CCPA/CPRA Privacy Policy

CCPA/CPRA Privacy Notice (California Residents) 
Last Updated: July 14, 2026

1. Scope of This Notice
This California Privacy Notice (“Notice”) supplements Navien, Inc.’s Privacy Policy and applies to California residents. This Notice explains how Navien, Inc. (“Navien,” “we,” “us,” or “our”) collects, uses, discloses, sells, shares, and retains Personal Information, and describes the rights California residents may have under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”).  
 
For purposes of this Notice, “Personal Information,” “Sensitive Personal Information,” “sell,” “share,” “business purpose,” “commercial purpose,” “service provider,” “contractor,” and “third party” have the meanings given to them under the CCPA. Personal Information does not include publicly available information, deidentified or aggregated information, or information otherwise excluded from the scope of the CCPA.  
 
2. Personal Information We Collect, Disclose, and Share
We collect Personal Information from and about California residents when they visit or use our websites, mobile applications, online forms, digital tools, product registration portals, warranty or service tools, rebate tools, locator tools, advertising or marketing features, and other digital properties. During the preceding twelve (12) months, we have collected, disclosed for business purposes, and, where noted, shared the following categories of Personal Information: 

 

 

The examples above are illustrative and may not reflect every type of Personal Information we collect in a particular context. Whether a category is collected, disclosed, or shared depends on your interaction with us and the applicable product, service, form, feature, or digital property.  
 
For users of the NaviLink App, the Navien Sphere App, or any successor or replacement Navien mobile application and connected Navien devices, we may collect account identifiers, user ID, email address, connected device identifiers, connected device MAC address, app or device telemetry, operational status information, diagnostic information, connectivity information, and general location information derived from installation information, such as state or city. If a user enables the NaviLink/Navien Sphere App real-time weather feature, we may also collect precise geolocation data for the purpose of providing localized weather functionality and related support for that feature.

3. Categories of Sources  
We collect Personal Information from the following categories of sources: 

• Directly from you, such as when you submit forms, register products, request warranty or service support, use rebate or locator tools, sign up for communications, or otherwise communicate with us.
• Automatically from your browser, device, mobile application, connected Navien device, or use of our digital properties, including through cookies, pixels, tags, SDKs, local storage, analytics tools, session replay or heatmap tools, advertising technologies, server logs, app telemetry, connected device telemetry, and similar technologies.
• From service providers, contractors, vendors, and business partners that help us operate our websites, mobile applications, forms, warranty systems, customer service systems, CRM systems, marketing systems, analytics tools, advertising tools, rebate tools, locator tools, and other business platforms. 
• From advertising, analytics, and social media platforms, where permitted by law and subject to your privacy choices. 

4. Business or Commercial Purposes for Collection, Use, Disclosure, and Sharing  
We collect, use, disclose, and process Personal Information for the following business or commercial purposes:

• To respond to inquiries, requests, and communications. 
• To provide, operate, maintain, secure, personalize, and improve our websites, mobile applications, digital tools, products, and services. 
• To process product registrations, administer warranties, validate installation information, maintain service and repair histories, and support quality assurance.
• To provide location-based features, including localized rebate information, installers, service providers, distributors, sales representatives, and real-time weather guidance where enabled. 
• To operate and support the NaviLink App, the Navien Sphere App, or any successor or replacement Navien mobile application and connected Navien devices, monitor service availability, evaluate product performance, monitor device operation and system status, diagnose errors or connectivity issues, maintain service reliability, support warranty, safety, and customer service activities, and improve connected-device functionality.
• To send service, transactional, warranty, safety, recall, administrative, or other non-marketing communications.
• To send marketing communications, product updates, promotional communications, event information, or other communications where permitted by law or with your consent where required. 
• To analyze trends, measure engagement, evaluate advertising performance, create audience segments, perform campaign measurement, conduct market research, and understand customer interests. 
• To provide cross-context behavioral advertising, targeted advertising, audience matching, campaign optimization, advertising attribution, and similar marketing activities, subject to your opt-out rights. 
• To prevent fraud, protect the security and integrity of our systems, debug problems, enforce our terms, and protect our rights, property, employees, customers, users, and the public. 
• To comply with legal, regulatory, tax, accounting, warranty, product safety, and recordkeeping obligations, respond to lawful requests, and establish, exercise, or defend legal claims. 
• To evaluate or conduct a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction.

We do not use connected device MAC addresses, NaviLink App, the Navien Sphere App, or any successor or replacement Navien mobile application diagnostic information, or precise geolocation collected for the NaviLink/Navien Sphere App real-time weather feature for advertising or marketing purposes. 

5. Categories of Third Parties to Whom We Disclose or Share Personal Information  
We may disclose or share Personal Information with the following categories of third parties, service providers, contractors, or business partners:

• Cloud-based form, database, CRM, customer support, email marketing, workflow-management, hosting, storage, and business operations providers. 
• Warranty, product-registration, customer service, service-record, quality-assurance, and technical support providers. 
• Installers, contractors, distributors, sales representatives, service providers, and other business partners as needed to respond to your requests or provide requested services. 
• Parent company and affiliates located in Korea, for NaviLink App, the Navien Sphere App, or any successor or replacement Navien mobile application and connected-device operation, service availability monitoring, performance monitoring, diagnostic, support, security, warranty, product improvement, and related business purposes.
• Analytics providers, session replay or heatmap providers, advertising networks, advertising technology providers, social media platforms, and similar marketing or measurement partners. 
• Rebate, incentive, locator, embedded media, security, fraud prevention, consent-management, and website functionality providers. 
• Professional advisers, auditors, insurers, legal counsel, regulators, law enforcement, courts, and government authorities where required or permitted by law. 
• Parties involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction. 

For NaviLink App, the Navien Sphere App, or any successor or replacement Navien mobile application and connected-device services, the information shared with our parent company and affiliates in Korea may include masked account identifiers, connected device MAC address, device status information, diagnostic information, and general location information derived from installation information, such as state or city. We do not share raw latitude/longitude coordinates collected for the NaviLink App, the Navien Sphere App, or any successor or replacement Navien mobile application real-time weather feature with our parent company in Korea. This disclosure to our parent company and affiliates in Korea is for the business and operational purposes described above and is not a disclosure for cross-context behavioral advertising.

6. Sale and Sharing of Personal Information
We do not sell Personal Information for money. However, we may “share” Personal Information, as that term is defined under the CCPA, with advertising networks, analytics providers, social media platforms, and similar third parties for cross-context behavioral advertising, advertising measurement, audience matching, campaign optimization, and related marketing purposes.  
 
The categories of Personal Information that we may share include identifiers, internet or other electronic network activity information, commercial information, geolocation information, and inferences. We do not knowingly sell or share the Personal Information of consumers under 16 years of age.  
 
We do not share precise geolocation collected for the NaviLink App, the Navien Sphere App, or any successor or replacement Navien mobile application real-time weather feature, connected device MAC addresses, NaviLink App, the Navien Sphere App, or any successor or replacement Navien mobile application connected-device telemetry, or diagnostic information for cross-context behavioral advertising. 
 
You may opt out of sale or sharing by using our “Do Not Sell or Share My Personal Information” link, cookie or privacy preference tools, or any other method we make available for this purpose. You may also use a legally recognized opt-out preference signal, such as Global Privacy Control, as described below.

7. Sensitive Personal Information 
We collect Sensitive Personal Information only in limited circumstances and use it for purposes permitted by the CCPA, such as providing requested services, processing transactions, maintaining security, preventing fraud, complying with legal obligations, verifying information, supporting employment-related or business-related processes where applicable, or providing location-based functionality you request.  
 
For example, if a user enables the NaviLink App, the Navien Sphere App, or any successor or replacement Navien mobile application real-time weather feature, we may collect precise geolocation data to provide localized weather functionality and related support for that feature. We do not use precise geolocation collected for the NaviLink App, the Navien Sphere App, or any successor or replacement Navien mobile application real-time weather feature to infer characteristics about you, for advertising or marketing purposes, or to share raw latitude/longitude coordinates with our parent company in Korea. 
 
We do not use Sensitive Personal Information to infer characteristics about you. We do not share Sensitive Personal Information for cross-context behavioral advertising. If our practices change in a way that gives California residents a right to limit our use or disclosure of Sensitive Personal Information, we will provide the notice and mechanisms required by the CCPA. 

8. Retention of Personal Information
We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Notice and our Privacy Policy, including to provide services, administer warranties, maintain service records, comply with legal and regulatory obligations, resolve disputes, enforce agreements, prevent fraud, and establish, exercise, or defend legal claims.  
 
Retention periods vary depending on the category of Personal Information, the purpose for which it was collected, the nature of your relationship with us, warranty or product safety obligations, legal requirements, and our legitimate business needs. For example, warranty registration and service records may be retained for the period necessary to administer warranty coverage, support claims, provide product safety or recall support, and comply with applicable legal obligations. Inquiry records may be retained for the period necessary to resolve the inquiry and maintain appropriate business records.  
 
We may retain information longer where required by law, subject to a legal hold, or necessary to establish, exercise, or defend legal claims. 

9. Your California Privacy Rights  
California residents may have the following rights under the CCPA, subject to applicable limitations and exceptions:

• Right to Know/Access. You may request that we disclose the categories or specific pieces of Personal Information we have collected about you, including information about our collection, use, disclosure, sale, or sharing of Personal Information. 
• Right to Delete. You may request that we delete Personal Information that we collected from you, subject to applicable exceptions, including where retention is necessary for warranty, product safety, legal, security, fraud prevention, or other permitted purposes. 
• Right to Correct. You may request that we correct inaccurate Personal Information that we maintain about you. 
• Right to Opt Out of Sale or Sharing. You may opt out of the sale or sharing of Personal Information, including sharing for cross-context behavioral advertising. 
• Right to Limit Use and Disclosure of Sensitive Personal Information. Where applicable, you may request that we limit the use or disclosure of Sensitive Personal Information to purposes permitted by the CCPA. 
• Right to Non-Discrimination. We will not discriminate against you for exercising rights provided by the CCPA. 

10. How to Submit Requests  
To submit a California privacy request, you may contact us through one of the following methods: 

• Online: https://www.navieninc.com/contact 
• Telephone: (800) 519-8794
• Email: contactus@navien.com
• Mail: Navien, Inc., 20 Goodyear, Irvine, CA 92618

For opt-out requests relating to sale or sharing, you may also use the applicable “Do Not Sell or Share My Personal Information” link, cookie or privacy preference center, or legally recognized opt-out preference signal, such as Global Privacy Control, where available and required by law.

11. Verification of Requests  
We may verify your request by matching information you provide with information we maintain, such as your first and last name, email address, postal address, telephone number, state of residence, product registration information, or other information reasonably necessary to verify your identity and process your request. We will use information provided for verification only to verify and process your request unless otherwise permitted by law.  
 
We will respond to verifiable consumer requests within the time required by the CCPA. If we need additional time, we will notify you as required by law. You may submit a request to know up to two times within a twelve (12)-month period. 

12. Authorized Agents  
You may authorize another person or entity to submit a request on your behalf. We may require the authorized agent to provide proof that you authorized the agent to act on your behalf, and we may also require you to verify your identity directly with us or confirm that you provided the agent permission to submit the request, unless an exception applies under the CCPA.  
 
13. Global Privacy Control and Opt-Out Preference Signals  
We honor opt-out preference signals, including Global Privacy Control, as required by applicable law. When we receive and process a valid opt-out preference signal, we treat it as a request to opt out of sale and sharing for the browser or device through which the signal is sent.  
 
Where required by law, we will provide a means for you to confirm that your opt-out request has been processed, such as through a privacy preference tool, cookie preference center, or similar confirmation mechanism. 

14. Notice of Financial Incentive 
We do not currently offer a financial incentive or price or service difference in exchange for the collection, retention, sale, or sharing of Personal Information. If we offer a program that constitutes a financial incentive or price or service difference under the CCPA, we will provide the notice required by law and obtain any required consent before you participate.  

15. Changes to This Notice
We may update this Notice from time to time. When we make material changes, we will provide notice as required by applicable law, which may include posting the updated Notice on our website, updating the effective date, or providing another appropriate notice.

16. Contact Information
Navien, Inc.
20 Goodyear
Irvine, CA 92618
Telephone: (800) 519-8794
Email: contactus@navien.com
Website: https://www.navieninc.com/contact