Privacy Policy

Information we collect

• Account information. Your email address, password credential (stored as a one-way password hash), username, display name, profile image, and account security settings.
• Google sign-in information. If you choose Google sign-in, Google sends Havenerr the account identifier and basic profile information made available for sign-in, such as your verified email address, name, and profile image. We use these data to create or authenticate your Havenerr account and, only after an explicit linking flow, connect that Google identity to an existing Havenerr account. We do not receive your Google password or read Gmail, Drive, Calendar, or other Google content as part of sign-in.
• Workspace and service information. Names, settings, membership and access records, resource configuration, and the content you choose to store, deploy, or process through Havenerr. The content and credentials you place in your services remain under your control; access by Havenerr personnel is limited to operating, securing, and supporting the service.
• Billing information. Billing email, country, address, currency, and other billing fields you submit, plus transaction identifiers, invoice records, and payment status. Card and payment credentials entered on PayU's hosted checkout are handled by PayU; Havenerr receives the payment and fulfillment information needed to administer your order.
• Operational and security information. Session and CSRF cookies, OAuth state, support requests, and records needed to detect abuse, protect accounts, troubleshoot failures, and maintain an audit trail for sensitive operations.

Google user data and Limited Use

Google account information is used only for sign-in, account creation, deliberate account linking, and displaying the account details you choose to use in Havenerr. We do not sell Google user data, use it for advertising, or use it to build advertising profiles. We disclose it only to service providers that help deliver authentication and Havenerr, when you direct a feature that requires the information, or when disclosure is required by law or needed to protect the service and its users.

Havenerr's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements. We request only the Google information needed for the sign-in experience described above. You can use Havenerr's email sign-in instead of Google sign-in.

How we use information

We use information to provide and maintain accounts, workspaces, and requested infrastructure; authenticate users and enforce permissions; process payments and issue invoices; answer support requests; send security, account, and transactional messages; prevent fraud and abuse; meet legal obligations; and diagnose and improve the reliability of Havenerr. We do not sell personal information.

When information is shared

Havenerr shares information with providers only as needed to operate the service: Google for Google sign-in, PayU for hosted payments, Resend for transactional email, and hosting, infrastructure, storage, and security providers that support the features you use. Information you place in a deployed resource may be processed by the provider responsible for that resource. Providers are permitted to use information only to perform services for Havenerr or as otherwise required by law. We may also disclose information to comply with legal process, enforce our terms, or protect people, systems, and property.

Cookies and browser storage

Havenerr uses essential cookies to maintain and protect your session, support cross-site request forgery protections, and complete OAuth redirects. The session cookie is HttpOnly and is not available to page scripts. A separate, non-secret cookie may help the site decide when to verify a session; it is not proof of authentication. The session cookie has a 30-day maximum age, while server-side session rules may expire it earlier. The onboarding flow may save non-secret draft fields in session storage on your device. We do not use advertising cookies for account sign-in.

Retention and security

We retain account, workspace, and service information while it is needed to provide the service, and afterward when required for security, dispute resolution, accounting, or legal obligations. Backups and security records may persist for a limited operational or legally required period after a change or deletion. Retention varies by data type and service; contact us for account-specific requests.

Havenerr uses technical and organizational safeguards designed to protect information, including access controls, encrypted transport, protected session credentials, and audited handling of sensitive operations. No online service can guarantee absolute security.

Your choices and requests

You can update profile and workspace details made available in the product, sign out of a browser session, or choose not to use Google sign-in. To ask about, access, correct, or request deletion of account information, email official@havenerr.com from your account address and describe your request. We may need to verify your identity before acting. Some records must be retained to meet legal, billing, security, or service obligations.

Children

Havenerr is a developer infrastructure service and is not designed for children. If you believe a child has provided personal information to Havenerr, contact us so we can review the request.

Changes and contact

We may update this policy as Havenerr changes. We will update the date above and provide additional notice for material changes where appropriate. Questions or privacy requests can be sent to official@havenerr.com.