Privacy Policy
Effective date: 6 October 2026 · Navige Ltd, United Kingdom
Plain English summary
Navige is a governance tool deployed by your organisation. It records what your organisation's AI agents and applications do, so the account holder can see and control that activity. Navige does not sell or share this data with anyone outside your organisation.
1. Who we are
Navige Ltd is a UK company providing AI governance infrastructure. Our product intercepts, logs, and governs AI tool calls made by software agents and employees. Contact: hello@navige.ai.
2. What data we collect
- Tool call data — name and parameters of AI tool calls made by agents
- Metadata — timestamp, AI provider, model name, and the agent or workflow a call belonged to
- Account data — name, work email, and company name from signup
- Approximate location — country and city derived from your IP address at signup, used for fraud prevention and product analytics. We do not store your raw IP address.
- Provider billing figures — only if an owner of your account connects a model provider under Provider billing. We then read daily cost totals from that provider (for example Anthropic or AWS) so savings can be checked against the invoice you were actually sent. These are money amounts, dates and model names. We do not read your prompts, responses or token counts, and disconnecting deletes the figures along with the access.
We do not collect AI responses, passwords, payment card numbers (handled by Stripe), or your general web browsing. Where provider billing is connected, we read cost totals only — never the usage or token-level reports those providers also offer.
3. PII masking
Before storing any prompt or tool call argument, Navige automatically detects and masks email addresses, phone numbers, credit card numbers, UK National Insurance numbers, US Social Security Numbers, IBANs, and API keys. The masked version is what gets stored — not the original.
4. Who can see your data
- Your organisation — the Navige account holder can see all logged activity for their tenant
- Navige Ltd — we have read access for support and operational purposes only. We do not access customer data except as required to provide the service
- Third parties — we do not sell, rent, or share data with third parties for advertising
- Railway — our infrastructure provider, hosting our application servers and database
- Polygon blockchain — for organisations that enable blockchain anchoring (an optional feature, free on every plan, off by default), a keccak256 hash of each batch of logs is anchored on-chain, chained to the previous batch's hash for tamper-proof audit integrity. No prompt content or personal data is included in the blockchain record
5. Data retention
- Free plan: 7 days
- Starter plan: 30 days
- Growth plan: 90 days
- Business plan: 1 year
- Enterprise: defined in MSA
6. Your rights (GDPR / UK GDPR)
You have the right to access, correct, delete, restrict, or port your personal data. To exercise these rights, email hello@navige.ai. We respond within 30 days. Where your employer is the data controller, some requests must be directed to them.
7. Security
All data is transmitted over TLS. Data at rest is encrypted by our infrastructure provider. API keys are never stored in plain text — only a one-way hash is kept, and the raw key is shown to you once, at creation. We follow OWASP best practices and conduct regular security reviews.
8. Cookies
Our website and dashboard do not use tracking cookies or third-party analytics.
9. Changes to this policy
We will notify account holders by email of any material changes. The current version is always at navige.ai/privacy.
10. Contact
Navige Ltd · hello@navige.ai · navige.ai