Effective Date: 03.07.2024 

Introduction 

navAI is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and safeguard your personal data when you use our chatbot services, in compliance with Swiss Law and the General Data Protection Regulation (GDPR). We recognize the importance of privacy and are dedicated to protecting your personal information. 

Contacting Us About Data Protection 

navAI is headquartered in Lugano, Switzerland. For any inquiries or concerns regarding our personal data policies or practices, please contact us via email: info@navai.ch 

How We Collect and Use Your Personal Information 

navAI collects personal information from users of our chatbot services. This information includes, but is not limited to: 

• Personal Data: Name, email address, phone number, job title. 

• Usage Data: Interaction logs with the chatbot, including date, time, and content of conversations. 

• Technical Data: IP address, browser type, operating system, and device information. 

We use this information to: 

• Provide and maintain our chatbot services. 

• Improve our services through analysis of usage patterns. 

• Communicate with you and respond to inquiries. 

• Ensure compliance with legal obligations and protect our rights. 

From time to time, navAI receives personal information about individuals from third parties. Typically, information collected from third parties will include further details on your employer or industry. We may also collect your personal data from a third party website (e.g. Google Maps or LinkedIn). 

Cookies and tracking technologies 

Chatbase makes available a comprehensive Cookie Notice that describes the cookies and tracking technologies used on Chatbase website and provides information on how users can accept or reject them. To view the notice, just click Cookie Notice. 

Legal Basis for Processing 

We process your personal data based on the following legal grounds: 

• Consent: When you provide your personal data voluntarily. 

• Contractual Necessity: To perform our contractual obligations or pre-contractual measures. 

• Legal Obligations: To comply with legal requirements. 

• Legitimate Interests: For our legitimate business interests, such as improving our services and ensuring security. 

Data Retention 

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Data that is no longer needed will be securely deleted or anonymized. 

Data Sharing and Disclosure 

navAI does not sell your personal data. We may share your data with third parties only in the following circumstances: 

• Service Providers: With third-party service providers (such as cloud storage and processing services located in the United States) to facilitate our services. 

• Legal Requirements: To comply with legal obligations or protect our rights. 

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. 

Use of Third Party Technology 

Our chatbot utilizes OpenAI’s APIs and / or other APIs, and similar technologies to function. By using our chatbot, you acknowledge that your interactions with the chatbot may be processed by OpenAI’s API, and other tech companies. OpenAI and other companies may collect and process data in accordance with their privacy policy.  

Transferring Personal Data to the U.S. 

The personal data we collect may be transferred to and processed on servers located in the United States. The United States does not have an adequacy decision from the Swiss authorities or the European Commission. To ensure compliance with GDPR, we use Standard Contractual Clauses (SCCs) and implement appropriate safeguards to protect your data. 

Your Rights 

Under the GDPR, you have the following rights regarding your personal data: 

• Right to Access: Request access to your personal data. 

• Right to Rectification: Request corrections to any inaccurate or incomplete data. 

• Right to Erasure: Request the deletion of your personal data. 

• Right to Restrict Processing: Request restrictions on the processing of your data. 

• Right to Data Portability: Request to receive your data in a structured, commonly used, and machine-readable format. 

• Right to Object: Object to the processing of your data based on legitimate interests. 

• Right to Withdraw Consent: Withdraw your consent at any time. 

Data Security 

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. 

Children’s Data 

We do not knowingly collect or solicit personal information from children under the age of 16. If we become aware that we have collected personal information from a child under 16, we will delete that information promptly. 

Changes to This Privacy Policy 

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will notify you of significant changes. 

Questions, Concerns, or Complaints 

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at info@navai.ch.