Version: 1.0 | Effective Date: December 1, 2025
Overview
Navigator is committed to transparency about who processes your data. This page lists all third-party subprocessors that may handle personal data on our behalf.
Navigator is largely self-hosted. We operate our own infrastructure, handle authentication ourselves, and manage email delivery directly. No third-party analytics, tracking services, or cloud platforms are used for core operations.
Current Subprocessors
The following table lists all third-party subprocessors engaged by Navigator:
| Subprocessor | Purpose | Data Processed | Location | Safeguards |
|---|---|---|---|---|
| OpenAI, L.L.C. | AI-assisted text processing (polishing, rewriting, translation, weekly report generation) | User-selected text only, when explicitly invoked by the user | United States | EU-U.S. Data Privacy Framework, Standard Contractual Clauses (SCCs), Data Processing Addendum |
About OpenAI Processing
- Trigger: Data is sent to OpenAI only when you explicitly invoke an AI feature (e.g., clicking "Polish text", "Translate", or generating a weekly report)
- Data scope: Only the specific text content you select is transmitted—no account credentials, email addresses, or metadata
- Retention: OpenAI retains API inputs/outputs for a maximum of 30 days for abuse monitoring, then deletes them
- No training: Your data is not used to train OpenAI models (per OpenAI's API data usage policy)
For more details, see OpenAI Enterprise Privacy and their API Data Usage Policies.
Self-Hosted Operations
Apart from OpenAI (listed above), Navigator does not engage any third-party subprocessors. All other platform operations—including hosting, database storage, authentication, email delivery, and session management—are operated directly by Navigator on infrastructure we control.
No third-party analytics, tracking, advertising, or social media services are used. Your browsing behaviour is not shared with Google, Facebook, or any other platform.
Change Notification
We are committed to transparency and will update this list whenever our subprocessor arrangements change. Specifically:
- This subprocessor list will be updated at least 30 days before adding any new subprocessor, whenever feasible
- Material changes will be announced on this page with an updated effective date
- Organisation administrators may be notified via email of significant changes
If you have questions or concerns about our subprocessors, please contact us at privacy@caimito.net.
Related Documents
- Privacy Notice – Complete details on how we process personal data
- Terms and Conditions – Service terms and conditions of use