Privacy Policy

Last updated: March 29, 2026

Nav Wireless Technologies Pvt. Ltd. ("we", "us", or "our") operates FindLOS at findlos.com. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

1. Information We Collect

1.1 Google Account Information

When you sign in with Google OAuth, we receive and store your:

• Name (display name)
• Email address
• Profile photo URL
• Google account identifier

1.2 Analysis Data

When you perform analyses, we store:

• Geographic coordinates (latitude and longitude) of analysis points
• Tower height parameters
• Analysis results (feasibility, distance, clearance values)
• Timestamps of analyses performed

1.3 Payment Information

Payment processing is handled entirely by Razorpay, a PCI-DSS compliant payment processor. We do not store, process, or have access to your credit/debit card numbers or banking details. We receive and store only:

• Razorpay payment ID and order ID (transaction references)
• Payment amount and status
• Subscription start and end dates

1.4 Usage Data

• Analysis history and credit usage
• Login timestamps and IP address (server logs)
• Feature usage patterns

2. How We Use Your Information

• Provide the Service: Authenticate your identity, run analyses, generate reports, and manage your credits.
• Account management: Manage approval status, subscription state, and credit balance.
• Service improvement: Analyze aggregate usage patterns to improve features and performance.
• Administration: Admin notifications, user management, and abuse prevention.
• Legal compliance: Respond to legal requests and enforce our Terms of Service.

3. Data Storage & Infrastructure

Your data is stored using:

• Google Cloud Firestore: User accounts, analysis history, credit transactions, and subscription records.
• Vercel: Application hosting with edge-optimized delivery.

All data is stored in secured, access-controlled environments with encryption at rest and in transit (TLS/HTTPS).

4. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Google OAuth 2.0: For authentication. Google Privacy Policy
• Google Maps & Elevation API: For map display and terrain data. Google Privacy Policy
• Razorpay: For payment processing. Razorpay Privacy Policy

5. Data Retention

• Account data: Retained for as long as your account is active.
• Analysis history: Retained indefinitely for audit and service improvement purposes.
• Payment records: Retained for 7 years for financial compliance.
• Server logs: Retained for up to 90 days.

6. Your Rights

You have the right to:

• Access your data: Request a copy of the personal data we hold about you.
• Delete your account: Request account deletion by contacting an administrator. Upon deletion, your personal data will be removed, though anonymized analysis logs may be retained for audit purposes.
• Export your data: Use the dashboard's CSV export feature to download your analysis history.
• Withdraw consent: Revoke Google OAuth access at any time via your Google Account settings.

7. Cookies & Local Storage

• Session cookies: Used by NextAuth.js for authentication. These are essential for the Service to function and cannot be disabled.
• Local storage: Used to persist form data, user preferences, and saved analysis links on your device. This data never leaves your browser.
• Cookie consent preference: Stored in local storage to remember your consent choice.

8. Security

We implement the following security measures:

• HTTPS encryption for all communications
• OAuth 2.0 authentication (no passwords stored)
• JWT-based session management with signed tokens
• Server-side rate limiting on critical endpoints
• Security headers (X-Frame-Options, CSP, HSTS, etc.)
• Role-based access control for admin functions
• Atomic Firestore transactions for credit operations

While we take reasonable measures to protect your data, no method of transmission over the Internet is 100% secure.

9. Children's Privacy

FindLOS is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us:

• Company: Nav Wireless Technologies Pvt. Ltd.
• Product: FindLOS
• Website: findlos.com
• Developer: Raj Patel