HavenHQ Privacy Policy

Effective Date: August 7, 2026 · Last Updated: August 7, 2026

1. Introduction

HavenHQ LLC, an Ohio limited liability company ("HavenHQ," "we," "us," or "our"), provides a home-maintenance platform that helps homeowners track, schedule, and record maintenance for one or more properties (the "Service"). This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices and rights you have.

Please read this policy carefully, together with our Terms of Service. By creating an account or using the Service, you acknowledge the practices described in this policy, including our collection and retention of property-level maintenance records and our use of data to develop and offer products and services as described in Sections 3, 4, and 5. If you do not agree, do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: your name, email address, and password.
• Property information: for each home you add, the street address or ZIP code, home type, year built, square footage, and the systems and appliances in the home (for example, furnace type or water-heater type).
• Task and maintenance data: task completion records, notes you add, custom tasks you create, snooze preferences, and optional details such as cost paid, whether a professional was hired, and parts used.
• Payment information: billing details processed by our payment processor, Stripe. We do not store full payment card numbers; Stripe handles card data directly.
• Communication preferences: your notification-channel choices (email and push notifications).

2.2 Information We Collect Automatically

• Usage data: which features you use, how often you log in, and tasks viewed and completed.
• Device information: browser type, operating system, and device type.
• Log data: IP address, pages visited, timestamps, and referring URLs.
• Cookies and similar technologies: session tokens used to keep you logged in. We use cookies for authentication and session management. We do not use third-party advertising or cross-site tracking cookies.

2.3 A Note on Property Addresses and Location Data

A property's street address identifies a specific location. Some privacy laws treat precise location information as "sensitive." We collect a property address only to provide the Service and to maintain the property maintenance record described in Section 5.2, and we handle it consistent with the "sensitive data" rules that apply where you live (see Section 8).

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: generate personalized maintenance schedules, send reminders, track task completion, deliver reports, and support multiple properties under your account.
• Process payments and manage subscriptions, including add-on properties, proration, and billing changes (see our Terms of Service).
• Send notifications: deliver reminders and alerts by email or push notification according to your preferences.
• Maintain property maintenance records: build and keep an append-only maintenance history for each property, as described in Section 5.2.
• Analyze, improve, and develop products: understand how the Service is used; improve features and reliability; and develop new products and services, including statistical, predictive, and machine-learning models (for example, models that estimate the typical service life or failure rates of home systems within a geographic area).
• Create de-identified and aggregated data: produce de-identified, aggregated, and statistical datasets and property maintenance records that no longer identify you, for the purposes described in Section 5.
• Communicate with you: send service updates, security alerts, and support responses.
• Protect the Service and comply with law: prevent fraud and abuse, enforce our Terms, and respond to lawful requests.

4. How We Share Your Information

We share information in the following circumstances.

4.1 Service Providers

We use trusted vendors that process data on our behalf and are contractually required to protect it and use it only as we direct:

We use Google Fonts for typography. Fonts are bundled when the Service is built, so your browser does not request them from Google and no information about you is sent to Google for this purpose.

We do not currently use an error-monitoring or product-analytics vendor. If we add one, we will update this policy before it goes into use.

4.2 De-Identified and Aggregated Data; Property Maintenance Records

We may use, disclose, sell, or license de-identified, aggregated, and statistical data, including property maintenance records that have been de-identified or aggregated in accordance with Section 5.3, to third parties for any lawful purpose. These recipients may include, for example, prospective home buyers, real-estate professionals, home inspectors, lenders, insurers, and researchers. This supports current and planned products, including reports about the maintenance history and condition of homes. See Section 5 for details and Section 8 for your choices.

4.3 Legal Requirements

We may disclose information if required by law, subpoena, court order, or governmental request, or where we believe disclosure is reasonably necessary to protect the rights, property, or safety of HavenHQ, our users, or the public.

4.4 Business Transfers

If HavenHQ is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information (including property maintenance records and de-identified datasets) may be transferred as part of that transaction. We will provide notice as required by law.

4.5 With Your Consent

We may share information with third parties when you direct or consent to it.

We do not share your personal data with third parties for their own independent cross-context behavioral advertising.

5. Data Use for Product Development and Commercialization

This Section explains, in plain terms, how HavenHQ uses the information generated through the Service to build and offer products beyond your individual account. We want you to understand this clearly.

5.1 Broad Internal Use Rights

Subject to applicable law and to the choices described in Section 8, you grant us, and we reserve, the right to use all data collected through the Service to operate, analyze, improve, and develop products and services, including to train and refine statistical, predictive, and machine-learning models. Our Terms of Service contain the corresponding license grant.

5.2 The Property Maintenance Record

For each property, the Service maintains an append-only maintenance record, which is a log of task completions, system events, and property changes. This record is keyed to the property (for example, by address), not solely to your user account.

Important, please read: Because this record is tied to the property rather than to your account, removing a property from your account, or deleting your account, does not by itself delete the property's underlying maintenance record. When you remove a property, we delete it from your account view and you lose access to it, but the underlying maintenance record for that property may be retained and used as described in this Section and in Section 6. This is a change from earlier versions of this policy, and it is described here so that our disclosures match how the Service actually works.

5.3 Planned Commercial Use ("Property History Reports")

HavenHQ is developing products in which accumulated property maintenance history is compiled into reports about individual homes (a "Carfax-for-homes" model) that may be sold or licensed to third parties such as home buyers, real-estate agents, inspectors, lenders, and insurers. This product is not yet built or launched; we disclose it now so that our data practices are transparent.

Before offering any such product externally, we will handle the underlying data as follows:

• De-identification. We will de-identify or aggregate the data so that it cannot reasonably be used, alone or in combination, to identify you. When we maintain or disclose de-identified data, we (i) take reasonable measures to ensure the data cannot be associated with an individual, (ii) publicly commit to maintaining and using it only in de-identified form, (iii) do not attempt to re-identify it except as permitted by law to test our de-identification, and (iv) contractually require recipients not to re-identify it.
• Property-level reports. A report about a specific home may reference that home's address. Where a report is capable of being associated with an identifiable person, we will treat it as personal data and offer it only in a manner consistent with applicable law, including any applicable opt-out or consent requirements (see Section 8).

5.4 What We Do Not Do

We do not knowingly sell or share the contents of your account (such as your name, email, or password) for third-party advertising. Our commercialization is focused on property maintenance data and on de-identified, aggregated, and statistical datasets and reports as described above.

6. Data Retention

We retain information for as long as needed to provide the Service and for the additional purposes described in this policy:

• Account data: retained until you delete your account, then deleted or de-identified within 30 days, except where a longer period is required by law.
• Property maintenance records: retained on an append-only basis and may be kept after you remove a property or close your account, in de-identified or aggregated form, for the purposes described in Section 5. Where these records are personal data under applicable law, you may exercise the rights in Section 8.
• Payment records: retained for 7 years as required by tax and financial regulations.
• Notification logs: retained for 90 days, then deleted.
• Usage logs: retained for 30 days, then deleted.

7. Data Security

We take reasonable measures to protect your information, including:

• Encryption of data in transit using TLS/HTTPS.
• Database access controls (row-level security) so users can access only their own account data.
• Authentication managed by our infrastructure provider using industry-standard practices.
• Payment data handled by Stripe and not stored on our servers.
• Limiting access to production systems to authorized personnel.

No system is completely secure, and we cannot guarantee absolute security. If you become aware of a security issue, contact us at security@havenhq.net.

8. Your Privacy Rights and Choices

Depending on where you live, you may have some or all of the following rights: to access the personal data we hold about you; to correct inaccurate data; to delete your data; to obtain a portable copy; to opt out of the sale of personal data, targeted advertising, and certain profiling; and to not be discriminated against for exercising your rights.

8.1 How to Exercise Your Rights

You can update account information in the Settings tab. For access, correction, deletion, portability, or opt-out requests, contact us at privacy@havenhq.net. We will verify and respond within the time required by applicable law. You may appeal a denied request by contacting us at the same address.

8.2 Your Privacy Choices; Opt Out of Sale or Sharing

To the extent our use of property maintenance data or other personal data constitutes a "sale," a "share," or "targeted advertising" under the law of your state, you have the right to opt out. You may opt out at any time using the "Do Not Sell or Share My Personal Information" control in the Settings area of your account, or by contacting us at privacy@havenhq.net. Your choice is recorded on your account and applies to the personal data associated with you, including the properties linked to your account while you are linked to them.

No sale or sharing is occurring today. The property history report product described in Section 5.3 has not launched, and we are not currently selling or sharing personal data. We record your choice now and will apply it to that product if and when it launches, and we will provide notice before any such product goes live.

Universal opt-out signals. In states that require it, we honor recognized universal opt-out mechanisms, such as the Global Privacy Control (GPC), as a valid opt-out of sale, sharing, and targeted advertising for the browser or device that sends the signal.

8.3 Sensitive Data

Where we process sensitive data, which may include precise location associated with a property address, we do so only as permitted by applicable law and, where required, with your consent or where strictly necessary to provide the Service you requested.

8.4 State-Specific Disclosures

Residents of California and other states with comprehensive privacy laws (including, as of 2026, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and Washington) have the rights described above under their respective laws. California residents may also request the categories of personal information we collect, use, disclose, and (if applicable) sell or share, and may designate an authorized agent to act on their behalf.

8.5 European and UK Users

If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR and UK GDPR, including access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority. Our legal bases are contract performance, legitimate interests (improving and developing the Service and preventing fraud), legal obligation, and consent where applicable.

9. Children's Privacy

The Service is intended for adults. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it. Contact us at privacy@havenhq.net if you believe a child has provided us information.

10. Third-Party Links

The Service may link to third-party sites or services. We are not responsible for their privacy practices and encourage you to review their policies.

11. Changes to This Policy

We may update this policy from time to time. For material changes, we will notify you by email to the address on your account and/or a prominent in-app notice. Changes take effect on the date posted, and continued use after that date constitutes acceptance.

12. Contact Us

HavenHQ LLC 5706 Turney Rd Ste 202 Garfield Heights, OH 44125 General and privacy: privacy@havenhq.net Security: security@havenhq.net Legal: legal@havenhq.net