Navon
Request access
Legal

Legal & trust center

The agreements and policies behind Navon. Countersign-ready copies of the customer contracts are available on request.

Request contract pack
Documents

What governs your data and our service.

Privacy Policy

What we collect, how we use it, and our Google API Limited Use commitments.

Read →

Terms of Service

Website and evaluation terms. Paying firms are governed by the MSA below.

Read →

Security overview

Encryption, tenant isolation, backups, and how to request a security review.

Read →

Master Subscription Agreement

The customer contract: service, fees, confidentiality, liability, data export on exit.

Request →

Data Processing Addendum

Processor commitments, security measures, breach notice, SCCs, CCPA terms.

Request →

Service Level Agreement

99.5% uptime commitment, support response targets, service credits, RPO/RTO.

Request →

Subprocessors

Who powers the service.

Navon Subprocessor List

Last updated: August 24, 2026

Navon uses the following subprocessors to provide the Service. Each is bound by written data-protection obligations consistent with our DPA. We give customers at least 15 days' notice before adding a subprocessor that processes Customer Data.

Subprocessor Purpose Data processed Location
Supabase (on AWS) Primary database, authentication, file storage Customer Data, account data United States (us-east-1)
Vercel Application hosting and delivery Customer Data in transit, logs United States / global edge
Anthropic AI processing (Navon AI, extraction, summaries) Content submitted for AI features; no training on customer content United States
Google (Google Cloud / Workspace APIs) OAuth sign-in; Gmail integration at customer's direction Google account identifiers; email content/metadata the customer connects United States
Amazon Web Services Underlying cloud infrastructure for the above; independent encrypted backup storage Encrypted Customer Data United States
Bright Data Company/founder profile enrichment from public sources (when enrichment is used) Public company and person identifiers submitted for enrichment United States
Brave Software Web/news search powering portfolio news (when enabled) Company names queried; no Customer Data content United States
Resend Transactional email delivery (invites, notifications) Names, email addresses, notification content United States
Fireflies.ai Meeting transcription sync — only if the customer connects Fireflies Meeting transcripts and metadata from the customer's Fireflies account United States

Questions or objections: privacy@navon.vc.

Acceptable use

The rules of the platform.

Navon Acceptable Use Policy

Effective date: August 24, 2026 · Incorporated into the Terms of Service and the Master Subscription Agreement.

Using Navon, you and your Users agree not to:

  1. Break tenant boundaries. Attempt to access, probe, or interfere with any workspace, data, or account that does not belong to your firm.
  2. Attack the service. Probe, scan, or test the vulnerability of the Service without written authorization; breach or circumvent authentication or security controls; disrupt the Service (including denial-of-service or load testing without consent).
  3. Misuse credentials. Share accounts, sell or transfer access, or use another person's credentials.
  4. Abuse integrations. Connect accounts you are not authorized to connect (including Gmail accounts), or use the Service to collect data in violation of third-party terms or applicable law.
  5. Upload harmful content. Introduce malware or malicious code, or store content that is unlawful or infringes third-party rights.
  6. Misuse AI features. Use Navon AI to generate content for unlawful purposes, or represent AI outputs as professional investment, legal, tax, or accounting advice.
  7. Copy the product. Reverse engineer, scrape, or systematically extract the Service or its software except as permitted by law; use the Service to build or benchmark a competing product.
  8. Violate law. Use the Service in violation of applicable laws, including securities, privacy, export-control, and anti-corruption laws.

Navon may suspend access that it reasonably believes violates this policy or threatens the security or integrity of the Service, with notice where practicable, and will restore access once the issue is resolved. Violations may be treated as material breach of the governing agreement.

Report abuse or vulnerabilities: security@navon.vc.