Privacy Policy
Last updated: 19 July 2026
This Privacy Policy explains how Business Navigator ("we", "us") collects, uses and protects information you provide when using our subscription service at businessnavigators.net.
This document is a working template maintained by the app owner. It is not legal advice; have it reviewed by a qualified lawyer before public launch.
1. Data controller
Business Navigator is the data controller for personal data processed through this service. Contact: privacy@businessnavigators.net. privacy@businessnavigators.net.
2. What we collect
- Account data — name, email, company, industry, city.
- Billing data — processed by Stripe. We store subscription status and plan only; card details never touch our servers.
- Usage data — pages visited, features used, aggregated to improve the product.
- Content you provide — profile settings, saved opportunities, notes.
3. Why we process it (GDPR legal basis)
- Deliver the service you subscribed to (Art. 6(1)(b) — contract).
- Comply with tax, accounting and consumer-protection law (Art. 6(1)(c)).
- Improve product performance and prevent fraud (Art. 6(1)(f) — legitimate interest).
- Marketing emails only with explicit consent (Art. 6(1)(a)).
4. Where your data lives
Application data is hosted in EU data centers. Payments run through Stripe (Ireland/US, SCCs in place). Emails are sent from EU infrastructure. Data is encrypted in transit (TLS 1.2+) and at rest.
5. How long we keep it
Account data: while your subscription is active + 30 days. Invoices: 10 years (Bulgarian accounting law). Backups: 30 days rolling.
6. Your rights
You can request access, correction, deletion, portability or restriction of your data at any time by emailing privacy@businessnavigators.net. You may also complain to the Bulgarian Commission for Personal Data Protection (CPDP). privacy@businessnavigators.net.
7. Sub-processors
- Stripe — payment processing
- Supabase (Lovable Cloud) — application database and auth
- Cloudflare — CDN and DDoS protection
8. Cookies
We use essential cookies for authentication and session state only. No third-party ad tracking.
9. Changes
Material changes will be announced by email at least 14 days before taking effect.