Privacy Policy

Information the marketing site collects

The website collects information a visitor chooses to submit through the contact or demo form. The hosting and email providers may also process ordinary technical request data needed to deliver the site and defend their services.

• Name, work email, company name, and optional phone number
• Contact reason and message
• For demo requests, team-size range and a description of the workflow to discuss
• Technical request data such as IP address, user agent, request time, and error information when processed by the hosting infrastructure

How the information is used

Submitted information is used to route and answer an inquiry, arrange a requested demo, respond to support, privacy, or security questions, protect the forms from abuse, and maintain the website.

This repository does not include advertising technology, behavioral analytics, payment processing, account authentication, a marketing database, or a file-upload feature. If those practices change, this policy and the cookie notice must change before the new processing begins.

Service providers and data movement

The accepted deployment architecture uses Vercel to host the website and Resend to deliver inquiry emails when email credentials are configured. Those providers process data under their own terms and infrastructure practices. Their final account configuration, processing locations, contractual role, and retention behavior must be confirmed before launch.

Napdav does not promise a specific data-residency location in this draft. Visitors with residency or transfer requirements should contact privacy@napdav.com before submitting sensitive information.

Legal basis

The appropriate legal basis depends on where the visitor and the eventual legal controller are located. Common bases may include taking steps requested before a contract, responding to a consented inquiry, and legitimate interests in operating and protecting a business website. Qualified counsel must confirm the applicable bases and required notices.

Retention

Inquiry information should be retained only as long as needed to answer the request, maintain an appropriate business record, resolve a dispute, and meet legal obligations. No approved duration was supplied, so this draft does not invent one.

Before launch, Napdav should define and document separate periods for sales inquiries, support conversations, privacy and security requests, provider logs, and any product records.

Your choices and rights

Depending on location and applicable law, a person may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. The legal controller and jurisdiction must be confirmed before the final policy describes the exact rights and response process.

Privacy requests may be sent to privacy@napdav.com. Do not send identity documents or other sensitive verification material until a safe verification method is provided.

Security

The marketing application validates inquiry input, keeps configured email credentials server-side, applies defensive HTTP headers, and uses low-effort abuse controls. No internet service can guarantee absolute security.

Product controls such as encryption at rest, role-based access, tenant isolation, backup recovery, audit history, retention, deletion, and incident response require separate verification and are not claimed by this policy draft.

Children

Napdav is presented as a business operations service and is not directed to children. A final policy must define any applicable age threshold based on the markets where the service is offered.

Changes and contact

A material change to website or product data practices should be reflected here before it takes effect, with the effective date updated. Where law or contract requires additional notice, Napdav should provide it through an appropriate channel.

Privacy questions may be sent to privacy@napdav.com. A final policy must also identify the full legal controller name and a valid postal address.