Short version: We collect only what we need to run the service. We don't sell your data. We don't use your data to train AI models. You can request deletion at any time.
1. Who We Are
AIGrowthNav ("AIGrowthNav," "we," "our," or "us") is a revenue operations platform for B2B companies, operated as part of the KCENAV Network. Our registered contact for privacy matters is privacy@aigrowthnav.ai.
This policy applies to information collected when you use the AIGrowthNav website, tools, assessments, and related services (collectively, the "Service").
2. Information We Collect
2.1 Information You Provide Directly
- Account information: Name, business email address, company name, job title.
- Business data you submit: Pipeline data, revenue figures, forecasts, CRM exports, and other business metrics you upload or enter into assessments and tools.
- Payment information: Billing address and payment method details. Card numbers are processed and stored by Stripe; we do not store full card numbers.
- Communications: Messages you send us via email or support channels.
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, time on site, click patterns, session duration.
- Device and technical data: Browser type, operating system, IP address, referring URL.
- Analytics beacon: We use a first-party analytics beacon (Polsia Analytics) that records a pseudonymous visitor identifier stored in your browser's localStorage.
- Cookies: Session cookies for authentication; analytics cookies for product improvement. See our Cookie Notice for details.
2.3 Data From Third Parties
- Stripe: Payment status, subscription tier, and billing events.
- Resend: Email delivery receipts (opens and bounces, where available).
3. How We Use Your Information
3.1 To Provide the Service
- Process assessments and deliver reports
- Process payments and manage subscriptions
- Send transactional emails (receipts, results, account alerts) via Resend
- Authenticate and secure your account
3.2 AI-Assisted Processing
Some features (assessments, health analyses, pipeline recommendations) involve sending your submitted business data to an AI language model to generate insights. Specifically:
- Data you submit may be transmitted to an AI model via an API call during processing.
- Your data is never used to train third-party foundation models. AI providers are contractually prohibited from using customer data submitted via API for model training (see Section 4).
- AI-generated outputs are for informational purposes only. See our Disclaimer.
3.3 Benchmarking and Analytics
We aggregate and anonymize business metrics from submitted data to build an SMB RevOps benchmark dataset. This data is stripped of all personally identifiable information before aggregation. Individual company data is never exposed in benchmark outputs.
3.4 Product Improvement
We analyze usage patterns (anonymized) to improve the Service, prioritize features, and fix bugs.
3.5 Legal Compliance
We may process your data to comply with applicable law, respond to legal process, or enforce our terms.
4. Third-Party Data Sharing
We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes. We share data only as follows:
- Stripe: Payment processing. Stripe's privacy policy applies to payment data. stripe.com/privacy
- Resend: Transactional email delivery. Resend processes your email address and email content to deliver messages on our behalf. resend.com/privacy
- AI model provider: Business data you submit for analysis is sent to an AI API. The provider processes this data as a subprocessor and is contractually prohibited from using it to train or improve foundation models.
- Neon (database hosting): Your data is stored in a PostgreSQL database hosted by Neon. Neon processes data only to provide infrastructure services.
- Render (application hosting): Our application runs on Render's infrastructure. Application logs may contain metadata about requests.
- Legal requirements: We may disclose data if required by law, subpoena, or court order, or if we believe disclosure is necessary to protect rights or prevent harm.
- Business transfers: If AIGrowthNav is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you via email before that occurs.
5. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
5.1 Rights Under GDPR (EEA, UK, Switzerland)
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate data. We fulfill correction requests within 30 days.
- Erasure: Request deletion of your personal data. We will delete or anonymize your data within 30 days, except where retention is required by law or legitimate business need (e.g., financial records).
- Portability: Receive your data in a machine-readable format (CSV or JSON).
- Restriction: Request that we restrict processing while a dispute is resolved.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, withdraw that consent at any time.
- Lodge a complaint: File a complaint with your local supervisory authority.
5.2 Rights Under CCPA / CPRA (California Residents)
- Know: Know what personal information we collect and how we use it.
- Delete: Request deletion of your personal information.
- Correct: Request correction of inaccurate personal information.
- Opt out of sale / sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is required, but you may submit a request for confirmation.
- Non-discrimination: We will not discriminate against you for exercising your privacy rights.
5.3 Other U.S. State Privacy Laws
Residents of Virginia, Colorado, Connecticut, Texas, Oregon, and other U.S. states with comprehensive privacy laws have substantially similar rights to those described above. We honor those rights regardless of your specific state.
5.4 How to Exercise Your Rights
Submit requests to privacy@aigrowthnav.ai with "Privacy Request" in the subject line. We will respond within 30 days. We may verify your identity before fulfilling a request.
6. Data Retention
We retain personal data for as long as necessary to provide the Service and comply with legal obligations:
- Account data: Retained while your account is active and for 2 years after account deletion.
- Business data (submitted assessments): Retained for 1 year from submission, then anonymized and moved to benchmark datasets.
- Payment records: Retained for 7 years for tax and accounting purposes.
- Usage logs: 90 days.
You may request early deletion at any time (see Section 5).
7. Data Security
We use industry-standard security measures including:
- TLS encryption for all data in transit
- AES-256 encryption for sensitive stored credentials
- Access controls limiting employee access to personal data
- Regular security reviews
No security system is perfect. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.
8. International Data Transfers
AIGrowthNav operates from the United States. If you access the Service from the EEA, UK, or other regions with data transfer restrictions, your data will be transferred to and processed in the United States. We rely on standard contractual clauses (SCCs) and other applicable transfer mechanisms for international transfers.
9. Children's Privacy
The Service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us at privacy@aigrowthnav.ai and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or sending an email to registered users at least 14 days before the change takes effect. Continued use of the Service after changes constitutes acceptance.
11. Contact Us
For privacy questions, requests, or concerns:
Email: privacy@aigrowthnav.ai
Website: aigrowthnav.ai
We aim to respond to all privacy inquiries within 5 business days and fulfill requests within 30 days.