How we handle your data.

This page describes, plainly, what this website collects and why. If anything here does not match what you experience on the site, that is a bug, and we want to hear about it.

Who we are

NaviFounders is run by Matyas Supka and Morris Kosteyev Bechmann. They decide what this site collects and why, and we answer at hello@navifounders.com.

NaviFounders is not a registered company. The person responsible for your data is Matyas Supka, in the Netherlands, and you reach him at the address above.

The two forms

There are two forms on the booking page. A parent booking a strategy session gives us their name, email and phone, their child's first name and year in school, their city (so the times are shown in their own time zone), one sentence on what made them look now, and the time they picked. A student gives us their name, year in school and email, a parent's name, email and phone, what they want to build, and whether their parents know they are sending it. With either form, our server also keeps a few things you do not see on the screen: a shortened IP address and your browser's description of itself (its user agent), and with a booking, your time zone. It turns the last two into a key that links what you sent to your visits to this site.

When you press send, the form goes to our own server, where it is stored. A booked time is also put in our Google Calendar, and our server emails a confirmation to the parent and a copy of the whole form to Matyas's personal Gmail. It may also file a copy in our own inbox. A student's form books no time: it sends the same copy to Matyas's Gmail, and Matyas emails the parent to set one up.

The booking page loads Cloudflare Turnstile, a check that the sender is a person and not a program; we are still switching it on. It is almost always invisible; Cloudflare reads some technical details of your browser to decide, under its own privacy policy.

Saved in your browser

So that a half-written form is not lost if the page closes, the form keeps a copy of what you have filled in, in your own browser, as you go. Come back to the form and it is put back for you. That draft stays on your device: it is not sent to us and we cannot see it. It is deleted when you send the form, and clearing your browser's data for this site removes it too.

Cookies, analytics and the server

We set no advertising cookies and use no tracking pixels or outside analytics. Our server adds three small scripts to every page: one runs the assistant, and two measure the visit. For each page you load, our server records the page, where you came from, your browser and device type and some of its settings (screen and window size, language, operating system, processor cores, memory, connection type, whether you use touch or a mouse, your time zone, and whether the browser is being run by a program), and it notes whether the visit looks like it comes through a VPN, how far you scrolled and how long you stayed, and a rough location worked out from your IP address. It also records what you click on and open, such as which student stories you expand and for how long, which parts of each page you look at, and how far you get in a booking form. In the forms it counts the characters you type; the words themselves only reach us when you press send. If you copy text from a page, it keeps the first few words of what you copied. The IP address is shortened before it is stored, so it points to a region, not a household, and no identifier is kept in your browser to recognise you next time. Our server does make a key from the shortened IP address and your browser's description of itself, so visits from the same browser and network can be linked to each other, and to a form sent from them. That record stays on our own server and is deleted after 90 days.

Like any web server, ours also keeps short access logs with IP addresses, for security. Its own logs also note the email address each automatic email went to, and sometimes a student's first name.

Email

If you email us, we keep your message and your address so we can reply. The confirmation and notification emails for bookings are sent through Fastmail, an email service based in Australia. Fastmail also holds our inbox, and every email we send passes through it.

The assistant on the Questions page

The Questions page has an assistant you can type to. What you type there is sent to Anthropic, in the United States, whose model writes the answer. The conversation is stored on our server with a rough location and a shortened IP address, and we may read it to improve the assistant; it is deleted after 12 months. Once a day, a shortened copy of that day's conversations is also sent to Anthropic's model again, which checks the assistant's answers for quality and safety. Do not type anything personal into it; for anything you need to rely on, email us. Beyond the spam check above, nothing you send through the forms is read, scored or sorted by any automated tool: Matyas reads every one himself. If that ever changes, this page will say so first.

Call recordings and transcripts

Calls with us, including sessions with a student, may be recorded. The recording is kept on our own server and turned into a written transcript there, so that Matyas can prepare the next session and keep the progress tracker true. Each transcript is then sent, in parts, to Anthropic's model, which marks who is speaking. Matyas also uses AI tools to prepare sessions, so the transcript may pass through them too. Apart from that, recordings and transcripts are not shared with anyone else. They have no set end date yet: they stay until we delete them, and you can ask us to delete them at any point.

Parents and younger applicants

Most Navi students are 15 to 19. The student form asks for a year in school so that we know who we are talking to, and for a parent's details, because the call is always with a parent. A parent can book a session for a younger child, and we will say whether it fits.

If we accept a student, they fill in a second form: legal name, date of birth, city, phone, an email to use, a parent's name and email, when they are free, and the same details for any group members. Our server keeps that with the full IP address and browser description of whoever filled it in.

If we accept a student who is under 18, we email a parent a consent form; with that consent we keep the parent's full IP address and their browser's description of itself, as a record that it was given.

If you are a parent and want to see or delete what your child sent us, email hello@navifounders.com and we will do it.

How long we keep it, and your choices

Our server deletes on its own, every day: what the forms sent after 12 months (an enrolled student's record we mark by hand so it stays); assistant conversations after 12 months; visit records after 90 days. We delete sooner when you ask. You can ask for a copy of what we hold, or ask us to delete it, at any point, and we will tell you when it is done.

Our server is rented from Hetzner, in the European Union. Fastmail is based in Australia and keeps a copy of our mail in the United States. The other services named on this page (Google, Anthropic and Cloudflare) are in the United States.

We do not sell your data, we do not rent it, and we do not hand it to anyone for marketing.

To ask anything about your data, or to have it removed, email hello@navifounders.com.