Privacy Policy

Last updated: July 14, 2026 · Version 2026-07-14.2

This Privacy Policy explains how SHOPWITHIVAN LLC, a Virginia limited liability company, doing business as ("d/b/a") NaviACO ("NaviACO," "NaviForms," "we," "us," "our") collects, uses, shares, and protects personal information when you use the naviforms.com website and the forms it issues (the "Site"). It applies alongside our Terms of Use and the ACO Service Terms of Service.

Plain-language summary. NaviForms issues you a dedicated signup form and passes what you enter to our automated-checkout service so we can act on your behalf. The sensitive details you enter into a form (such as payment-card and retailer-account information) are collected and stored through a secure third-party form and data-collection provider and are used to operate the ACO service — they are not stored in the NaviForms website's own database. The Site's own database holds only a limited, non-sensitive record of which forms were issued to your account and their status. We do not sell your personal information or share it for cross-context behavioral advertising.

1. Information we collect

A. Account & identity information. When you sign in through our third-party sign-in provider (Discord), we receive identifiers such as your account id, username, display name, avatar, and whether you are authorized to use the service.

B. Form-issuance records. A non-sensitive record that a form was issued to your account: which retailer it is for, an internal form reference, and its lifecycle status (for example, issued, submitted, expired, or removed), with timestamps. We retain a record linking each issued form to the account it was issued to for security, abuse-prevention, and service-integrity purposes.

C. Information you submit through a form. The details you enter to set up the ACO service, which, depending on the retailer, may include your name, contact details, shipping and billing address, retailer account information, and payment-card details. These submissions are collected and stored through a secure third-party form and data-collection provider and are handled as described in the ACO Service Terms of Service. We do not store full payment-card numbers in the NaviForms website's own database.

D. Contact & verification details. Email address(es) associated with your accounts and, where needed for checkout or verification, a phone number.

E. Technical & usage information. Device and connection information (such as IP address, browser/user-agent, and timestamps), pages and features used, and diagnostic/error logs generated as you use the Site.

F. Cookies & local storage. A session token and limited settings stored in your browser to keep you signed in and operate the Site (see §7).

We do not intend to collect special categories of data through the Site itself, and the Site is not directed to anyone under 18.

2. Sensitive information & consent

Some information you provide to set up the ACO service is "sensitive" under certain privacy laws — for example, payment-card and financial information and retailer account log-in credentials. This information is collected and stored through a secure third-party form and data-collection provider and is used solely to provide the service you request (to set up and perform checkouts and to bill Pay-After-Success fees). By submitting it and accepting these terms, you consent to our collection and use of this sensitive information for those purposes. We do not use or disclose sensitive information for advertising or for purposes beyond providing, securing, supporting, and improving the service and complying with law.

3. How we use information

We use personal information to:

• authenticate you and confirm you are authorized to use the service;
• issue, deliver, track, and manage the forms associated with your account;
• provide, operate, maintain, and secure the Site and the ACO service, and pass your submitted information to the ACO service to act on your behalf;
• provide support and respond to you, and send service-related communications via Discord and, where applicable, email;
• monitor, debug, and improve the Site, and prevent fraud, abuse, form-enumeration, and security incidents; and
• comply with legal, tax, and accounting obligations and enforce our terms.

4. Legal bases (where applicable)

Where data-protection law (such as the EU/UK GDPR) applies, we process personal information as necessary to perform our contract with you, for our legitimate interests (such as securing the Site, preventing abuse, and protecting the integrity of the form-issuance system), to comply with legal obligations, and/or with your consent where required (including for sensitive data). Where we rely on consent, you may withdraw it at any time, without affecting prior processing.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. We disclose personal information only as follows, and only as needed:

• Service providers / processors (by category) — a sign-in/identity provider, hosting and infrastructure providers, a secure form and data-collection provider, and communications and diagnostics providers that process data under our instructions.
• The ACO service — information you submit through a form is provided to our automated-checkout service (and used as described in the ACO Service Terms of Service) so we can act on your behalf.
• Retailers — information you submit is used to complete signups and checkouts with retailers on your behalf.
• Legal & safety — when required by law, to respond to lawful requests, or to protect the rights, safety, and security of our users, the public, or us.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We describe recipients by category. If you are covered by a law entitling you to a list of specific recipients, contact us and we will provide it as required.

6. Retention

We keep personal information for as long as needed to provide the Site and the ACO service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. In particular:

• Sensitive form submissions (such as payment-card and retailer-account details) are handled and retained through the secure third-party form and data-collection provider and are governed by the retention terms in the ACO Service Terms of Service; they are removed from active checkout systems after you request to stop being run or after service completion, except that payment-card information may be retained for billing until all outstanding balances are settled.
• Form-issuance records (the non-sensitive record of which forms were issued to your account and their status) may be retained on an ongoing basis for security, abuse-prevention, and service-integrity purposes.
• Diagnostic/error logs are retained for a limited period and then purged.

When information is no longer needed, we delete or de-identify it.

7. Cookies & local storage

We use browser storage and similar technologies that are strictly necessary to keep you signed in, remember settings, and operate and secure the Site. We do not use them for third-party advertising. You can clear browser storage in your browser settings, but doing so will sign you out and may impair the Site.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. By design, the sensitive details you enter into a form are collected and stored through a secure third-party form and data-collection provider rather than in the NaviForms website's own database, and the Site's own records are limited to non-sensitive form-issuance data scoped to your account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Protect your account by securing your sign-in credentials and enabling additional verification where available, and notify us promptly of any suspected compromise.

9. Your privacy rights & choices

Depending on where you live — for example, under the Virginia Consumer Data Protection Act (VCDPA), California's CCPA/CPRA, other U.S. state privacy laws, or the GDPR — you may have some or all of the following rights: to access/know the personal information we hold about you; to correct it; to delete it; to obtain a portable copy; to opt out of the "sale" or "sharing"/targeted advertising of your personal information and of certain profiling (note: we do not sell or share for targeted advertising); and to not be discriminated against for exercising your rights.

• How to exercise. Email shopwithivanco@gmail.com. We will verify your identity before acting and respond within the timeframe required by law (generally 45 days under U.S. state laws, extendable, or one month under the GDPR).
• Authorized agents. You may use an authorized agent to submit a request where the law allows; we may require proof of authorization and verification of your identity.
• Appeals. If we decline your request, you may appeal by replying to our decision or emailing shopwithivanco@gmail.com with "Privacy Appeal." We will respond within the time the law requires (for example, 60 days under the VCDPA). If your appeal is denied, you may contact your state attorney general.
• Deletion & payment-method removal are subject to settlement of outstanding balances and completion of pending operations, as described in the ACO Service Terms of Service; we may retain records we are permitted or required to keep.

10. Automated processing

We use automated systems to operate the service (for example, to issue forms and detect fraud, abuse, or form-enumeration). We do not use these systems to make decisions that produce legal or similarly significant effects about you without a lawful basis, and where a law gives you a right to opt out of certain profiling, you may exercise it as described in §9.

11. International users

We are based in the United States and process and store information here and in other countries. If you access the Site from outside the United States, you understand your information may be transferred to and processed in jurisdictions with different data-protection laws; where required, we implement appropriate safeguards for such transfers.

12. Children

The Site is intended for adults (18+) and is not directed to children. We do not knowingly collect personal information from anyone under 18 (or under 13 in any event). If you believe a child provided us information, contact us and we will delete it.

13. Changes & contact

We may update this Policy from time to time; we will update the version and date above. For privacy questions, to exercise a right, or to appeal, contact NaviACO support — email shopwithivanco@gmail.com, or contact n9vi on the NaviACO Discord server, or write to us at SHOPWITHIVAN LLC, [add registered mailing address before public launch], Virginia, United States. The Site and the ACO service are operated by SHOPWITHIVAN LLC, a Virginia limited liability company, doing business as ("d/b/a") NaviACO.