Navicon Privacy Policy

Effective date: April 21, 2026

Navicon is a Chrome extension that replaces the new tab page with a customizable visual tile dashboard. This privacy policy explains what information Navicon collects, how it's used, and your rights regarding that information.

TL;DR

Free Navicon stores everything locally in your browser. No data leaves your device.
Navicon Pro requires an email address (for license delivery) and generates a random device identifier (for license activation). We use a small number of standard third-party services (Stripe, Vercel, Supabase, Resend, PostHog, Sentry) to run the paid features.
You can request deletion of all your data at any time by emailing baxholdings01@gmail.com.

1. What Navicon Collects

1.1 Free Tier (local-only)

All free-tier data is stored entirely in your browser via Chrome's local storage. This includes:

Your tile list (names, URLs, ordering)
Themes, sections, folders, tile sizes
Workplace Icon settings (initials, photo)
Trial state and preferences

None of this data leaves your device. Navicon fetches tile favicons from Google's favicon service (favicons.google.com) and a couple of public fallback services, but these requests do not carry any personal information.

1.2 Pro Tier (paid)

When you purchase Navicon Pro, we collect:

Email address — collected at checkout by Stripe, used to deliver your license key and receipts.
Device identifier — a randomly generated UUID created in your browser on first install. Used to enforce the 3-device-per-license limit. Not linked to any personally identifiable information.
License key — generated by our backend, sent to your email, stored locally in your browser.
Signed license token (JWT) — issued by our backend after activation, stored locally. Lets the extension verify your license without calling our servers on every load.
Payment information — collected and processed by Stripe. We never see or store your credit card details.

1.3 Aggregated Usage Analytics

For Pro users, we send anonymous, aggregated event data to PostHog (e.g., "pro_purchased", "license_activated"). Your email is used as a deduplication identifier so we don't count one user as multiple users. No sensitive content (URLs, tiles, search queries) is sent to analytics.

2. How We Use Your Information

Deliver your license key after purchase
Verify license validity when you activate Pro features in the extension
Enforce the 3-device-per-license activation cap
Process yearly subscription renewals
Process refunds within our refund policy window (14 days)
Send transactional emails (license delivery, renewal confirmations, refund confirmations, payment failure notices)
Monitor errors in our backend to diagnose and fix bugs
Improve the product through anonymized, aggregated usage analytics

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

Navicon Pro uses the following third-party services. Each service's privacy policy is linked for your reference.

Service	Purpose	Privacy policy
Stripe	Payment processing, Merchant of Record for sales tax compliance	stripe.com/privacy
Vercel	Backend API hosting	vercel.com/legal/privacy-policy
Supabase	Database for license records and customer records	supabase.com/privacy
Resend	Transactional email delivery (license keys, receipts, renewal notices)	resend.com/legal/privacy-policy
PostHog	Anonymized product analytics	posthog.com/privacy
Sentry	Server-side error monitoring	sentry.io/privacy

4. Data Retention

Data	Retention
Active license records	Duration of subscription (yearly) or indefinitely (lifetime)
Purchase records	7 years (for tax and accounting compliance)
Email delivery logs (Resend)	90 days
Server error logs (Sentry)	90 days
Analytics events (PostHog)	1 year
Local browser data (free tier)	Until you uninstall Navicon or clear browser storage

5. Your Rights

5.1 Data Deletion

You can request deletion of your account and associated data at any time by emailing baxholdings01@gmail.com. We will:

Cancel any active subscription
Delete your customer record from our database
Delete your license records (note: this invalidates any active license keys)
Remove your email from Resend's recipient database

Purchase records required for tax compliance cannot be deleted but will be anonymized to the extent legally permitted.

5.2 Data Access

You can request a copy of all data we have about you by emailing baxholdings01@gmail.com. We'll provide a JSON export within 30 days.

5.3 License Portability

Your Pro license is valid on up to 3 devices simultaneously. You can free up an activation slot by emailing support; self-service deactivation is on our roadmap.

5.4 Right to Object

You can object to data processing or withdraw consent at any time. In practical terms this means: request deletion (see above), stop using the extension, or switch to the free tier.

6. Security

All network traffic between the extension and our backend uses HTTPS/TLS encryption.
License keys are cryptographically signed with RSA-2048 (RS256 JWT).
Secret keys are stored in Vercel's encrypted environment variable system and rotated when appropriate.
We do not handle payment card data directly; Stripe handles PCI-DSS compliance.
We minimize the data we collect and retain in line with industry best practices.

7. Children's Privacy

Navicon is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us and we will delete the information promptly.

8. Changes to This Policy

We may update this privacy policy as Navicon evolves. The "Effective date" at the top of this document reflects the most recent revision. Material changes will be announced in-product (via Settings dialog notification) or by email to active Pro subscribers.

9. Contact

Email: baxholdings01@gmail.com

Business: Bax Holdings Company, LLC

Address: 516 River Hwy, Unit 136, Mooresville, NC 28117, USA