Privacy Policy
This policy describes how Naïve collects, uses, and protects your information when you use our platform.
Naïve ("we," "us," "our") respects your privacy. This Privacy Policy explains how we handle your information when you use our platform at naive.ai and app.usenaive.ai (the "Service"). Please read it carefully.
Overview
Naïve ("we," "us," "our") operates the platform at naive.ai and app.usenaive.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you consent to the practices described in this policy.
Information We Collect
2.1 Information You Provide
- Account information: Name, email address, password, company or organization name, and billing details when you register or update your account.
- Content: Text, images, files, data, and other materials you upload or generate through the Service, including instructions and configurations for the AI Agent.
- Communications: Messages you send to us (e.g., support requests, feedback) and information you provide when you authorize third-party integrations.
2.2 Information Collected Automatically
- Usage data: How you use the Service, including feature usage, Agent actions performed, credit consumption, and interaction patterns.
- Device and log data: IP address, browser type, operating system, device identifiers, access times, and referring URLs.
- Cookies and similar technologies: We use cookies, local storage, and similar technologies to operate the Service, maintain sessions, and analyze usage.
2.3 Information from Third Parties
When you connect third-party platforms (e.g., Google Search Console, analytics providers, CMS platforms), we receive data authorized by you through those integrations. We process such data in accordance with the permissions you grant and the third party's terms.
How We Use Your Information
- Provide, operate, maintain, and improve the Service
- Process and fulfill your requests, including AI Agent automation and third-party integrations
- Authenticate users, manage accounts, and process payments
- Send transactional emails, support communications, and service-related notices
- Analyze usage patterns, monitor performance, and enhance the Service
- Comply with legal obligations, enforce our Terms of Service, and protect our rights and the rights of others
Legal Basis for Processing (EEA/UK)
For users in the European Economic Area and United Kingdom, we process personal data based on: (a) performance of our contract with you; (b) your consent where applicable; (c) our legitimate interests in operating and improving the Service; and (d) compliance with legal obligations.
Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. Upon account deletion, we delete or anonymize your data within 90 days, except where retention is required by law (e.g., tax, legal compliance) or for legitimate business purposes (e.g., dispute resolution).
Data Security
We implement commercially reasonable technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
Your Rights and Choices
9.1 Account Settings
You may access, update, or correct your account information at any time through the Service settings.
9.2 EEA/UK and Other Jurisdictions
Depending on your location, you may have rights to access, rectify, erase, restrict processing, object to processing, or receive a copy of your data in a portable format. You may also have the right to lodge a complaint with a supervisory authority. To exercise these rights, submit a request through the Service.
9.3 California Residents (CCPA/CPRA)
California residents have rights to know what personal information we collect, request deletion, opt out of the sale or sharing of personal information, and non-discrimination. We do not sell personal information as defined under the CCPA. To exercise your rights, submit a request through the Service.
International Transfers
Your information may be transferred to and processed in countries other than your own, including the United States. We take appropriate safeguards (e.g., Standard Contractual Clauses, adequacy decisions) to ensure your data receives adequate protection in accordance with applicable law.
Children
The Service is not intended for users under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please notify us through the Service and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before they take effect. The "Last updated" date below reflects the most recent revision. Continued use of the Service after the effective date constitutes acceptance of the updated policy.