Privacy Policy

1. Who we are

Haven is a product of Arthea LLC, operated remotely with hubs in the European Union and Malta. This policy covers haven.arthea.ai and the Haven apps.

For anything in this policy, write to haven@arthea.ai. We answer data requests within 30 days.

2. What we collect

Account data: your name, email address and, if you sign in with Google, the profile photo Google shares. Nothing else is read from your Google account.

Tenancy data: the information a rental legally requires. Applications, identity verification results, lease documents, signatures, payment records, deposit evidence, repair requests and the messages you exchange through Haven.

Payment data: your SEPA mandate and payment history, handled by our payment provider. Your bank credentials never touch Haven's servers.

Usage data: device type, app version and the actions you take, used to keep Haven secure and to fix what breaks.

We never buy data about you from brokers, and we never collect more than the tenancy needs.

3. Why we use it, and the legal basis for each use

To run your tenancy: applications, leases, rent, deposits, repairs. Legal basis: performance of a contract.

To meet legal duties: rental registration, tax records, anti-money-laundering checks where required. Legal basis: legal obligation.

To keep Haven safe: fraud prevention, abuse detection, debugging. Legal basis: legitimate interests.

To send you product news, only if you opt in. Legal basis: consent, withdrawable anytime.

4. Where AI fits, and where it stops

AI in Haven drafts, classifies and suggests. It never decides. Deterministic rules and humans make every decision that affects you: whether an application is accepted, whether a payment is due, whether a deposit deduction stands.

Your data is never used to train third-party AI models, and never sold. AI providers we use process data only to serve your request.

5. Who sees your data

The other side of your tenancy sees what a tenancy requires: an owner sees the application you submit, a renter sees the lease terms and the deductions claimed. Both sides always see the same facts.

Service providers see only what their job needs: payment processing (Stripe), email delivery (Resend), sign-in (Google), EU cloud hosting, identity verification and e-signature partners, and AI drafting (Anthropic).

We never sell personal data. We never show ads. We disclose data to authorities only when the law compels us, and we tell you unless the law forbids it.

6. Where your data lives

In the European Union, encrypted in transit and at rest. Legal documents are sealed and tamper-evident: corrections are new records that reference the old, never silent edits.

If a provider processes data outside the EU, the transfer is covered by Standard Contractual Clauses.

7. How long we keep it

Tenancy documents follow the legal retention period of your market (Malta, France). These are legal records for both sides; we cannot shorten what the law sets.

Rejected applications are purged after three months.

When you close your account, personal data outside those legal records is deleted within 30 days. You can export everything first.

8. Your rights

Under the GDPR you can access, correct, export and erase your data, restrict or object to processing, and withdraw any consent. Write to haven@arthea.ai and we act within 30 days.

You can also complain to your supervisory authority: the IDPC in Malta, the CNIL in France, or the authority of your country of residence.

When Haven support views your account to help you, the access appears in your own activity feed. You always see who saw what.

9. Cookies

Haven uses essential cookies only: keeping you signed in and keeping the service secure. No advertising pixels, no cross-site tracking.

If we ever add optional analytics, we will ask first, and declining will change nothing about how Haven works.

10. Security

Encryption in transit and at rest, strict access controls, audit logging on every sensitive action, and webhook and session protections built to banking standards. Report a vulnerability to haven@arthea.ai and we will respond quickly and gratefully.

11. Children

Haven is for adults. You must be 18 or older to hold an account.

12. Changes

If this policy changes in a way that matters, we tell you in the app and by email before it takes effect. The date below always reflects the current version.