Privacy Policy

1. Who we are and what this policy covers

Navisight provides AI for procurement execution. Once a purchase order has been sent, our platform follows up with suppliers, tracks delivery progress and identifies execution risks, from PO to goods receipt.

This policy covers two things:

• This website, navisight.ai, including the demo request form.
• The Navisight platform, which we operate for business customers under a separate written agreement.

In this policy, "Navisight", "we" and "us" mean Navisight. Our operations run from Dubai, United Arab Emirates, and Colombo, Sri Lanka.

2. Our two roles: controller and processor

The distinction below determines who is accountable for a given piece of information, and who you should approach about it.

On this website, we are the controller

We decide what the demo request form asks for and what we do with the answers. If you fill in that form, this policy governs the result and you can contact us directly about it.

In the platform, we are a processor

When a customer runs Navisight against their purchase orders, we handle their data, and their suppliers' data, on their instructions and under their agreement with us. The customer remains the controller. We do not decide what that data is used for and we do not use it for our own purposes.

3. Information we collect through this website

Information you give us

The demo request form is the only form on this website. It asks for:

• Required: your full name, work email address and company name.
• Optional: your role, your country, the ERP system you use, your approximate monthly purchase order volume, and a free text note describing what you would like a pilot to cover.

You may also contact us directly by email at hello@navisight.ai or by telephone. If you do, we hold whatever you choose to tell us.

Information collected automatically

When you submit the demo form, our server briefly holds the IP address the request came from so it can enforce a rate limit and block automated abuse of the endpoint. This is held in the server's memory only, for a rolling ten minute window, and is never written to a database or attached to your enquiry.

The form also carries a hidden field that human visitors never see or complete. It exists to catch automated submissions. Its contents are discarded.

As with any web server, routine operational logs may briefly record technical details of a request, such as an IP address, browser type and the time of the request. We use these only to keep the service running and secure.

4. Cookies, analytics and tracking

This website sets no cookies and runs no analytics. There is no Google Analytics, no advertising pixel, no session recording, no consent banner, and no cross-site tracking of any kind. We do not build a profile of you from your visit.

Two points of detail, in the interest of being complete:

• Our footer displays an accreditation badge that is served from uaestartupstory.com. Loading that image means your browser makes a request to their server, which will see your IP address, browser type and the page you came from. This is the only third-party request this site makes while you are reading it.
• The fonts used on this site are served from our own servers, not from a third-party font service, so no request leaves your browser to load them.

5. How we use this information

We use the information you submit through this website to:

• Respond to your demo request or enquiry, and arrange a conversation.
• Understand your procurement setup well enough to scope a useful pilot, which is why we ask about ERP and purchase order volume.
• Send you information you have asked for about Navisight.
• Keep our website secure and prevent abuse of the demo form.
• Meet our legal and record keeping obligations.

We do not sell your information. We do not share it with advertisers or data brokers, and we do not use it to train publicly available AI models.

6. Our legal bases for processing

Where data protection law requires us to identify a legal basis, we rely on the following:

Your request

When you submit the demo form, you are asking us to get in touch. We process what you sent us in order to do that.

Legitimate interests

We have a legitimate interest in responding to business enquiries, in keeping our website secure, and in maintaining ordinary business records. We balance that against your interests, which is part of why this site collects so little.

Legal obligation

We keep certain records where the law requires it.

Contract

Where we process data to deliver the Navisight platform, we do so under our agreement with the relevant customer.

7. Who we share information with

We share information only where it is necessary to run the business, and only with parties bound to protect it.

We may also disclose information where we are required to by law, by a court, or by a regulator, and where necessary to protect our rights or the safety of others. If we are ever involved in a merger, acquisition or sale of assets, information may transfer as part of that, and we would tell affected people.

8. Information Navisight processes for customers

This section describes the platform rather than this website. When a customer runs Navisight against their purchase orders, the system handles:

• Purchase order records and their stage in the process, from PO sent through supplier commitment, production, dispatch and transit, to goods receipt.
• Supplier contact details, and correspondence with suppliers by email and messaging channels such as WhatsApp. Every message is logged against the relevant purchase order.
• Delivery commitments, dates, service level targets and escalation history.
• Import and shipping documentation where the customer's process involves it.
• Where the customer connects their ERP, the purchase order and goods receipt records needed to cross-check delivery.

That information belongs to the customer. We process it on their documented instructions, we do not use it for our own commercial purposes, and we do not disclose it to anyone else except as their agreement with us permits or the law requires. Customers can connect an ERP or run Navisight entirely from an email inbox, and that choice determines how much we ever see.

9. AI processing and human oversight

Navisight uses AI to read supplier correspondence, track the state of each purchase order, draft follow-up messages and flag execution risk. Three things are worth stating plainly about how that works:

1. Navisight drafts, and the customer's team approves. Follow-ups are prepared automatically, but the customer decides what is sent.
2. Decisions stay with people. When Navisight identifies a discrepancy or a risk, it raises it with the relevant contact inside the customer's organisation. It does not make the commercial decision.
3. Messages are sent on the customer's behalf, from a named contact in their team, as part of their normal supplier correspondence.

We do not use customer data or supplier correspondence to train publicly available AI models.

10. Where information is processed

Navisight operates from the United Arab Emirates and Sri Lanka, and uses service providers that may process data in other countries. This means information you give us may be transferred to and handled in a country other than your own.

Where we make such a transfer, we take steps to ensure the information remains protected to a standard consistent with the law that applies to it, including by using providers that offer appropriate contractual safeguards.

11. How long we keep information

We keep information only as long as it is useful for the purpose it was collected for, or as long as the law requires.

• Demo requests and enquiries: kept while we are in contact with you and for a reasonable period afterwards as a business record. If a conversation goes nowhere, we remove the record.
• Rate limiting data: held in server memory for a rolling ten minute window, and lost entirely whenever the server restarts.
• Customer platform data: retained for the term of the customer agreement and handled at the end of it as that agreement specifies.

You can ask us to delete your enquiry at any time. See section 13.

12. Security

Your data is encrypted in transit and at rest. We follow industry standard security practices, apply access controls so that staff can reach only the data their role requires, and can provide further detail on request.

No system is perfectly secure, and we will not claim otherwise. If we become aware of a breach affecting personal information, we will act promptly and notify affected parties and regulators where the law requires it.

13. Your rights

Depending on where you are and which law applies, you may have the right to:

• Ask what personal information we hold about you and get a copy of it.
• Have inaccurate information corrected.
• Ask us to delete information we no longer need.
• Object to or ask us to restrict a particular use.
• Withdraw consent where our processing relies on it.
• Ask to receive information you gave us in a portable format.
• Complain to your data protection authority.

To exercise any of these, email hello@navisight.ai. We will respond within the period the applicable law allows, and we may need to verify your identity first. Exercising these rights costs nothing.

If you are a supplier or a customer's employee

Where we hold your information as a processor for one of our customers, that customer decides what happens to it. Please direct your request to them. If you approach us instead, we will pass the request on to them promptly and assist them in answering it.

14. Children

Navisight is a business product sold to organisations. This website and the platform are not directed at children and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

15. Changes to this policy

We may update this policy as the product and the business change. When we do, we will revise the date at the top of this page. If a change materially affects how we handle your information, we will take reasonable steps to tell you directly.

16. How to contact us

For any question about this policy, about information we hold, or to exercise a right described above:

See also our Terms of Use, which govern your use of this website.