Last updated: May 2024
Privacy Policy
This Privacy Policy explains how NativBase collects, uses, and protects your information when you use our website, mobile/web applications, and all related services.
By using NativBase, you agree to the practices described here. If you do not agree, please do not use the service.
Analytics and consent
We only enable Google Analytics 4 (via Google Tag Manager) after you opt in to analytics cookies.
Server-side events (like Stripe billing webhooks) are also suppressed unless analytics consent is present. We do not use GA4 for ads or cross-site tracking.
- Web and cookie-based analytics stay off until you accept analytics in the banner or settings.
- If you withdraw consent, analytics stop going forward and server-side GA4 events remain disabled without consent.
Data retention
We retain data as described below to operate the service and meet legal requirements.
- Chat messages and call session metadata (participants, timestamps, durations, chat counts) are retained indefinitely until we implement timed deletion in a future update.
- Stripe billing and payment records (including webhook payloads) are retained as required for tax and accounting laws.
- Contact form uploads and support emails may be stored in S3/Resend mailboxes; minimal account snapshots are kept when accounts are deleted for fraud prevention and compliance.
Account deletion
- Your profile is removed from the live service.
- Your authentication credentials are invalidated.
- A minimal record containing your email hash, user ID, and subscription history is retained for fraud prevention, accounting, and legal compliance.
- Chat messages and call session metadata remain in our system as historical records unless we implement timed deletion in a future update.
- Stripe billing records are retained as required for tax and accounting laws.
Service providers and storage
We rely on trusted vendors under data protection agreements to run NativBase.
- Auth0 for authentication and identity management.
- Stripe for billing, subscriptions, and related webhooks.
- Render, Vercel, and AWS (including S3) for hosting, storage, and media uploads.
- Upstash/Redis for presence state and queuing.
- Resend for transactional and support email delivery.
- Google Analytics 4 (only after you consent to analytics cookies).
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or export your data.
- Request access, correction, export, or deletion of your profile data by contacting support.
- Withdraw analytics consent at any time via the cookie banner/settings; disable cookies in your browser if you prefer.
- If you delete your account, we remove your profile and credentials as described above.
- For privacy requests or questions, reach out to support.
Questions?
If you have privacy questions or want to exercise your rights, contact us.