Privacy Policy

Effective Date: August 8, 2026
Last Updated: August 8, 2026
This Privacy Policy explains how Asset Navigator by Van Lierde & Co, a company established in Switzerland ("Asset Navigator", "Van Lierde & Co", "we", "us", or "our"), collects, uses, stores, and protects personal data in connection with Asset Navigator ("Asset Navigator", the "Service"), our website, and related services.

Van Lierde & Co operates Asset Navigator.
Registered address: Geneva, SWITZERLAND
Privacy contact: legal@assetnavigator.io

By using Asset Navigator or our website, you acknowledge the processing practices described in this Privacy Policy.

1. What is Asset Navigator?

Asset Navigator is a Software-as-a-Service platform designed to help developers, project managers, business analysts, and other users understand relationships and dependencies between business and technical assets.

Depending on how the Service is used, these assets may include:
  • applications
  • reports and dashboards
  • datasets
  • data lakes
  • databases
  • APIs
  • data flows
  • integrations
  • components
  • business processes
  • technical systems
  • other related assets and metadata.
Asset Navigator allows users to create, maintain, visualize, and analyze relationships between these assets.
The Service may also provide APIs that customers can use to create or link assets automatically.

Asset Navigator does not currently connect directly to customers' databases or other systems to automatically collect their data. We may introduce additional integrations and automated data connections in the future.

2. Who is responsible for your personal data?

The entity responsible for the processing described in this Privacy Policy is:
Van Lierde & Co
Registered address: Geneva, Switzerland
Email: legal@assetnavigator.io

Depending on the circumstances, Van Lierde & Co may act as:
  1. a data controller, when we determine why and how personal data is processed, such as when managing user accounts, subscriptions, billing, security, our website, or our own business operations; or
  2. a data processor, when we process personal data on behalf of an Asset Navigator customer in connection with that customer's use of the Service.
When we act as a processor, the customer's instructions and our Data Processing Agreement (DPA) govern that processing.

3. Personal data we collect

The type of personal data we collect depends on how you interact with Asset Navigator.

3.1 Account information

When you create an Asset Navigator account, we may collect:
  • name
  • email address
  • company or organization name
  • job title or role, where provided
  • username
  • password credentials or authentication information
  • account preferences
  • subscription information; and
  • information necessary to administer the account.
Asset Navigator currently uses its own authentication system.

We may introduce additional authentication options, including multi-factor authentication and Microsoft Entra ID, in future versions of the Service. This Privacy Policy may be updated when such features become available.

4. Customer Data

Customers may enter information into Asset Navigator when creating and managing assets and relationships.

This information may include:

  • Names of applications
  • Reports
  • Datasets
  • Databases
  • APIs
  • Data flows
  • Systems
  • Business processes
  • Technical components
  • Descriptions
  • Ownership information
  • Dependencies
  • Relationships
  • Documentation
  • Comments
  • Identifiers
  • Metadata
  • Other information entered by the customer

Customer Data may contain personal data.

For example, a customer may identify an employee as the owner of an application or assign a project manager to a business process.

Where an organization uses Asset Navigator and determines the purpose for which this Customer Data is processed, the organization will generally act as the data controller, while Van Lierde & Co acts as the data processor.

Customers are responsible for ensuring that they have the necessary rights and legal basis to provide Customer Data to Asset Navigator.

5. Data submitted through the Asset Navigator API

Asset Navigator provides an API that customers may use to create assets, establish relationships between assets, or otherwise interact with the Service programmatically.

Customers are responsible for determining what information they send through the API and ensuring that the processing complies with applicable data protection law.

The API may process personal data where such information is included by the customer.

Asset Navigator does not currently use the API to automatically connect to customer databases, data lakes, applications, or other systems.

We may introduce additional integrations and automated connections in future versions of the Service. Where these changes materially affect how personal data is processed, we will update this Privacy Policy and, where required, obtain any necessary permissions or agreements.

6. Free accounts

Asset Navigator offers a free tier that allows users to test the Service.

The free tier currently limits users to 20 assets.

The same basic privacy and security principles described in this Privacy Policy apply to free-tier accounts.

We may impose additional limitations on free accounts, including storage, functionality, API usage, or account retention.

7. How we use personal data

Providing Asset Navigator

We process personal data to:

  • Create and administer accounts
  • Authenticate users
  • Provide access to the Service
  • Store and display Customer Data
  • Provide API functionality
  • Maintain relationships between assets
  • Provide customer support
  • Maintain backups
  • Monitor service availability
  • Troubleshoot problems
  • Provide requested functionality

Security

We may process technical and account information to:

  • Protect the Service
  • Detect unauthorized access
  • Investigate suspicious activity
  • Prevent abuse
  • Maintain logs
  • Protect Customer Data
  • Investigate security incidents

Service improvement

We may analyze aggregated or appropriately de-identified information to understand how Asset Navigator is used and improve the Service.

We do not sell Customer Data.

Business administration

We may process personal data for:

  • Billing
  • Subscription management
  • Accounting
  • Tax compliance
  • Financial administration
  • Contract management
  • Legal compliance
  • Business records

Communications

We may use contact information to:

  • Send transactional emails
  • Provide service notifications
  • Respond to support requests
  • Communicate about accounts
  • Communicate about security or service incidents
  • Provide information about material changes to the Service or our agreements

Where required by law, marketing communications will be subject to applicable consent and opt-out requirements.

8. Legal bases for processing

Depending on the circumstances, we process personal data based on one or more of the following legal grounds:

  • Performance of a contract
  • Taking steps at the request of a user before entering into a contract
  • Compliance with legal obligations
  • Legitimate interests, where permitted by applicable law
  • Consent, where consent is required

For customers located in the European Economic Area or otherwise subject to the GDPR, the specific legal basis will depend on the processing activity.

Where processing is based on consent, the individual may withdraw consent at any time. Withdrawal does not affect processing that took place before the withdrawal.

9. Analytics

We use Google Analytics to understand how our website and Asset Navigator are used.

Analytics may collect information such as:

  • IP address or approximate location
  • Browser and device information
  • Pages visited
  • Referring websites
  • Interaction information
  • Session information
  • Approximate geographic information
  • Usage patterns
  • Other technical information

We use this information to understand usage, improve the Service, identify technical problems, and improve our website and product experience.

Google may process analytics information using infrastructure located in different countries. Google states that its servers are distributed globally and that information may be processed outside the country where a user is located.

Where applicable, Asset Navigator relies on the contractual and other transfer safeguards provided by Google for international processing.

Users may also have controls available through their browser or Google's own privacy and advertising settings.

10. Cookies and similar technologies

Asset Navigator and our website may use cookies and similar technologies.

Some cookies are necessary for:

  • Authentication
  • Account security
  • Session management
  • Service functionality
  • Remembering necessary settings

We may also use analytics cookies to understand website and product usage.

Where required by applicable law, we will request consent before placing non-essential cookies.

Users can control cookies through their browser settings and, where available, our cookie-management tools.

Disabling certain cookies may affect the functionality of the Service.

11. Payments and Stripe

Paid Asset Navigator subscriptions may be processed using Stripe.

Stripe may process information such as:

  • Name
  • Company information
  • Billing address
  • Email address
  • Subscription information
  • Transaction information
  • Payment information
  • IP address
  • Fraud-prevention information
  • Information required to comply with financial and legal obligations

Payment-card information is processed by Stripe and is not intended to be stored directly by Asset Navigator.

Stripe may process personal data for different purposes. Depending on the activity, Stripe may act as a processor or as an independent controller.

For more information, users should review Stripe's Privacy Policy and applicable data-processing terms.

12. Email communications

Asset Navigator sends transactional emails using software and infrastructure operated by Van Lierde & Co.

These emails may include:

  • Account confirmation messages
  • Password or account notifications
  • Security notifications
  • Service notifications
  • Billing notifications
  • Support communications
  • Other messages necessary to operate the Service

Email-related information may include the recipient's email address, name, message content, delivery status, and technical information necessary to deliver and monitor the email.

13. Hosting and infrastructure

Asset Navigator production systems are hosted on dedicated infrastructure located at a server facility in Belgium, European Economic Area.

Hosting provider: Combell SA

The hosting provider may provide infrastructure, physical security, power, cooling, network connectivity, hardware maintenance, and related data-centre services.

Access to production infrastructure is restricted and controlled according to our security procedures.

We may change or add infrastructure providers in the future, subject to our contractual and data-protection obligations.

14. Other service providers

We may use third-party service providers to operate Asset Navigator and our business.

These may include providers for:

  • Hosting
  • Infrastructure
  • Security
  • Backups
  • Monitoring
  • Analytics
  • Customer support
  • Payment processing
  • Accounting
  • Email
  • Authentication
  • Communications
  • Professional services

Where a third party processes personal data on our behalf, we take reasonable steps to ensure that appropriate contractual and security protections are in place.

Our customer-facing Subprocessor List identifies subprocessors used to process Customer Data on behalf of our customers.

Not every third-party service provider is a subprocessor. For example, accounting or financial service providers may process billing information for Van Lierde & Co's own accounting and legal obligations and may therefore act as processors or independent controllers for those activities.

15. AI-assisted functionality

Asset Navigator may introduce AI-assisted features in the future.

For example, AI may be used to:

  • Identify potential relationships between assets
  • Suggest missing information
  • Identify inconsistencies
  • Recommend asset classifications
  • Improve descriptions
  • Assist users in understanding asset relationships

Where an AI feature processes Customer Data, the processing will be limited to providing or improving the relevant Asset Navigator functionality and will be subject to the customer's applicable agreement and our Data Processing Agreement.

Van Lierde & Co does not currently use Customer Data to train a general-purpose AI model across customers .

If we introduce AI features that involve training models using Customer Data, we will obtain appropriate customer consent or authorization where required and clearly communicate the applicable processing terms before doing so.

16. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required by law.

Active accounts

Account and Customer Data are retained while the account remains active and for as long as necessary to provide the Service.

Deleted or terminated accounts

Following account termination or deletion, we aim to delete or anonymize associated account and Customer Data within three months, unless:

  • The customer requests an earlier deletion where technically and legally possible
  • Applicable law requires retention
  • Information is required to establish, exercise, or defend legal claims
  • Information remains temporarily in backups that are securely isolated and automatically overwritten according to our backup retention procedures

Financial records

Information required for accounting, tax, financial reporting, or legal obligations may be retained for longer periods where required by applicable law.

Security and technical logs

Certain logs may be retained for a limited period for security, fraud prevention, troubleshooting, and operational purposes.

17. Data deletion

Customers may request deletion of their account and Customer Data, subject to applicable contractual and legal obligations.

When an account is terminated, we will follow our applicable deletion procedures.

Where Customer Data is stored in backups, deletion may occur through the normal backup lifecycle rather than immediately deleting individual backup copies.

18. International data transfers

Van Lierde & Co is based in Switzerland.

Asset Navigator's primary production hosting is located in Belgium.

Some service providers, including analytics and payment providers, may process personal data in countries outside Switzerland or the European Economic Area.

Where personal data is transferred internationally, we will use an appropriate legal mechanism where required, such as:

  • An applicable adequacy decision
  • Recognised contractual safeguards
  • Standard Contractual Clauses
  • Swiss-recognised data-transfer clauses
  • Another legally permitted transfer mechanism

21. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.

These measures may include:

  • Access controls
  • Authentication controls
  • Encryption in transit
  • Encryption at rest where applicable
  • Least-privilege access
  • Monitoring and logging
  • Security updates
  • Vulnerability management
  • Backups
  • Disaster recovery procedures
  • Restricted production access
  • Confidentiality obligations
  • Incident-response procedures

No internet-based service can guarantee absolute security.

Customers are responsible for protecting their own credentials and for controlling access to their Asset Navigator accounts.

20. Data breaches

If we become aware of a personal-data breach affecting personal data processed on behalf of a customer, we will notify the relevant customer without undue delay as required by the applicable Data Processing Agreement and applicable law.

Where appropriate, we will provide available information concerning:

  • The nature of the incident
  • Affected data
  • Affected systems
  • Likely consequences
  • Containment measures
  • Corrective actions

21. Data subject rights

Depending on applicable law, individuals may have rights including:

  • The right to know whether personal data is being processed
  • The right to access personal data
  • The right to correct inaccurate personal data
  • The right to request deletion
  • The right to restrict certain processing
  • The right to object to certain processing
  • The right to data portability
  • The right to withdraw consent where processing is based on consent
  • Rights relating to automated decision-making where applicable

Where an Asset Navigator customer is the controller of the relevant data, requests relating to Customer Data should generally be directed to that customer first.

If we receive such a request directly, we may refer the individual to the relevant customer and assist the customer as required under our DPA.

22. Children

Asset Navigator is a professional SaaS platform intended primarily for business and professional use.

We do not knowingly collect personal data from children for the purpose of providing the Service.

If you believe that a child has provided personal data to us improperly, please contact us at legal@assetnavigator.io.

23. Customer responsibilities

Customers are responsible for:

  • Determining what personal data they upload to Asset Navigator
  • Ensuring that they have a lawful basis for processing that data
  • Providing appropriate privacy notices to their users
  • Avoiding unnecessary sensitive personal data
  • Configuring access permissions appropriately
  • Protecting their account credentials
  • Ensuring that API integrations comply with applicable law
  • Complying with their obligations under applicable data-protection law

Customers should avoid uploading sensitive personal data unless it is necessary, lawful, and covered by the applicable agreement.

24. Sensitive personal data

Asset Navigator is not designed to require special categories of personal data or sensitive personal information.

Customers should not upload sensitive personal data unless necessary and permitted under their agreement with Van Lierde & Co and applicable law.

If a customer needs to process sensitive personal data through Asset Navigator, additional technical, contractual, and organizational measures may be required.

25. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be necessary because of:

  • Changes to Asset Navigator
  • New features
  • New service providers
  • Changes to applicable law
  • Changes to our processing activities
  • Improvements to our privacy practices

When changes are material, we will take reasonable steps to notify users where required.

The updated version will be published on the Asset Navigator website with a new "Last Updated" date.

26. Complaints

If you believe that your personal data has been processed unlawfully, please contact us first at legal@assetnavigator.io.

If you are located in Switzerland and are not satisfied with our response, you may contact the Federal Data Protection and Information Commissioner (FDPIC) .

If you are located in the European Economic Area, you may also have the right to lodge a complaint with the data-protection supervisory authority in your country.

27. Contact

For questions about this Privacy Policy or our privacy practices:

Van Lierde & Co

Asset Navigator

Registered address:
Geneva
Switzerland

Privacy email:
legal@assetnavigator.io

Website:
https://assetnavigator.io

28. Relationship with the Data Processing Agreement

Where an organization uses Asset Navigator to process personal data on its behalf, the Asset Navigator Data Processing Agreement (DPA) applies to that processing.

If there is a conflict between this Privacy Policy and a separately executed DPA regarding the processing of Customer Data, the DPA will take precedence to the extent of the conflict.