Privacy Policy

Last updated: May 30, 2026

Naviontel ("we", "us", "our") operates the naviontel.com website and the Naviontel indoor wayfinding platform. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service.

1. Information We Collect

We collect information you provide directly to us, including:

• Demo request form: full name, work email, company, job title, phone, country, venue type, venue size, and your message.
• Account registration: email address and password (hashed, never stored in plaintext).
• Wayfinding sessions: anonymized route requests, floor transitions, and session durations for analytics. No personally identifiable information is attached to sessions unless explicitly linked by the venue operator.

2. How We Use Your Information

• To respond to demo requests and schedule guided walkthroughs.
• To provide, maintain, and improve the Naviontel platform.
• To generate aggregated, anonymized movement analytics for venue operators (foot traffic heatmaps, route popularity, dwell time).
• To send service-related notifications (account, security, platform updates).

3. Data Sharing

We do not sell, rent, or trade your personal data. We may share information only in the following circumstances:

• With venue operators: anonymized session analytics for the specific building in which you navigated.
• With service providers: hosting (VPS provider), email delivery (Hostinger SMTP), and SSL certificate authorities — strictly to operate the platform.
• Legal obligations: if required by law, regulation, or valid legal process.

4. Data Retention

Demo requests are retained for up to 24 months or until you request deletion. Wayfinding session data is retained for 12 months, then permanently deleted or anonymized. Account data is retained for as long as the account is active.

5. Data Security

All data is transmitted over HTTPS (TLS 1.2+). Passwords are hashed with bcrypt (cost 12). Database credentials are stored in server-only environment files (never in version control). Direct database administration tools require two separate authentication layers.

6. Cookies

We use a single session cookie (nv_session) required for admin authentication. We do not use advertising cookies, tracking pixels, or third-party analytics scripts on the public site.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing privacy@naviontel.com. Philippine residents have additional rights under the Data Privacy Act of 2012 (RA 10173).

8. Children's Privacy

Our Service is not directed to individuals under 13. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@naviontel.com.