Privacy policy

This policy says what Digital Haven LLC (“we”) collects when you use Digital Haven, what we do with it, and what you can ask of us. The short version: we keep what the service needs to work, we sell nothing, and there is no advertising or tracking.

What we collect

If you have an account

• Your email address, the name you give us, and a hashed form of your password. We cannot read the password itself.
• Which business you belong to and your role in it, and the people you invite, by their email address.
• Everything you put into the service, including the files you upload.
• Notifications we have sent you in the app, and your preferences for them.
• The devices signed in to your account, so you can sign them out.

Everyone

• If you write to us through the contact form on the home page: your name, your email address and the message. We keep it until we have answered, and for at most a year.
• Ordinary server logs: the pages requested, when, and the network address and browser they came from. These are kept briefly for keeping the service running and are not used to build profiles.
• Your network address for a short time, to limit how often one address can sign up, sign in, ask for a password reset or send a message through the contact form, which protects the service from abuse.
• A cookie that keeps you signed in, one that remembers which business you are working in, and a browser setting that remembers your light or dark theme. No advertising or analytics cookies.

How we use it

• To run the service: store what you put in, show it to you and to the people in your business.
• To email you about your account: password resets, invitations, the notifications you have chosen to receive by email, and notices about changes to the service or these terms. We do not send marketing email.
• To keep the service safe: rate limits, abuse prevention, and fixing faults.

We do not sell personal information, and we do not share it with anyone for their own marketing.

Who else handles it

The service runs on other companies’ infrastructure, and some of what you do reaches them. Each one gets only what its job needs.

• DigitalOcean hosts the servers, the database and the backups, in the United States.
• Postmark or Resend delivers the email we send you.

How long we keep it

• Your account and what you put in: for as long as you have an account.
• Backups of the database are kept for up to 30 days, so something you delete leaves the backups within that time.
• Server logs and rate-limit records: a short period, measured in days.
• Notifications you have read: 90 days. Invitations and reset links that expired: 30 days.
• Messages sent through the contact form: until answered, and at most a year.

Your choices and rights

• You can change your name and password, choose which notifications reach you by email, sign out of every device, and delete your account from the Settings page. Deleting the account removes your account details and any business where you were the only member.
• You can ask us for a copy of the personal information we hold about you, to correct it, or to delete it, by writing to the address below. We answer within 30 days.
• If you live in the European Economic Area, the United Kingdom, California or another place with its own privacy law, you may have further rights, such as to object to processing or to complain to a supervisory authority. Write to us and we will help.

Security

Connections to the service are encrypted. Passwords are stored only as hashes. Uploaded files are served only to the people allowed to see them. No system is perfectly secure; if we learn of a breach affecting your information, we will tell you.

Children

The service is not meant for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, write to us and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page and move the date at the top, and for a change that matters we will email account holders first.

Contact

Digital Haven LLC, for privacy requests: privacy@digitalhavenllc.com. The terms of service cover the rest of the agreement.