Last updated: July 29, 2026

Who we are

Navo is built and operated by Notus. Where this policy says “we” or “us,” it means Notus. For data protection purposes, Notus is the data controller for the email addresses collected here.

What we collect, and why

Your email address. That’s the only personal information we ask for, and you give it to us voluntarily by submitting the waitlist form. Before we pass it on, we trim any surrounding whitespace and convert it to lowercase so the list stays tidy.

We use it for exactly two things:

• To tell you when Navo launches or the beta opens up.
• To send occasional updates about Navo — new features, progress, that sort of thing.

That’s it. We don’t ask for your name, your company, or anything else, and we don’t build a profile on you. Under GDPR, our legal basis for this is your consent, given when you submit the form. You can withdraw it at any time by unsubscribing or emailing us.

Who we share it with

One company stores it: Resend. Resend is an email service that stores our waitlist and delivers the emails we send. They act as our data processor — they handle your address on our behalf and under our instructions, not for their own purposes. You can read Resend’s privacy policy for their side of it.

Your address does pass through the infrastructure the two of us run on, and it’s worth naming it: our site is hosted on Vercel, so a form submission travels through Vercel’s servers on its way to Resend, and Resend uses its own sub-processors to store the list and send the mail. The promise that your address won’t be used for anyone else’s purposes is one we have in writing from Resend; for Vercel we’re describing how the plumbing works, not making a promise on their behalf.

Where it goes. Resend is based in the United States, so if you sign up from the EU, the UK, or the EEA, your email address is transferred to the US and stored there. We have a Data Processing Addendum in place with Resend — legally, Plus Five Five, Inc. — effective when we accepted their terms of service, and under it those transfers are made using the EU Standard Contractual Clauses, with the UK Addendum to those clauses covering UK data. Resend is additionally certified under the EU-U.S. Data Privacy Framework and its UK Extension.

We do not sell your email address. We do not rent, trade, or share it for advertising. If we are ever legally compelled to disclose something, we’ll comply with the law — but there is very little here to disclose.

What we don’t store

We have no database and no user accounts. Your email address is not written to a file, a spreadsheet, or a server of ours. The only copy lives in our Resend audience.

We never log your email address. If something goes wrong while adding you to the list, our server records the error so we can fix it — but the address is stripped out before anything is written, so it never appears in a log line.

IP addresses

To stop bots and scripts from flooding the waitlist form, our server briefly counts how many submissions have come from each IP address. Those counts live in the server’s memory only. They are never written to disk, never stored next to your email address, and disappear entirely when the server process restarts. Individual entries are discarded automatically after ten minutes. We don’t use IP addresses to identify you or to track you across the site.

Separately from that counting, Vercel records IP addresses in its own server logs and uses them for abuse prevention — again, part of running the site rather than something we built on top of.

No cookies, no tracking

This site sets no cookies. There are no analytics, no tracking pixels, no advertising or marketing tags, no session recording, and no third-party scripts of any kind. The font is served from our own site rather than a font CDN, so even loading the page doesn’t call out to anyone else. We measure nothing about your visit.

Our host does keep standard server request logs, though — the page you asked for, your IP address, your browser’s user agent, and how long the request took. That’s a normal part of serving a website rather than anything we set up, and we don’t analyse those logs or connect them to your email address.

How long we keep it

We keep your email address in our Resend audience until you ask us to delete it, or until we shut the waitlist down. There is no fixed expiry date, because the whole point is to be able to email you when Navo is ready.

Unsubscribing and deleting are two different things, so here’s exactly what each one does. If you unsubscribe, the emails stop and Resend marks your contact as unsubscribed — but the record stays in the audience with that flag on it, which is how we know not to email you again. If you want the record gone entirely, email us and we’ll delete it outright rather than just flagging it.

Your rights

Wherever you live, you can ask us to show you what we hold, correct it, or delete it, and you can unsubscribe from our emails at any time.

If you’re in the EU, UK, or EEA, the GDPR (and UK GDPR) gives you the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased — the “right to be forgotten”
• Restrict or object to how we process it
• Receive your data in a portable form (for us, that’s one email address)
• Withdraw your consent at any time, which is as simple as unsubscribing
• Lodge a complaint with your local data protection authority — in the UK, the ICO

If you’re a California resident, the CCPA and CPRA give you the right to:

• Know what personal information we collect and what we do with it — that’s this page, and the short answer is one email address
• Request a copy of it
• Request that we delete it
• Request that we correct it
• Opt out of its sale or sharing — though we don’t sell or share personal information, so there’s nothing to opt out of. We have never sold personal information, including that of anyone under 16.
• Not be discriminated against for exercising any of these rights

How to exercise your rights

Email notusbusinesssupport@gmail.com and tell us what you want. We delete on request — you don’t need to give a reason, and you don’t need an account. Please send the request from the address you signed up with, or tell us which address it concerns, so we can find the right record.

Every email we send also has an unsubscribe link, which is the fastest route if you just want the emails to stop.

Children

Navo is a productivity tool for adults, and this site is not directed at children under 13. We don’t knowingly collect personal information from anyone under 13. If you believe a child has given us their email address, email us and we’ll delete it.

Changes to this policy

If we change how any of this works, we’ll update this page and move the “last updated” date at the top. If a change materially affects how we use your email address, we’ll tell the people on the waitlist by email rather than quietly editing the page.

Contact

Questions, requests, or corrections — including anything about this policy: notusbusinesssupport@gmail.com.

← Back to Navo