Privacy Policy

Last updated: June 13, 2026

Nativve ("we", "us") provides an AI-powered onboarding and business-assistant platform for small businesses. This policy explains what data we collect, how we use it, and the choices you have.

Data we collect

• Account data: name, email address, phone number, and business details you provide when signing up.
• Connected platform data: when you explicitly connect your business's Facebook Page, Instagram professional account, WhatsApp Business account, website, or other business tools, we read content from those sources: your posts, customer comments and messages directed at your business, engagement metrics, and profile metadata. We only access accounts you administer and explicitly authorize.
• Uploaded content: documents and files you choose to share with us.
• Usage data: logs of how you interact with our service, used for reliability and security.

How we use it

• To build a private profile of your business: how you communicate, what your customers ask, what you offer, which powers the AI assistant you configure.
• To provide, maintain, and improve the service.
• To communicate with you about your account.

We do not sell your data. We do not share platform data (Facebook, Instagram, WhatsApp) with third parties except the infrastructure providers needed to operate the service (hosting, AI model providers), bound by data-processing agreements. Data from connected platforms is used solely to provide the service to you, never to profile other users, never for advertising.

Meta platform data

Data received through Meta's APIs (Facebook Pages, Instagram) is handled in accordance with the Meta Platform Terms. It is read-only, fetched only for accounts the authenticating admin manages, stored securely, and deleted upon disconnection or request.

Google user data

One Nativve product, mail-desk, connects to Gmail for accounting offices that ask for it. It requests a single scope, gmail.readonly, and nothing else. It cannot send, reply, label, archive, or delete anything in your mailbox, and the consent screen Google shows you states exactly that.

• What we read: message headers (sender, subject, date), message bodies, and attachments in the connected mailbox, used to sort mail into accounting drawers and to read invoice and payslip details (issuer, amount, date, document type).
• What we store: the sorted result and the extracted document details, on our own servers. Access tokens are stored encrypted. Client-identifying fields are encrypted at rest.
• What we never do: we do not sell Google user data, do not use it for advertising, do not use it to build profiles of anyone other than the office that connected the account, and do not use it to train generalized AI or machine-learning models.
• Human access: no human reads your mail except where you explicitly ask us to investigate a problem, where it is necessary for security, or where the law requires it.

Nativve's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect at any time from your Google account's third-party access page, which immediately revokes our access; you may also ask us to delete everything we hold, as described below.

Data retention and deletion

We retain your data while your account is active. You may request deletion of your account and all associated data at any time. See our data deletion instructions. Deletion requests are honored within 30 days.

Security

Data is encrypted in transit (HTTPS/TLS) and at rest. Access tokens for connected platforms are stored encrypted and never exposed to other users.

Your rights

Subject to applicable law (including the Israeli Privacy Protection Law and, where applicable, the GDPR), you may request access to, correction of, or deletion of your personal data, and withdraw consent for connected platforms at any time by disconnecting them.

Contact

Privacy questions or requests: privacy@nativve.ai