Terms of Use & Data Processing

1. Who we are and acceptance

Nava (“we”) is a booking-management product for barbershops, currently in pre-launch, available at navachair.com. By browsing the site or submitting the waitlist form, you agree to these terms and to the data processing described below.

For LGPD purposes, Nava acts as the controller of the personal data collected on this page.

2. What the site offers today

Right now, the site is an informational page with a waitlist for early access. Joining the list creates no subscription, no charge and no obligation to purchase.

Features, plans and prices shown describe a product under development and may change until launch.

3. Acceptable use

By using the site and the form, you agree to:

• Submit only your own data, or data of third parties who expressly authorized it.
• Not use bots, scripts or automated submissions on the form.
• Not attempt to bypass the site's technical protections (such as request limits).

4. Intellectual property

The Nava brand, logo, texts, images and the design of this site belong to us. Use without prior written authorization is prohibited.

5. Data we collect — exactly this

When you submit the waitlist form, we collect:

• Name — so we know what to call you.
• WhatsApp — the only channel we use to contact you about early access.
• Role (barber, shop owner or other) — to understand who is interested.
• Number of professionals (optional) — to size the interested barbershops.
• City (optional) — to plan launch regions.
• Site language — so we contact you in the right language.
• Visit origin (UTM parameters and referring page, when present) — to learn which channels work.

What we do NOT collect: national ID, e-mail, address, payment data or precise location. Your IP address is used only in memory, briefly, to rate-limit form abuse — it is never stored.

To measure anonymously how people find and use the site, we use PostHog as a product-analytics tool, configured without cookies and without fingerprinting: we record only aggregate events (page views, button clicks and the outcome of the waitlist submission), never with your name or your WhatsApp. Like any internet service, PostHog — a processor that processes this access data in the United States — receives access data, including the IP address, to deliver the analytics; we configure the project to discard the client IP and to build no individual browsing profiles. The site uses no tracking cookies.

6. What we use your data for

We use the collected data exclusively to:

• Contact you on WhatsApp when early access opens — the main purpose, stated on the form itself.
• Understand demand for the product: profile, size and region of interested barbershops, always in aggregate.
• Measure which channels bring interested people (UTM parameters and referring page).

We use your data for nothing else. We do not sell, rent or share your data for third-party marketing.

7. Legal bases (LGPD)

Each processing activity rests on a legal basis from Article 7 of the LGPD:

• Consent (art. 7, I): by submitting the form you authorize WhatsApp contact about early access. You may revoke this consent at any time.
• Legitimate interest (art. 7, IX): aggregate analysis of interest by profile, size, region and origin channel, and product and site-usage analytics (aggregate events such as page views and clicks) — with minimized data and no impact on your rights and freedoms.

8. Who your data is shared with

Your data lives on infrastructure from providers acting as processors (art. 5, VII, LGPD), processing data only under our instructions:

• Supabase — the database where the waitlist is stored.
• Vercel — site hosting and form processing.
• PostHog — product and site-usage analytics (aggregate events), hosted and processed in the United States.

These providers may keep servers outside Brazil — PostHog, for instance, hosts and processes data in the United States, a country without an ANPD adequacy decision. In that case, the international transfer follows art. 33, II of the LGPD, backed by the standard contractual clauses in PostHog's own Data Processing Agreement and reinforced by data minimization (anonymous, aggregate events, client-IP discard, no cookies). Beyond that, we would only share data if required by law or by order of a competent authority.

9. How long we keep it

We keep your data while the waitlist is active and during the early-access launch period. After that, data not converted into an account is deleted or anonymized.

If you request deletion earlier, we remove your data within 15 days, except what we must keep under a legal obligation.

10. Your rights (art. 18, LGPD)

You may, at any time and free of charge, request:

• Confirmation that we process your data.
• Access to the data we hold about you.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of unnecessary or excessive data.
• Portability of your data to another provider.
• Information about who we share your data with.
• Revocation of consent and deletion of data processed under it.

To exercise any right, write to the e-mail in the Contact section. We reply within 15 days. If you believe we did not resolve it, you may petition Brazil's National Data Protection Authority (ANPD).

11. Security

Measures we apply to protect your data:

• Restricted database access; access keys exist only on the server and never reach the browser.
• Minimized collection by design: we do not store your IP in our own systems — the rate limiter uses the IP only in memory, briefly — no cookies, fields limited to what is necessary. PostHog, as a processor, handles access data as described in section 5.
• Tracking-free anti-spam: honeypot and per-IP request limits instead of captchas or trackers.

12. Children and teenagers

The site and the waitlist are intended for professionals and barbershop owners. We do not knowingly collect data from anyone under 18; if we identify such an entry, it will be deleted.

13. Changes to these terms

We may update these terms and this policy. The last-updated date appears at the top of the page; relevant changes will be highlighted on the site.

14. Contact

Questions about these terms, requests about your data or consent revocation: contato@navachair.com.