Privacy Policy

01Who we are

Navo UGC ("Navo", "we", "us") runs short-form video campaigns for products. Clippers make and post clips and are paid for their verified views: on a pay per view campaign a fixed amount per 1,000 verified views, on a creator pool campaign a share of the pool based on their share of the campaign's verified views. This policy explains how we handle personal data on navougc.com, in the clipper portal (navougc.com/app) and on our waitlist.

Navo UGC is the controller of this data. It is run by the Navo UGC team. You can reach us about anything in this policy at support@navougc.com.

02What we collect

When you create a clipper account and use the portal:

From public sources: to verify your linked accounts and count views, we look at your public social media profile (to find your verification code in your bio) and at the public posts you submit (to check the content and read the view count). Account checks are automatic: when you link an account or press Check now, our server reads the public profile of that username from TikTok, Instagram or YouTube (for YouTube through Google's official YouTube Data API) a few times over the next 30 minutes. We only store the result (code found or not, and when), never your bio text.

When you join the waitlist: your email address, the platform you post on most, your place in the queue, the invite code you used (if any) and where your visit came from (campaign tags in the link, and the website that sent you, such as x.com). To stop spam we also keep a scrambled (salted hash) version of your network address for a short time; it cannot be turned back into the address. People who joined before 26 September 2026 may also have given a social media handle, content niche, country and average views per video. If you joined our earlier brand waitlist, we also hold your name, work email, company name, website, business category and monthly budget range.

When you send a support report through the website or the portal: the category you pick, your message and our replies, the clip, account or campaign it is about, up to 3 screenshots (kept in private storage), and basic technical details: the page, your browser, screen size and app version. If you write to us from the Help page without logging in, we also store the email address you give us so we can answer. We do not store your IP address, only a one-way hash of it that we use to stop spam.

When you create an account (or the first time you log in after 1 October 2026): we ask how you found Navo (for example TikTok, a friend or Google, or a few words if you pick Other). We use the answers, counted together, to see which channels bring clippers. You can ask us to delete your answer.

When you use the Help page: if you answer "Was this helpful?" we store the answer you voted on and your vote, and if a search finds nothing we store the search words. Neither is linked to your account or email, and searches that look like an email address are not stored. To stop spam we keep only a one-way hash of your IP address, never the address itself.

When you visit the website: basic technical data that any website receives, such as your IP address and browser type, in our hosting provider's server logs.

If you accept analytics cookies: how you use the website, such as the pages and sections you view, the buttons you click, whether you start or send the waitlist form, where your visit came from (for example a link on X), your approximate location (country and city), and your device and browser type. When you join the waitlist, we also send the general choices you picked (main platform, niche, country and view range) so we can see which kinds of clippers sign up. We never send your email or handle to analytics.

We do not use advertising cookies, and we do not buy data about you from third parties.

03Why we use it

We do not sell your data and we do not use it for advertising.

04Who can see your data

• Other clippers cannot see your name, email, payout email, linked accounts, clips or earnings. On a campaign page they only see totals, such as the total verified views in the current period and how many clippers take part.
• Navo admins (our team) can see your profile, linked accounts, clips, view counts and payout details, because they review clips, verify accounts and send payouts.
• Your profile photo is stored at a web address that is not listed or searchable anywhere, but anyone who has that exact link can open the image. Only upload a photo you are comfortable with. You can remove it at any time in your profile.
• If you turn on your public profile (off by default), anyone with the link can see your name, profile photo, username, the month you joined, your approved campaign clips with their view counts, your totals, your tier, badges and weekly streak, your verified social accounts, and the banner, bio, niches and pinned clips you choose to add. We also make a preview image of your profile (your name, photo, username, tier and totals) that shows when the link is shared, for example on X or Discord, and if you are among the week's top clippers your name, photo, username and that week's views can appear in the top list on our home page. You can turn it off anytime in your profile; the preview image link is removed when you do. Videos on the page are played through TikTok, Instagram, YouTube or X, and only load when someone presses play, so those services only see the visit then.
• If a friend invited you, they see your first name, when you joined and how close you are to the referral milestone (how many campaigns you have completed and your total verified views). Nothing else.
• Support reports can only be seen by you and the Navo team. When you send one, a short alert with your display name, the category and a preview of the message, without your email address or numbers, is posted to the team's private Discord channel.
• Your social posts stay on the platforms where you posted them. We only store the link.
• Campaign content: clips you make for a campaign belong to the company behind it, which may publish them, including your handle, voice and appearance as they appear in the clip. See section 06 of our Terms.

05Service providers

We use a small number of providers that process data on our behalf, under data processing agreements:

• Supabase: our database, login system and file storage (waitlist sign-ups, account data, clips, payouts, profile photos, support reports and their screenshots). Our project runs on servers in the EU.
• Netlify: hosts the website and portal, and keeps a backup copy of waitlist sign-ups through Netlify Forms.
• Resend: sends our login emails, account notifications (account verified, clip approved, referral bonus, payout sent, news from the Navo team) and campaign news to people who asked for it from noreply@navougc.com.
• Google (Google Analytics 4): measures how visitors use the website, only if you accept analytics cookies. IP addresses are not stored by Google Analytics 4, and we have turned off Google signals and ad personalisation. Google may process this data in the United States.
• Cloudflare (Turnstile): checks that logins come from a real person and not a bot, on the login page only. It looks at technical signals from your browser and your IP address and does not use cookies for advertising.
• Our fonts and code libraries are hosted on our own site, so no font or code provider sees your visit.
• Our email provider: handles the messages you send to support@navougc.com.
• Discord: sends internal alerts to a private channel that only the Navo founders can see, so we can review clips, verify accounts and answer support quickly. An alert can include your display name, the platform and handle of an account to verify, a link to a clip you submitted, for an email to support@navougc.com your email address, the subject and the first lines of the message, or for a support report your display name, the category and a short preview of the message, without your email address or numbers. Waitlist and new-account alerts only include counts and the platform, never your email address. Discord may process this data in the United States.

When we pay you, we send the payout details you chose and the amount to PayPal or the crypto service we pay through. They handle the payment as independent companies under their own privacy terms. Crypto payments are recorded on a public blockchain, where the wallet address and amount can be seen by anyone (your name is not).

We may also disclose data if the law requires it, or to protect our rights in a legal dispute.

06International transfers

We keep your account data in the EU where we can. Some of our providers are based in the United States or may process data there, for example for support, logging or email delivery.

When that happens, we rely on an adequacy decision (such as the EU–US Data Privacy Framework and the UK Extension) or on Standard Contractual Clauses to protect your data.

07How long we keep it

• Your account: for as long as you have it. If you ask us to delete it, we delete your profile, photo, linked accounts and clips within 30 days.
• Payout records: amounts, dates, your legal name, address and payout details, and the clips and view counts they are based on are accounting records. We keep them for as long as bookkeeping law requires, in Sweden generally seven years, even if you delete your account.
• Inactive accounts: if you have not logged in for 24 months, we may delete your account after emailing you first. Any payout you are owed is paid out before that.
• Rejected accounts and clips: we keep the record for up to 12 months, so we can explain a decision and spot repeated fraud.
• Automatic account checks and removed accounts: the log of checks, and the platform and username of accounts that were removed, are kept for up to 12 months to spot repeated fraud.
• Support reports: a report is closed 7 days after it is solved, and closed reports are deleted with their messages and screenshots 12 months after they close.
• Help page feedback: "Was this helpful?" votes and searches that found nothing are deleted after 12 months.
• Waitlist: until you create an account or ask us to remove you, and no longer than 12 months after the launch of the campaign you signed up for.
• Logs: login and server logs are kept by our providers for a short period, usually no longer than 90 days.

08Your rights

Under the GDPR and UK GDPR you have the right to:

• access the personal data we hold about you and get a copy of it
• correct data that is wrong or incomplete
• have your data deleted
• restrict or object to how we use it
• receive your data in a portable format
• withdraw your consent at any time, without affecting what we did before you withdrew it

In the portal, under Profile, you can change your name, country, payout email and profile photo, turn campaign news and account notifications on or off, download all your data and delete your account. You can also remove linked accounts and pending clips yourself. Every notification or news email has an unsubscribe link. For anything else, write to support@navougc.com from the email you log in with. We reply within one month.

You can also complain to a data protection authority. In Sweden that is IMY (Integritetsskyddsmyndigheten, imy.se). In the UK it is the ICO (ico.org.uk). We would appreciate the chance to fix things first.

09Cookies and local storage

Analytics cookies (optional): if you click Accept in the cookie banner, Google Analytics sets the cookies _ga and _ga_KRNBBMFFP7, which keep a random ID for your browser for up to 2 years so we can count returning visits. If you click Decline, or make no choice, no analytics cookies are set and nothing is sent to Google. You can change your choice at any time with the Cookies link at the bottom of every page.

We save your cookie choice in your browser's local storage for 12 months, so we don't have to ask on every visit. We do not set advertising or tracking cookies.

When you log in to the portal, your browser stores a login session in its local storage, so you stay logged in on that device. This is strictly necessary for the portal to work. It is removed when you log out, and you can also clear it in your browser settings.

If we add other cookies later, we will update this policy and ask for your consent first where the law requires it.

10How payouts are calculated

Your payout is calculated by a fixed formula. On a pay per view campaign: the campaign's rate per 1,000 verified views, multiplied by the verified views of each approved clip, up to any max per clip and until the campaign's budget is used up. On a creator pool campaign: the campaign's creator pool for a period, multiplied by your share of that campaign's verified views in the period. A person on our team reviews every clip and every view count before it counts. If you think an amount or a decision is wrong, write to support@navougc.com and a person will look at it.

Linked accounts are verified automatically when the code is found in the bio of a profile with the same username. An automatic check can verify an account but never rejects one: if the code is not found, the profile cannot be read, or something looks off (for example the same username on another Navo account), the account stays pending and a person on our team decides.

11Age limit

Navo is for people aged 18 or over. We do not knowingly collect data from anyone younger. If you believe a minor has signed up, contact us and we will delete the data.

12Security

We use encrypted connections (HTTPS), one-time login codes instead of passwords, and database rules that stop clippers from reading each other's data. Only our admins can see account and payout details. No system is completely secure, but we work to protect your data and will tell you and the authorities about a breach when the law requires it.

13Changes to this policy

We may update this policy as Navo grows. The date at the top shows the latest version. If a change is significant, we will email you before it takes effect.

14Contact

Questions or requests about your data: support@navougc.com