Privacy Policy

1. Our role in data processing

In providing our Service, we act in two capacities:

• Data controller: For the information you (the lender / workspace owner) provide to us directly to create your account and pay for the Service.
• Data processor: For the information you upload regarding your clients ("Borrower Data"). You are the data controller of your Borrower Data and are responsible for obtaining their consent to store their data on our platform, where required by law.

2. Information we collect

• Account data: When you sign up, we collect your name, email address, password (stored securely), and communication records (for example Facebook Messenger logs for account provisioning, where applicable).
• Workspace & borrower data: Information you input into the Service, including borrower names, contact details, loan amounts, repayment schedules, and documents uploaded to our cloud storage vaults (for example IDs, contracts).
• Technical data: IP addresses, browser types, and log data generated when you interact with the platform.

3. How we use your information

We use the collected data to:

• Provide, maintain, and secure the Haven platform.
• Process account registrations, access codes, and future subscription billing.
• Send transactional emails (for example verification codes, payment reminders).
• Provide customer support and respond to your inquiries.

4. Third-party subprocessors and data sharing

We do not sell your data. We use trusted third-party services to operate our platform securely. These include:

• Hosting & database: Vercel (application hosting) and Neon / PostgreSQL (database).
• Cloud storage: Cloudflare R2 (and, where applicable, other object storage) for secure document and file storage.
• Communications: Resend (for emails) and Meta / Facebook (for customer support and onboarding, where you contact us through those channels).
• (Future) payments: PayMongo or Stripe when automated billing is enabled.

5. Data retention

We retain your account data and workspace data for as long as your subscription is active. If your account expires or is deleted, we will retain your data for a limited grace period to allow for renewal, after which it will be permanently deleted from our servers, subject to legal and regulatory requirements.

6. Data security

We implement industry-standard security measures, including data encryption in transit and at rest where applicable, secure authentication protocols, and restricted access to database environments. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request corrections to inaccurate data.
• Request the deletion of your account and data, where applicable.

Note for borrowers: If you are a borrower whose data was entered into Haven by a lender, you must contact the lender directly to exercise your data rights, as they are the data controller of your information in that context.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy within the platform or sending an email notification, where appropriate.

9. Contact us

If you have questions about this Privacy Policy or how your data is handled, please contact us at:

cs@havenbank.space

Cagayan de Oro City, Misamis Oriental, Philippines