Privacy policy

Information we collect

• Account information: names, email addresses, password hashes, roles, location assignments, plan selection, sign-in sessions and account verification or recovery records. Haven does not store your Haven password as readable text.
• Restaurant information: location and supplier contact details, product photos, inventory counts, purchase orders, deliveries, returns, corrections, and records of who performed an action.
• Support and technical information: messages you send us and service records needed to operate, secure and troubleshoot Haven, such as request times, errors and IP addresses processed by our hosting and security services.

How we use information

We use this information to provide your restaurant workspace, control access, calculate stock and orders, deliver account messages, keep operational history, respond to support requests, prevent abuse and recover from failures. Your restaurant’s authorized users can access information according to their role and assigned locations. The restaurant owner manages that access.

Google email connections

If an owner chooses to connect a Google mailbox, Google asks for permission directly. Haven receives the mailbox’s email address, Google account identifier, verification status, granted permissions and authorization tokens. We use these to identify the selected mailbox and send through Gmail. Haven never receives your Google password.

Haven stores the connected email address, account identifier, permissions and connection dates. The reusable authorization token is encrypted before storage; temporary access tokens are used to contact Google. Each connection belongs to one Haven business account. Its authorized owners and managers can send orders from that mailbox for their permitted locations.

When your team sends an order, Haven sends the recipient address, subject and order message to Google for delivery. The selected supplier receives the message, including the restaurant and order details you review. Haven keeps order communication records such as the recipient, subject, sending user, delivery result and Google message identifier. It does not retrieve messages from your inbox.

Google user data is used only to provide and support this email feature. We do not sell it, use it for advertising, or use it to train general-purpose AI models. Our use and transfer of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.

Disconnecting Google

The owner can disconnect in Orders → Email setup → Disconnect. Haven removes the active connection and attempts to revoke its token with Google. If that revocation fails, Haven tells you to review access in your Google Account. You can also revoke access yourself through Google Account connections. Disconnecting stops Haven from using that connection; it does not erase messages already delivered, order history or existing backup copies.

Services that process information

Haven uses Render to host the application and database, Cloudflare R2 for private product photos and backups, and Resend for verification, invitation and password-recovery emails. Google processes order emails when you connect a Google mailbox. These providers receive the information needed for those functions. Information may be processed in the United States and other countries where our providers operate.

We do not sell personal information or share it for targeted advertising. We may disclose information when required by law or when necessary to investigate abuse and protect users and the service, subject to applicable restrictions on Google data.

Security and cookies

Haven uses HTTPS, password hashing, role and location permissions, encrypted Google connection tokens, and private photo and backup storage. Access for service administration is restricted. No system can guarantee complete security.

Haven uses cookies to maintain your signed-in session and protect Google connection requests. These are necessary for sign-in and security. Haven does not currently use advertising cookies or third-party marketing analytics.

Retention and deletion

We keep account and operational records while providing the service and maintaining the inventory history your restaurant relies on. Deactivating a staff member revokes access but preserves their historical actions. Account email links expire; usable link contents are removed from the live email queue after delivery, expiry or permanent failure.

Contact support@runwithhaven.com to request access, correction, an export or deletion of your information or business account. These requests are handled manually. We verify the requester’s identity and authority over the account before making changes. Some records may need to be retained for legal, security or recordkeeping reasons; we will explain any such limitation when responding.

Backups are held separately for recovery and currently do not have an automatic expiration schedule. Deletion from the live application does not immediately remove older backup copies. Backup handling is included in our review of deletion requests, and retained copies are restricted to recovery and security purposes.

Changes and contact

We will update this page and its effective date when our practices change. For material changes affecting how we use your information, we will provide an appropriate notice in Haven or by email.

Support and privacy requests: support@runwithhaven.com.