Effective September 15, 2026

This page explains what information Nava Solution collects through the Nava CRM, including when you sign in with Google as staff or as a client, and how that information is used, stored, and protected.

1. Overview

Nava Solution ("Nava," "we," "us") operates a remote staffing business and an internal customer relationship management tool, the Nava CRM, used by our team and made available in limited form to our clients as a client portal.

This policy covers the data handled by the Nava CRM application. It does not cover navasolu.com marketing pages, which may be governed separately.

2. Information We Collect

Staff: Name, work email, role, and records you create in the course of your work (candidate, client, invoice, and task data).

Clients (portal): Name and email address, used only to match you to your company's account and show you your own invoices, placed team members, and service agreement.

Candidates: Resume, video, and contact details submitted during the hiring process, entered by our team.

3. Google Account Sign-In

Staff and client-portal sign-in both use "Sign in with Google." When you sign in this way, we request only your name, email address, and Google account ID, enough to identify you and, for staff, to confirm you hold a navasolu.com account. We do not request access to your Gmail, Drive, or calendar through this sign-in flow.

Separately, a small number of Nava staff connect their own Gmail inbox to the CRM to sync candidate emails into our pipeline. That connection is authorized individually, by the staff member whose inbox it is, and is distinct from the sign-in flow described above.

Nava CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use It

To authenticate you and grant the correct level of access. To run our staffing operations: matching candidates to roles, generating invoices, and coordinating with clients. To keep the CRM secure, including detecting and preventing unauthorized access.

We do not use your information for advertising, and we do not sell it.

5. Sharing

We do not share your information with third parties, except with service providers who host or operate the CRM on our behalf (currently Railway, for application hosting, and Google, for sign-in), under terms that limit their use of your data to providing that service, or where required by law.

6. Retention and Security

We retain CRM records for as long as needed to operate our business and meet legal or contractual obligations. Access to the CRM is restricted by login, and client-portal access is granted individually, per contact, by Nava staff, and can be revoked at any time.

7. Your Rights

You can ask us to review, correct, or delete the information we hold about you, or to revoke a client-portal login, by contacting us using the details below.

8. Contact

Questions about this policy or your data can be sent to vanessa@navasolu.com.