Privacy policy
For the Navio web app and the Navio Mobile app. Last updated 2026-09-15.
Who is responsible
Navio is a tool for vehicle-repair organizations: technicians log repaired vehicles, managers review the logs. The organization that invited you decides what is recorded and why. Under the GDPR it is the controller of the repair data.
WP Nova GmbH builds and operates Navio and processes that data on the organization's behalf as its processor, under a data processing agreement. For the account you create to use Navio, and for the technical operation of the service, WP Nova GmbH is the controller.
WP Nova GmbHGermanyprivacy@wp-nova.aiWhat we process
- Account
- Name, e-mail address, a profile picture if you set one, your role in each organization and, if you draw one, your signature. Sign-in credentials are held by Clerk; we never see your password.
- Repair logs
- What technicians enter for each repaired vehicle: work date, customer, insurer, make and model, licence plate, VIN, the services carried out, the dent calculation sheet, notes, and the questions, answers and decisions exchanged with the reviewer.
- Photos and documents
- Photos of the vehicle, a photo of the registration document (Zulassungsbescheinigung Teil I) and scans of paper calculation sheets and repair protocols. Those images may show the keeper's name and address and the licence plate; the organization uses them as evidence of the repair.
- Device and usage
- A push notification token for each device you enable notifications on, the app version, operating system, and how the app is used: screens, taps, errors and crash reports. Session replays mask every text field and image. Nothing is used for advertising, and we do not track you across other apps or websites.
Why, and on what basis
- Running the service: signing you in, showing your organization's logs, delivering notifications about reviews. Basis: the contract with your organization and your use of the account (Art. 6(1)(b) GDPR).
- Reading documents for you: the licence plate, the registration document and the calculation sheet are read automatically to pre-fill the form. You check and correct every value before submitting. Basis: legitimate interest in a fast, accurate capture (Art. 6(1)(f)).
- Keeping the service reliable: analytics, error and crash reports. Basis: legitimate interest (Art. 6(1)(f)).
- Weekly vehicle sheets: managers send approved logs with their documents to the recipients their organization configured, for example its accounting. Basis: the organization's contract and legal obligations.
Who else sees it
Members of your organization see the repair logs according to their role. WP Nova GmbH staff access data only to operate and support the service. These providers process data for us:
| Provider | Purpose | Location |
|---|---|---|
| Clerk, Inc. | Sign-in, sessions, e-mail codes and account e-mails | USA (EU standard contractual clauses) |
| PostHog, Inc. (EU cloud) | Product analytics, session replays with masked inputs and images, crash reports | EU (Frankfurt) |
| Mistral AI SAS | Reading the paper calculation sheet from a photo (only that photo) | EU (France) |
| Expo (650 Industries, Inc.) and Apple Push Notification service | Delivering push notifications to the mobile app | USA |
| Microsoft 365 or the organization's own mail server | Sending invitation and weekly vehicle sheet e-mails | EU, as configured by the organization |
Licence plates and registration documents are read by services WP Nova GmbH runs itself in the EU. The Navio servers and file storage are in the EU. Transfers to providers outside the EU rely on the EU standard contractual clauses.
How long we keep it
- Repair logs, photos and documents: as long as the organization keeps them. The organization can delete logs at any time.
- Uploads that never became part of a log: 24 hours.
- Download links for weekly vehicle sheets: until the link expires, as set by the organization.
- Account data: until you delete the account. Usage data and crash reports: 12 months.
Deleting your account
In the mobile app, open Profile → Delete my account. Your sign-in, profile, signature and device tokens are removed immediately. Repair logs, photos and comments you contributed stay with the organization that owns them, without your name. You can also ask us at privacy@wp-nova.ai.
Your rights
You can ask for access to your data, have it corrected or deleted, restrict or object to its processing, and receive a copy in a portable format. For repair data, address your organization; it is the controller and we support it in answering. For account and usage data, write to privacy@wp-nova.ai. You may also complain to a data protection supervisory authority.
Contact
WP Nova GmbHGermanyprivacy@wp-nova.aiQuestions about Navio itself: support@wp-nova.ai.