Privacy Policy

BCM Navigator is operated by Chua Lavandero Group OPC. BCM Navigator provides specialist-guided business continuity and resilience work, helping organizations connect their context, decisions, documents, and improvement activities. Its services include document assessment and a dedicated Tenant Knowledge Base for connected organizational knowledge.

This Privacy Policy explains how information is handled when you browse the BCM Navigator website, contact us, take the Readiness Snapshot, and use BCM Navigator subscription services. BCM Navigator will update this policy before its services introduce additional processing.

Accounts and payments open at Soft Launch. This policy describes the service as it will work from then.

1. Information You Provide

Contact inquiries

If you use our Contact page, you may provide your name, work email address, organization, job title, country, area of interest, and message.

The Contact page sends your message to BCM Navigator through the website. BCM Navigator stores the message and delivers it by email to its own mailbox through BCM Navigator’s email (SMTP) provider, and sends you an acknowledgement by email. To protect the Contact page from abuse, BCM Navigator keeps a one-way code derived from your IP address, not the address itself, for up to two days, to limit how many messages can be sent. Please do not include confidential, regulated, or highly sensitive information unless you are authorized to share it.

Readiness Snapshot

If you take the free Readiness Snapshot, BCM Navigator receives your answers and the email address you give to receive your results. If you agree to receive marketing email, such as news when a new specialist agent launches, BCM Navigator records that consent and when you gave it. You can withdraw consent at any time through the unsubscribe link in each email or by contacting teodolfo@bcmnavigator.com.

Accounts and workspaces

When you create an account, BCM Navigator collects your name, email address, and sign-in information, and the organization and workspace you create or join. Each person uses their own account. In a workspace, BCM Navigator stores the role each person holds (Owner, Member, Sponsor, or Viewer), the organizational context, answers, uploaded documents, workflow records, approvals, outputs, and the support requests you send.

Guest Contributors

An Owner or Member may invite a guest Contributor, such as a department head or subject expert, to answer specific questions through a secure link that expires and can be revoked. Contributors need no account. BCM Navigator stores the Contributor’s name, email address, and answers in the inviting workspace.

2. Information Collected When You Browse

When you browse the website, providers that deliver, secure, or support the website may process technical information such as your IP address, browser and device characteristics, request timestamps, referring page, and security or server-log information.

BCM Navigator counts page views on its own server. It records the page visited, the domain of the referring website, and the time, without storing your IP address, without cookies, and without a third-party analytics script. It also records key events that its own server confirms, such as an account created, a checkout completed, a Readiness Snapshot finished, or a Contact message sent, without your name, email address, organization, answers, or IP address. Website-delivery and security providers may retain technical records according to their applicable practices and legal obligations; BCM Navigator does not state a fixed period for those records in this policy.

3. How We Use Information

BCM Navigator may use information to:

• respond to questions and Contact inquiries
• understand the resilience objective or assistance described by you
• provide information about BCM Navigator and its services
• operate, secure, maintain, and improve the website
• provide accounts, subscriptions, and service access
• support specialist-guided resilience workflows
• assess documents and maintain connected organizational context
• provide customer and technical support
• communicate important service, account, or policy information
• comply with applicable legal obligations

4. Connected Organizational Context and Tenant Knowledge Base

BCM Navigator provides a dedicated Tenant Knowledge Base for each subscribing organization. It is intended to help relevant specialist-guided work use validated organizational context and finalized outputs as a resilience program develops.

The public website does not create customer Tenant Knowledge Base records. Tenant Knowledge Base information is kept in the subscribing organization’s workspace, is visible only to people the workspace Owner invites, and is handled as described in sections 7, 8, and 10.

5. Document Assessment and AI-Assisted Services

BCM Navigator is an AI-assisted platform designed to support structured guidance, analysis, drafting, document assessment, and connected resilience work. It is intended to support professional judgment, not replace it.

The public website does not accept documents or organizational information for specialist workflows; the portal does. When the portal processes that information with AI, it is sent to the AI provider named in section 7, which does not use it to train models. Users and organizations remain responsible for ensuring they have authority to provide information and for reviewing and approving outputs.

6. Payment and Subscription Information

BCM Navigator subscriptions are sold through Lemon Squeezy, which acts as merchant of record and payment processor. Lemon Squeezy collects and handles payment-card, bank-account, and other complete financial details under its own privacy policy; BCM Navigator does not receive or store them.

BCM Navigator receives the information needed to administer a subscription, such as a subscriber or payer name, email address, subscription identifier, plan, billing period, payment status, amount, billing date, refund information, and cancellation information.

7. Recipients and Service Providers

Information may be handled by:

• BCM Navigator and its privacy/support contact
• Render, which hosts the BCM Navigator website and portal
• Supabase, which stores the database, accounts, and uploaded files in Singapore
• Anthropic, through the Anthropic API, which processes the prompts, answers, and documents sent for AI-assisted work; under its commercial terms Anthropic does not use customer content to train models and keeps prompts and outputs only for a limited period
• Lemon Squeezy, the merchant of record and payment processor for subscriptions
• BCM Navigator’s email (SMTP) provider, which delivers Contact messages, Readiness Snapshot results, and account and billing email
• Cloudflare R2, which stores encrypted backups
• professional advisers, regulators, authorities, or other recipients where required or permitted by law

These recipients may process information for operating and securing the website and portal, responding to inquiries, providing AI-assisted work, processing payments, delivering email, keeping backups, maintaining appropriate business records, resolving issues, or meeting legal obligations. BCM Navigator will update this list before adding a service provider that processes personal information.

8. Data Retention and Deletion

Information entered into ordinary website fields may remain in your browser while you use the page unless you or your browser clears it.

BCM Navigator retains Contact messages and Readiness Snapshot details for as long as needed to respond, send what you asked for, maintain related business records, resolve issues, and meet applicable legal obligations. BCM Navigator deletes them when they are no longer needed for those purposes, subject to applicable retention requirements. Your email provider and other recipients may retain their own copies under their own practices.

Workspace information, including documents, organizational context, outputs, and workflow records, is kept while the workspace exists. A deleted workspace is permanently removed after a 30-day grace period. Encrypted backups are kept for 30 days, after which deleted information no longer appears in them.

To ask BCM Navigator to delete a Contact message, your Readiness Snapshot details, your account, or a workspace you own, contact teodolfo@bcmnavigator.com. Some records, such as billing records, may need to be kept to meet legal obligations, and approval and audit records keep the name and role a person had at the time.

9. Security

BCM Navigator intends to use reasonable administrative, technical, and organizational measures appropriate to the services and information it handles.

Connections to the website and portal are encrypted, stored information is encrypted at rest, and backups are encrypted. Consider the sensitivity of information before you send it.

No internet-based service or electronic communication method can guarantee absolute security. You are responsible for protecting your devices, email account, and any credentials used with BCM Navigator services.

10. International Processing

Chua Lavandero Group OPC is identified as operating from the Philippines. BCM Navigator’s database and uploaded files are stored in Singapore. AI processing through the Anthropic API may take place in other countries, and the other service providers named in section 7 may process information in other countries.

BCM Navigator will provide additional international-processing information where required by applicable law.

11. Cookies and Similar Technologies

The website and portal use only cookies or browser storage that are strictly necessary for them to work, such as keeping you signed in.

Page views and server-confirmed events, such as an account created or a Contact message sent, are counted on BCM Navigator’s own server, without cookies, without a third-party analytics script, without personal data, and without storing your IP address (see section 2), so no cookie banner is needed.

If BCM Navigator introduces additional non-essential analytics, advertising, or tracking technologies, it will update this policy and provide any consent controls required by applicable law before or when those technologies are used.

12. Your Privacy Rights

Applicable privacy laws may give you rights concerning personal information. The rights available to you depend on the applicable law, the type of information involved, and the circumstances of processing.

For privacy questions, or to ask about information sent to BCM Navigator, contact:

teodolfo@bcmnavigator.com

Please provide enough information for BCM Navigator to understand your request. BCM Navigator will assess and respond in accordance with applicable law and the facts of the request. Any applicable rights, response periods, identity-verification steps, complaint procedures, and authority contacts will be handled as required by the law applicable to the request.

13. Children

BCM Navigator is intended for professional and organizational use and is not directed to children. Please do not submit children’s information through the Contact page.

14. Changes to This Privacy Policy

BCM Navigator may update this Privacy Policy when its website, services, processing activities, service providers, or legal requirements change. Material changes will be published with a revised effective date when appropriate.

15. Contact

For privacy questions, concerns, or requests, contact: