Navaro Privacy Policy

011. Introduction & Scope

Navaro Solutions Co., Ltd.
("Navaro", "we", "us", or "our") is committed to protecting your privacy and personal data.
This Privacy Policy outlines how we collect, use, store, protect, and share information when you visit navaro.vn, use the Navaro ERP cloud platform, or download and interact with Navaro Mobile Applications (available on iOS via the Apple App Store and Android via Google Play Store).
This policy applies to all users, including enterprise administrators, staff members, and customers using services or applications developed and operated by Navaro.
By accessing or using our Services and Applications, you acknowledge that you have read, understood, and agree to the terms described in this Privacy Policy.

022. Information We Collect

Depending on how you interact with Navaro through the Web or Mobile App, we may collect the following categories of information:

033. Mobile App Permissions & Device Features

To deliver full ERP capabilities on mobile devices, the Navaro Mobile App may request access to certain hardware features.
We only access these permissions with your explicit consent and strictly for the following purposes:

044. How We Use Information

We process information strictly for legitimate, transparent operational purposes:

• Provide, operate, and maintain Navaro ERP services with real-time data synchronization between Web and Mobile App.
• Authenticate user identity and enforce granular Role-Based Access Control (RBAC).
• Send operational push notifications, OTP verification codes, security notices, and timely technical support.
• Monitor system performance, troubleshoot technical anomalies, debug errors, and improve product features.
• Safeguard system security, prevent unauthorized access, mitigate fraud, and defend against cyber threats.
• Fulfill regulatory, accounting, and legal compliance obligations under applicable law.

055. Data Sharing & Third-Party Services

Navaro does not sell, rent, or trade your personal or business data to any third party for independent advertising or commercial purposes.
We only share information under the following limited conditions:

066. Data Security & Protection Standards

Navaro applies robust, enterprise-grade information security practices to safeguard data against unauthorized access, loss, or alteration:

• End-to-End Transit Encryption: All network traffic between client browsers/mobile apps and our servers is secured via HTTPS with 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive data fields and credentials are encrypted and stored using salted one-way cryptographic algorithms.
• Strict Role-Based Access Control (RBAC) ensuring employees access only the data specifically permitted by their enterprise administrators.
• Comprehensive Audit Logging: Every critical business operation and administrative action is immutably logged for auditability.
• Web Application Firewalls (WAF), anti-DDoS defenses, and multi-region automated backup schedules.

077. User Rights & Account / Data Deletion Instructions

You have full control over your personal data, including rights to access, rectify, export, or request permanent deletion of your account and personal identifiers.

088. Data Retention Policy

We retain personal and corporate business data for as long as your account remains active and the service agreement with Navaro is in force.
Upon account termination, data is held in an encrypted grace-period archive before undergoing permanent secure erasure.

099. Children's Privacy

Navaro services and mobile applications are enterprise software tools intended strictly for organizations and working-age professionals.
We do not knowingly collect or solicit personal data from children under 13 (or under 16 where applicable by law).
If we become aware that a child has provided us with personal information without parental consent, we will delete that data immediately.

1010. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect app updates, product features, operational practices, or legal requirements.
Material updates will be communicated on our website, in the mobile app, or via email notification prior to taking effect, and the 'Last updated' date will be revised.