Privacy Policy

1. Who we are

Nava is a mobile back-office system that provides services to sellers and buyers in Thailand. Nava processes the data of individuals in Thailand and is fully subject to the Personal Data Protection Act B.E. 2562 (2019) (PDPA).

In general, the seller (shop) is the Data Controller of its own customers' data, and Nava is the Data Processor that provides the tools. For data that is necessary for the operation of the platform itself (sellers' user accounts and service-fee payment records), Nava is also a Data Controller.

2. Data we collect

Seller data:

• Shop name, phone number, email address and PromptPay number (to generate payment QR codes)
• Shipping address for parcels sent from the shop
• LINE / Meta channel connection tokens (encrypted before being stored)
• Product photos and product information uploaded by the seller
• Order history, sales and usage statistics
• Information required under tax law (for those who sign up for a paid, billed service)

3. Buyer data (the shop's customers)

When a buyer makes a transaction with a shop that uses Nava, we may collect the following data on the shop's instructions:

• Name and phone number used for delivery, and shipping address
• LINE user ID (LINE userId) or Meta PSID (Page-Scoped ID), when the customer messages the shop through a chat channel
• Chat messages the customer sends to the shop (both text and images)
• Transfer slips the customer sends to confirm payment (which contain the sender's name, bank, account number, amount, and date and time)
• Order history with that shop
• If the shop owner switches on "Help check the AI" (Settings → Account): the Nava team reads chats where the AI drafted an order for that shop, and chats that ended in an order the AI didn't draft, from after the date it was switched on and for up to 30 days, only to check and improve the AI's accuracy. Every view is logged. Only the grading (right/wrong) is kept; names, phones and addresses aren't copied. The shop can switch it off any time, which stops access at once. If it's off, no one at Nava reads the shop's chats for this.

4. Legal basis for processing

We process your data on the following bases, under Section 24 of the PDPA:

• Performance of a contract: to provide the services you signed up for (generating payment QR codes, shipping and order management)
• Legitimate interests: to prevent fake slips, keep the system secure and improve our services
• Consent: for any use of data beyond the above (such as sending marketing communications), we will ask for your explicit consent
• Compliance with law: for data that must be kept under tax or accounting law, or by order of a government authority

5. Disclosure of data to third parties

Nava does not sell your data under any circumstances. We share data only with service providers that are necessary for our operations, under each provider's contract or terms of service:

• Cloud infrastructure providers (web and API hosting, database and file storage) in the Southeast Asia region. Data is encrypted before being stored.
• The chat channels the seller chooses to connect (LINE OA, Facebook Messenger), to send and receive messages and webhooks
• A slip verification provider that checks slips against real bank data in Thailand. Only the slips that need to be verified are sent; no other data is sent.
• The shipping carriers the seller chooses. Only the data necessary for delivery is sent (name, address and contact number).
• A monthly subscription billing provider (used only to bill sellers for the service; buyers are not involved)
• AI model providers for AI-drafted orders from chat and the sales assistant. What is sent: the chat messages behind that order (the buyer's and the shop's, which may include a name, phone number and address the buyer typed; no images) and, when a product needs matching, the shop's product names and options.
• Main provider: Anthropic (Claude models). Data is stored in the United States. Under Anthropic's terms, data sent through the API is not used to train models and is deleted within 30 days (unless a message is flagged for breaking its usage policy, which can be kept longer for safety review).
• Backup provider: DeepSeek, used only when Anthropic is unavailable for a long time, switched on by Nava and announced on this page (normally the system retries with Anthropic instead of sending anywhere else). DeepSeek processes and stores data in the People's Republic of China, states no fixed retention period, and under its policy may use data to improve its models unless an opt-out is requested. Nava has requested that opt-out.
• The names of specific providers are restricted-disclosure information. You can request the list at support@navaseller.com for compliance review purposes or under a valid legal request.

6. Data retention periods

We keep data only for as long as necessary for the purposes for which it was collected. The retention policies enforced automatically by the system are:

• Transfer slips (images): 90 days after payment. After that, the system automatically deletes the images from the server (the transaction record is kept for accounting purposes, but without the image).
• Raw chat-channel data (raw webhook payloads): 90 days. After that, the system deletes it automatically (the message text itself remains, as part of the seller's conversation history).
• Personal data inside AI order drafts (name, phone, address the AI read): 30 days, then deleted automatically (orders the shop confirms are kept as below)
• Order data, purchase history and customer data: kept for the accounting retention period (generally 5 years) and as determined by the seller.
• Seller user accounts: kept for as long as you use the service. After you cancel the service, you can still access and export your data for at least 90 days. Your data will be deleted within 30 days after the export window ends, or right after cancellation at your explicit request, except for data that must be kept under tax or accounting law.

7. Data subject rights

You have the following rights under the PDPA:

• The right to access and obtain a copy of your data
• The right to have your data corrected
• The right to have your data erased (the right to be forgotten). See the steps on the /data-deletion page.
• The right to object to processing
• The right to data portability
• The right to withdraw your consent at any time
• The right to lodge a complaint with the Personal Data Protection Committee

8. Data security

We use technical and organizational measures to protect data:

• TLS encryption for all data transmitted over networks
• Industry-standard encryption of chat-channel connection tokens before they are stored in the database
• Encryption at rest provided by our database and file storage providers
• Row-Level Security access controls that keep each shop's data separate from every other shop's
• Logging of access to, and changes to, important data in an audit trail table

9. Cross-border data transfers

Your data may be transferred to servers in the Southeast Asia region (Singapore) and in other countries where our infrastructure providers are located.

Chat messages used for AI order drafting are sent to our AI provider in the United States (see section 5). Only while Nava has switched on the backup provider, and said so on this page, are they sent to the People's Republic of China, where they may not be protected to the same standard as under the PDPA. We send only the chat messages needed to draft the order, and no images, including slip images.

10. Contact and representative in Thailand

If you have any questions about this policy, wish to exercise your rights as a data subject, or wish to file a complaint, please contact us at support@navaseller.com. For data deletion requests specifically, see the step-by-step instructions on the /data-deletion page.

Nava's contact representative for personal data matters in Thailand (under Section 37 of the PDPA): contact support@navaseller.com with the subject "PDPA / Legal". We respond within 30 days, as required by the PDPA.

If you are a customer of a shop that uses Nava, you can contact that shop directly through the chat channel you already use. The shop is the primary controller of your data and can delete your data from within the system immediately.