How Navedas Intelligence collects, uses, stores, and protects your information. We believe governance starts with how we handle your data.
Last updated: April 16, 2026
This Privacy Policy applies to information collected by Navedas Intelligence, Inc. ("Navedas," "we," "us," or "our") through our website at navedas.ai, the CSAT.AI website at csat.ai, and the Navedas Intelligence platform (collectively, the "Services").
This policy covers two categories of data: (a) information about you as a visitor, prospect, or account holder, and (b) data that your organization processes through the Platform. For Platform data, your organization is the data controller and Navedas Intelligence acts as the data processor. The processing of Platform data is governed by your Data Processing Agreement (DPA) in addition to this policy.
When your organization uses the Platform, we process the data categories defined in your service agreement. This may include customer interaction records, transaction data, agent activity logs, policy documents, and compliance records. We process this data solely as instructed by your organization.
We use the information we collect for the following purposes:
We do not use your data to train machine learning models. We do not sell your personal information to third parties.
The Navedas Intelligence platform processes your organization's operational data in real time to evaluate decisions against your Context Graph (your structured policy rules). This section describes how that processing works.
When a decision event enters the Platform, the system evaluates it against the relevant policies in your Context Graph. Each evaluation produces a Reasoning Ledger entry that records the decision inputs, the policies consulted, the reasoning steps, and the outcome. This processing is deterministic: the same inputs and policies always produce the same result.
Each customer's data is logically isolated within the Platform. Your policies, transaction data, and Reasoning Ledger entries are never accessible to other customers. We use role-based access controls, encryption at rest, and encryption in transit to protect your data.
We do not use customer Platform data to train, fine-tune, or improve machine learning models. Your data is processed solely to deliver the governance services you contracted for.
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account plus 12 months |
| Billing records | 7 years (tax and regulatory compliance) |
| Platform data | As defined in your service agreement, plus 30-day deletion window |
| Reasoning Ledger entries | As defined in your service agreement (immutable during retention period) |
| Website analytics | 26 months |
| Support communications | Duration of account plus 24 months |
Upon account termination, we provide a 30-day data export window. After that, Platform data is permanently deleted from our production systems within 90 days. Backup copies are purged within 180 days.
We do not sell, rent, or trade your personal information. We share information only in these circumstances:
We maintain a list of sub-processors used to deliver the Platform. This list is available upon request and is included in our Data Processing Agreement.
We use cookies and similar technologies on our websites. Here is what we use and why:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Authentication, security, session management. Required for the Platform to function. | Session / 30 days |
| Functional | Remembering your preferences, language settings, and display options. | 12 months |
| Analytics | Understanding how visitors use our websites. We use privacy-focused analytics that do not track users across sites. | 26 months |
| Marketing | Measuring the effectiveness of our marketing campaigns. Only set with your consent. | 12 months |
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality. Marketing cookies are only set with your explicit consent.
We implement technical and organizational measures to protect your data, including:
No method of transmission or storage is 100% secure. If we become aware of a security breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.
For details on our security program, visit our Security & Compliance page.
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:
To exercise these rights, contact us at privacy@navedas.ai. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Legal basis for processing: We process personal data based on contractual necessity (account management, service delivery), legitimate interests (product improvement, security), consent (marketing communications), and legal obligations (regulatory compliance).
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:
To submit a CCPA request, contact us at privacy@navedas.ai. We will verify your identity before processing the request and respond within 45 days.
Navedas Intelligence is headquartered in San Francisco, California, with operations in Bhubaneswar, India. Your data may be transferred to and processed in the United States or other countries where our service providers operate.
For transfers of personal data from the EEA, UK, or Switzerland, we rely on:
We conduct transfer impact assessments for each data transfer mechanism to ensure your data receives an adequate level of protection regardless of where it is processed.
The Platform is designed for business use and is not directed at individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us at privacy@navedas.ai and we will promptly delete it.
Our websites may contain links to third-party websites or services that are not operated by Navedas Intelligence. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site you visit.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page with a revised "Last updated" date.
For material changes, we will notify you by email or through a prominent notice on our website at least 30 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
Navedas Intelligence, Inc.
San Francisco, California
Email: privacy@navedas.ai
General inquiries: hello@navedas.ai
For GDPR-related inquiries, you may also contact our Data Protection Officer at dpo@navedas.ai.