Your privacy matters to us

Effective Date: July 14, 2026
Last Updated: July 14, 2026

This Privacy Policy explains how NavvyNest LLC (“NavvyNest,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects Personal Information when individuals use the NavvyNest website, mobile application, provider directory, community calendar, provider portal, administrative services, communications, and related services (collectively, the “Services”).

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. It does not include information that has been lawfully made public through government records or information that has been deidentified or aggregated so that it cannot reasonably be linked to an individual, except where applicable law provides otherwise.

By using the Services, you acknowledge the practices described in this Privacy Policy. This Privacy Policy does not replace any consent that applicable law requires us to obtain.

1. Who NavvyNest Serves

NavvyNest is a disability-resource and community-information platform intended to help adults, parents, legal guardians, caregivers, and service providers locate providers, resources, events, and support information.

The Services are intended for adults who are at least eighteen (18) years old. Children may not create accounts or submit Personal Information directly through the Services. A parent or legal guardian may use the Services to search for resources for a child, but should not submit the child’s full name, exact date of birth, medical records, government identification numbers, insurance or Medicaid numbers, school records, photographs, precise location, or other unnecessary sensitive information.

2. Information We Collect

The information we collect depends on how you use the Services.

A. Account and Contact Information

We may collect:

• Name;
• Email address;
• Telephone number;
• Mailing or business address;
• Username, account identifier, and encrypted authentication credentials;
• Account role, such as member, provider, or administrator; and
• Communication and notification preferences.

B. Provider and Business Information

When a provider creates, claims, verifies, updates, or pays for a listing, we may collect:

• Business and legal name;
• Public business address, telephone number, email address, website, and social-media links;
• Service categories, specialties, populations served, service areas, operating hours, and accessibility information;
• Business representative’s name, title, and contact information;
• Information reasonably necessary to confirm authority to claim or manage a listing;
• License, registration, accreditation, or credential information when voluntarily submitted or obtained from an official public source;
• Profile text, photographs, logos, event information, and other content submitted for publication;
• Provider-plan and subscription status; and
• Records of listing claims, approvals, corrections, concerns, or removal requests.

Providers must not submit patient, client, student, or service-recipient information to NavvyNest.

C. Publicly Available Provider and Event Information

NavvyNest may create or maintain an unclaimed provider, organization, resource, or event listing using factual information obtained from lawful public sources, including:

• Official government databases, licensing boards, and public registries;
• A provider’s or organization’s public website;
• Public business pages and public event pages;
• Search engines and publicly accessible business directories;
• Public nonprofit, agency, or community-resource directories; and
• Information submitted by users, providers, organizations, or community members.

Public-source information may include a business name, public business contact information, website, service category, general service area, operating hours, and publicly reported license or registration status.

An unclaimed listing does not mean that the provider has registered with, approved, sponsored, endorsed, or been verified by NavvyNest. NavvyNest will use reasonable efforts to label unclaimed listings and to distinguish them from claimed or verified listings.

NavvyNest does not intentionally collect or publish Social Security numbers, financial-account numbers, medical records, patient information, or other highly sensitive personal information from public sources. We also seek to avoid publishing a sole proprietor’s residential address or personal telephone number when it is not clearly presented as the provider’s public business contact information.

A provider or authorized representative may request to claim, correct, update, restrict, or remove a listing as explained in Section 12. We may retain a minimal suppression record after removal so that the listing is not unintentionally republished during a later data update.

D. Family, Member, Event, and Resource Activity

Depending on the features used, we may collect:

• ZIP code or general location entered for directory searches;
• Search terms, filters, and categories;
• Bookmarked or saved providers, events, or resources;
• Event registrations, RSVPs, and waitlist selections;
• Reviews, reports, concerns, feedback, or support requests;
• Content submitted through forms or communications; and
• Records of interactions with providers or event organizers when the Services facilitate those interactions.

Searches and saved resources may reveal or suggest disability-related interests. NavvyNest treats this information as sensitive and does not use it for targeted advertising.

E. Payment and Subscription Information

Provider subscription payments may be processed by a third-party payment processor. NavvyNest may receive limited transaction information, such as payment status, subscription plan, billing date, transaction identifier, and the last four digits or type of a payment method. NavvyNest does not intend to directly receive or store complete payment-card numbers or security codes.

F. Device, Log, and Usage Information

When you use the Services, we and our service providers may automatically collect:

• Internet Protocol address;
• Browser, operating system, device type, and app version;
• Device or account identifiers;
• Date and time of access;
• Pages, screens, features, links, and buttons used;
• Referring pages and general interaction information;
• Crash, performance, diagnostic, and security logs;
• Approximate location inferred from an IP address; and
• Cookie, local-storage, session, and similar technical information.

NavvyNest does not require precise GPS location for ordinary provider searches. Users may search by ZIP code or other general location information. If a future feature requests precise location, NavvyNest will provide an additional notice and request any consent required by law before collecting it.

G. Information From Service Providers and Platforms

We may receive information from vendors that help operate the Services, such as cloud-hosting and database providers, authentication providers, app stores, payment processors, email or notification providers, analytics providers, security vendors, and customer-support tools.

3. How We Use Information

We may use Personal Information to:

• Create, authenticate, administer, and secure accounts;
• Operate provider searches, directories, profiles, resources, events, bookmarks, RSVPs, and waitlists;
• Allow providers to claim, verify, update, publish, and manage listings;
• Process provider subscriptions and maintain billing records;
• Communicate about accounts, transactions, events, support requests, policy changes, and security matters;
• Respond to requests, complaints, corrections, and listing-removal requests;
• Detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity;
• Troubleshoot, test, analyze, maintain, and improve the Services;
• Enforce our agreements and protect the rights, safety, and property of NavvyNest, users, providers, and others;
• Comply with applicable laws, court orders, subpoenas, and regulatory requirements; and
• Carry out another purpose disclosed at the time of collection or authorized by the individual.

NavvyNest does not use disability-related searches, saved resources, or other sensitive information to determine insurance, employment, housing, credit, educational, medical, or governmental eligibility.

4. How We Disclose Information

We may disclose Personal Information as follows:

A. At Your Direction

We may disclose information when you choose to contact a provider, register for an event, join a waitlist, submit an inquiry, or otherwise direct us to send information to another person or organization.

B. Public Profiles and Content

Information that a provider or organization submits for a public profile, event, resource, comment, or other public feature may be visible to other users and the general public. Providers should publish business information only and should not post private personal information or information about patients, clients, students, or service recipients.

C. Service Providers and Contractors

We may disclose information to vendors that perform services for NavvyNest, including hosting, database management, authentication, payment processing, email delivery, notifications, analytics, security, customer support, app distribution, and professional services. We require service providers, where appropriate, to use information only for contracted purposes and to maintain reasonable safeguards.

D. Legal, Safety, and Enforcement Purposes

We may disclose information when we reasonably believe disclosure is necessary to comply with law or legal process; respond to a government request; investigate fraud, security incidents, or unlawful conduct; enforce our agreements; or protect the rights, safety, and property of NavvyNest, users, providers, or others.

E. Business Transactions

Information may be disclosed as part of a proposed or completed merger, financing, acquisition, sale, reorganization, bankruptcy, or transfer of some or all of NavvyNest’s business or assets. The recipient will be required to handle Personal Information consistently with applicable law and any commitments that continue to apply.

F. With Consent

We may disclose information for another purpose with the individual’s consent or authorization.

5. Sale, Sharing, Targeted Advertising, and Data Brokers

NavvyNest does not sell Personal Information for money. NavvyNest does not knowingly disclose Personal Information for cross-context behavioral advertising or targeted advertising based on activity across unaffiliated websites or applications.

NavvyNest does not sell or share the Personal Information of individuals under sixteen (16) years old.

This statement must be reviewed whenever NavvyNest adds or changes advertising, analytics, social-media pixels, software-development kits, audience-measurement tools, or data partnerships. A disclosure to a technology provider may be treated as a “sale,” “sharing,” or targeted-advertising disclosure under some state laws even when no money changes hands.

Where required by applicable law, NavvyNest will recognize a valid browser-based universal opt-out mechanism, such as Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising. Because NavvyNest does not currently engage in those practices, an opt-out signal should not materially change the Services.

6. Cookies and Similar Technologies

NavvyNest may use cookies, local storage, software-development kits, pixels, and similar technologies for:

• Authentication and session management;
• Security and fraud prevention;
• User preferences;
• App and website functionality;
• Diagnostics and performance; and
• Limited analytics used to understand and improve the Services.

NavvyNest does not use disability-related searches or saved resources for targeted advertising. Where legally required, NavvyNest will request consent before using nonessential cookies or similar technologies and will provide a method to change cookie choices.

7. Communications

NavvyNest may send transactional or service communications relating to account access, provider submissions, subscriptions, events, support, security, or policy changes. These messages may be necessary to provide the Services.

NavvyNest may send promotional email only where permitted by law. Recipients may unsubscribe from promotional email by using the unsubscribe link or contacting us. Unsubscribing from promotional messages will not stop necessary account, billing, security, or service communications.

NavvyNest will not send marketing text messages without any consent required by law. Message and data rates may apply to text messages that a user affirmatively requests.

8. Disability and Health-Related Information; HIPAA

NavvyNest is a resource directory and information platform. It is not a healthcare provider, health plan, healthcare clearinghouse, medical-record system, emergency service, or substitute for professional medical, legal, educational, benefits, or crisis advice.

NavvyNest is not designed to receive or maintain medical records or protected health information on behalf of a healthcare provider. Users and providers must not upload patient records, treatment records, diagnoses tied to an identifiable patient, insurance identifiers, prescriptions, clinical notes, or similar medical information.

Information related to disability, accessibility needs, searches, bookmarks, or service interests may still be sensitive under state privacy laws even when HIPAA does not apply. NavvyNest will use such information only as described in this Privacy Policy and will not use it for targeted advertising.

9. Children’s Privacy

The Services are intended for adults and are not directed to children under thirteen (13). NavvyNest does not knowingly collect Personal Information directly from children under thirteen.

If NavvyNest learns that a child has directly submitted Personal Information without legally sufficient parental authorization, NavvyNest will take reasonable steps to delete it. A parent or legal guardian who believes a child submitted Personal Information may contact us using the information in Section 16.

NavvyNest must conduct a separate legal and technical review before introducing child accounts, child profiles, direct messaging with children, child-generated content, age verification, targeted advertising to minors, or any feature that knowingly collects Personal Information from children.

10. Data Retention

NavvyNest retains Personal Information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain accurate records, resolve disputes, enforce agreements, prevent fraud, satisfy legal obligations, and protect users.

Subject to technical feasibility and legal requirements, NavvyNest generally applies the following retention periods:

• Account information: while the account is active and generally up to ninety (90) days after a verified deletion request;
• System backups: generally overwritten or deleted within ninety (90) days after deletion from active systems;
• Provider listings: while the provider or organization appears active or while maintaining the listing serves the directory’s lawful purpose;
• Suppression records: minimal information for as long as reasonably necessary to prevent a removed listing from being unintentionally republished;
• Subscription, payment-status, tax, and accounting records: generally seven (7) years or another period required by law;
• Event RSVP and waitlist records: generally up to twelve (12) months after the event, unless needed longer for disputes or legal obligations;
• Support, complaint, listing-claim, and correction records: generally up to twenty-four (24) months after resolution;
• Security and system logs: generally up to twelve (12) months, unless needed to investigate an incident; and
• Deidentified or aggregated information: for as long as maintained in a form that cannot reasonably be used to identify an individual.

We may retain information longer when required by law, necessary to establish or defend legal claims, needed to investigate fraud or security incidents, or requested by law enforcement through valid legal process.

11. Data Security and Incident Response

NavvyNest uses reasonable administrative, technical, and physical safeguards appropriate to the nature of the information and the size and complexity of the Services. These safeguards may include access controls, least-privilege permissions, authentication protections, encryption in transit, secure development practices, logging, backups, vendor review, and incident-response procedures.

No method of transmission or storage is completely secure. NavvyNest cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur. If a security incident triggers a legal notification duty, NavvyNest will provide notice to affected individuals and government authorities as required by applicable law.

Users are responsible for maintaining the confidentiality of their credentials and for notifying NavvyNest promptly of suspected unauthorized account access.

12. Your Privacy Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Confirm whether NavvyNest processes your Personal Information;
• Access or obtain a copy of Personal Information;
• Correct inaccurate Personal Information;
• Delete Personal Information;
• Obtain a portable copy of certain information;
• Opt out of the sale or sharing of Personal Information, targeted advertising, or certain profiling;
• Limit certain uses of sensitive Personal Information;
• Withdraw consent where processing is based on consent; and
• Appeal NavvyNest’s denial of a privacy request.

NavvyNest will not unlawfully discriminate against an individual for exercising a privacy right.

To submit a privacy request, provider-listing correction, or removal request, use one of the following methods:

• Email: privacy@navvynest.com
• Online form: privacy request form
• Mail: NavvyNest LLC, Attn: Privacy, [MAILING ADDRESS]

Please identify the request as “Privacy Request” or “Provider Listing Request” and provide enough information for NavvyNest to locate the relevant record. Do not email medical records, identification documents, or full financial-account information.

NavvyNest may take reasonable steps to verify identity or authority before fulfilling a request. Verification information will be used only for verification and security purposes. An authorized agent may submit a request where permitted by law, but NavvyNest may require proof of authorization and may verify the request directly with the individual.

NavvyNest will respond within the period required by applicable law. When a request is denied in whole or in part, NavvyNest will explain the reason when legally required. An appeal may be submitted by emailing privacy@navvynest.com with the subject line “Privacy Appeal.”

Deleting an account may not remove information that must be retained for legal, security, accounting, fraud-prevention, or dispute-resolution purposes. Removing a NavvyNest directory listing does not remove information from the original public source or from unrelated third-party websites.

13. State-Specific Privacy Disclosures

To the extent an applicable U.S. state privacy law applies to NavvyNest, this section supplements the other disclosures in this Privacy Policy.

During the preceding twelve (12) months, NavvyNest may have collected the categories described in Section 2 from users, providers, public sources, app platforms, and service providers; used them for the purposes described in Section 3; and disclosed them to the categories of recipients described in Section 4.

NavvyNest does not use or disclose sensitive Personal Information for purposes that require a right to limit under California law, except as necessary to provide requested Services, maintain security, prevent fraud, or comply with law.

NavvyNest does not disclose Personal Information to third parties for those third parties’ own direct-marketing purposes without consent. California residents may contact NavvyNest using Section 16 regarding California privacy rights.

These disclosures do not concede that every state privacy law applies to NavvyNest. NavvyNest may voluntarily honor a request even when not legally required.

14. Third-Party Services and External Links

The Services may link to provider websites, government agencies, event organizers, social-media pages, maps, payment processors, app stores, or other third-party services. NavvyNest does not control those third parties’ privacy or security practices. Their collection and use of information are governed by their own policies.

Users should review a third party’s policies before submitting Personal Information. A link or directory listing does not, by itself, mean that NavvyNest endorses, controls, sponsors, verifies, or is legally affiliated with the third party.

15. Changes to This Privacy Policy

NavvyNest may update this Privacy Policy to reflect changes in the Services, technology, vendors, law, or business practices. The “Last Updated” date will be revised when the policy changes.

When required by law, NavvyNest will provide additional notice of a material change and obtain consent before applying a materially different practice to information already collected. Continued use of the Services after an update is subject to the updated policy, except where applicable law requires another form of agreement or consent.

16. Contact NavvyNest

Questions, complaints, privacy requests, or provider-listing requests may be directed to:

NavvyNest LLC
Attn: Privacy
[MAILING ADDRESS]
privacy@navvynest.com
[TELEPHONE NUMBER]
privacy request form