Privacy | Navigatu

What Navigatu and this website do with your information, in plain words.

Last updated: 2026-10-13

The short version

We collect what we need to run your company's account and deliver, store and show your mail. Nothing more.
We do not sell your information. We show no advertising and do not track you across other companies' apps or websites.
Our staff cannot see your mail. The only exception is mail that you choose to show us, for a limited time, with every view logged where you can see it.
Your data is stored with Amazon Web Services in Mumbai, India.

Who we are

Navigatu is operated by Subendran RV, Coimbatore, Tamil Nadu, India.

Questions about privacy: our Contact page .

Who this policy covers

Navigatu is business email for a company's own domain. A company signs up, connects its domain, and adds its users. This policy covers the person who signs up the company, the users the company adds, and visitors to navigatu.com. Navigatu is for business use only.

The company accepts our terms when it signs up. Each user the company adds accepts a short user notice when they first sign in.

What we collect, and why

When a company signs up

The person signing up: full name, a work email address, and a password. The work email can be any existing address, because the company's domain is not connected yet. We send a code to it to verify it before the domain is added.
The company: its name, its domain (for example, example.com), its country, and the number of users it expects. We use the country for tax and invoices, and the number of users to suggest a plan.
Your agreement to these terms and this policy.
Optional: a phone number, used for account recovery.
When the company subscribes: a billing address.

The company's domain

To connect your domain, you add records to its DNS. Navigatu checks those records automatically, every few minutes for 72 hours after sign-up, and whenever you press "Check now", to tell you whether the domain is connected and, if not, which record is missing or wrong.

The users the company adds

The company's admin adds users. For each one we keep what the admin enters and the mail addresses on the company's domain that belong to that user.

Your mail

This is the heart of the service, and what most of this policy is about. For every mailbox we store:

the messages it receives and sends, including their bodies, subjects, attachments, and the sender and recipient lists;
drafts;
how mail is organised in the mailbox, for example what is in Trash.

We store mail so that we can deliver it, show it to you on the web and in the iPhone, iPad, Mac and Android apps, and so you can search it.

During the trial

While a company is on its trial, it can send only to recipient addresses it has approved, and we keep that list of approved addresses.

Support access to your mail

If you give our staff access to some of your mail (see "Our staff and your mail" below), we keep a record of that grant and a log of every time our staff viewed a granted mail. You can see that log.

Emails we send you

We send the mail the account needs: the code that verifies your email address, notices about the trial and about payment, and the notices before an unpaid company is deleted.

Our staff and your mail

Navigatu's staff never see your mail without your permission. No staff role, permission or approval gives access to mail content, and that includes the owner of Navigatu. Mail content means message bodies, subjects, attachments, drafts, and the sender and recipient lists of messages.

The only way in is a grant that you create:

Who can grant it: your company's admin, or a user for their own mailbox, from their own settings.
Only the mails you choose. The grant names the specific mails or conversations. Our staff see those and nothing else.
For a limited time. You choose how long: currently 1, 24 or 72 hours. Access ends when that time is up, or sooner if you end it.
With your knowledge. You give a reason when you grant it, every view by our staff is logged, and you can see that log.

No support action, including a password reset, is a way around this.

The one exception is where the law requires us to disclose information (see "Who we share it with").

How we use it

To run your company's account, connect your domain, deliver, store and show your mail, apply the trial and payment rules described below, keep the service secure and fair, and answer you when you write to us. We do not use your mail for advertising, and we do not train AI on it.

Mail is scanned automatically for spam and viruses, using the verdicts of Amazon Web Services' email service. This is done by machine; it does not give our staff any view of your mail.

Who we share it with

We do not sell your information and we do not share it for advertising. We do not track you across other companies' apps and websites.

The people you write to. Mail you send is delivered to its recipients and passes through their mail providers. That is how email works.
Amazon Web Services stores and processes your data for us, in the Mumbai region. Amazon Web Services also receives and sends our mail through its email service (SES), in the Mumbai region. It acts on our instructions.
Our payment provider takes payment when your company subscribes.
The law. We will disclose information only where the law requires it.

Where your data is kept

On servers run by Amazon Web Services in the Mumbai (ap-south-1) region, India. If you use Navigatu from outside India, your information is sent to India to be stored.

How long we keep it

While your company's account is open, we keep your mail so you can read it on every device and program you use.
Trash is emptied after 30 days.
When a company's account is deleted, there is a 24-hour window in which the deletion can be cancelled. When the window closes, the account's content is deleted: it is no longer served and can no longer be exported. Any remaining copies are permanently erased 30 days later.
When a company has gone 30 days unpaid, whether after its trial ended, after a later payment failed, or after a cancellation took effect, the account is scheduled for deletion. We email the company about it on days 1, 7, 21 and 29, counted from the first unpaid day. Paying before the deletion takes effect cancels it. Otherwise the account is deleted in the same way: a 24-hour window, then the content is deleted, and remaining copies are permanently erased 30 days later.

When a trial ends unpaid, a payment fails, or a cancellation takes effect

If a company's trial ends without payment, a payment fails after it has subscribed, or its cancellation takes effect at the end of the paid period, the following applies.

New mail is blocked, incoming and outgoing, until the company pays.
Your existing mail stays yours. Users can still sign in, read, search and export the mail already in their mailboxes.
Incoming mail is held, not delivered and not bounced, for 7 days. After 7 unpaid days, new incoming mail is rejected, so that the people writing to you learn that it was not delivered. Mail already held stays held until the company pays, when it is released into the mailboxes, or until the account is deleted.
After 30 unpaid days, the account is scheduled for deletion, with notices on days 1, 7, 21 and 29. Paying before the deletion takes effect cancels it (see "How long we keep it").

Your choices: export and delete

Export your mail. Users can export their existing mail, and that remains possible after a trial ends unpaid.

Delete the account. Only the company's owner or admin can ask for the company's account to be deleted. There is a 24-hour window in which the deletion can be cancelled. When it closes, the content is deleted, and remaining copies are permanently erased 30 days later.

Everything else: to correct or ask about your information, write to our Contact page .

Security

In transit: TLS for our apps, website and API; between mail providers, TLS whenever the other server supports it.
At rest: the database and mail storage are encrypted with AWS-managed encryption.
Every rule about who can see what is enforced on our server, not in the app.
No system is perfectly safe, and we cannot promise it.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and tell signed-in users in the app or by email before the change takes effect.

Contact

Write to our Contact page .