (Supabase, ap-southeast-2 Sydney). However, some of our service providers operate internationally:
- Stripe , payment data may be processed in Ireland and the United States under Stripe's Standard Contractual Clauses (SCCs) and applicable data transfer mechanisms
- Vercel , hosting infrastructure includes global edge nodes. Request metadata may be processed outside Australia
- Supabase , support and operations teams are based in the United States and may access data for support purposes under strict confidentiality obligations
Where data is transferred outside Australia, we ensure appropriate protections are in place consistent with the Australian Privacy Principles.
1.5 Data Retention
- Active accounts: retained for the life of the account
- Cancelled accounts: data retained for 12 months then deleted
- Financial records: retained for 7 years (Australian tax law)
- Deletion requests: processed within 30 days. Email hello@navosuite.com
1.5b Notifiable Data Breaches
In the event of a data breach that is likely to result in serious harm to individuals, Yapa Technologies will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals within 30 days, as required under the Notifiable Data Breaches scheme (Privacy Act 1988 (Cth), Part IIIC). We maintain an incident response plan and will act promptly to contain any breach.
1.5c Children
Navo is not intended for use by persons under 18 years of age. If we become aware that an account has been created by a person under 18, we will delete the account and all associated data promptly. If you believe a minor has created an account, contact us at hello@navosuite.com.
1.5d Marketing Communications
We send transactional emails only (account creation, billing receipts, password resets, product updates directly related to your account). We will only send promotional or marketing emails if you have expressly opted in. You can opt out of any email communication at any time by clicking "unsubscribe" or emailing hello@navosuite.com. We comply with the Spam Act 2003 (Cth).
1.6 Your Rights
Under the Australian Privacy Act and GDPR you have the right to access, correct, delete, and port your personal information. Email hello@navosuite.com. We will respond within 30 days.
1.7 Contact
Privacy enquiries: hello@navosuite.com
Yapa Technologies Pty Ltd, ABN 21 697 117 936, NSW, Australia
If you are not satisfied with our response, you may lodge a complaint with the OAIC at oaic.gov.au.