Privacy Policy

1. Who We Are

Haven is operated by Metaplexus LLC, based in the United States ("we," "us," or "our"), which is the data controller for the personal information described here. You can reach us about privacy at haven@metadock.io.

If you are in the European Union or United Kingdom and have questions about your rights under the GDPR, you can contact us at haven@metadock.io. We will appoint a representative under Article 27 GDPR if and when we are required to do so.

2. Information We Collect

Information you give us

Account details (such as your name or username, email address, and password), profile information you choose to add, and the content you create: posts, images, comments, messages within community spaces, reactions, and the connections and communities you join.

Information we collect automatically

How you use Haven: the posts and people you interact with, reactions, time and frequency of activity, communities and channels you visit, and similar interaction data. We also collect standard technical data such as device and browser type, approximate location derived from your IP address, and identifiers from cookies and similar technologies.

Information from third parties

If you sign in through a third-party service or connect another service, we receive limited information from that provider as permitted by your settings there. Payment processors handle any payment data; we do not store full payment-card numbers.

3. How and Why We Use Your Information

We use your information to provide and operate Haven, including to create and secure your account, display your content to the audiences you choose, enable community features and messaging, and provide support. We also use it to:

• Suggest connections. We analyze your own interactions to suggest moving a connection into one of your private circles (for example, from Network toward a closer circle). These are suggestions you choose to accept; we do not move connections for you automatically.
• Keep the community safe. We use automated tools and human review to detect and respond to harassment, abuse, spam, and violations of our rules.
• Improve the Service and understand how it is used, and to communicate with you about your account and important changes.
• Send marketing messages only where you have opted in or as the law permits, and you can opt out at any time.
• Comply with law and protect the rights, safety, and property of Haven, our users, and others.

4. Legal Bases (EU / UK Users)

If you are in the EU or UK, we rely on these legal bases under the GDPR / UK GDPR (Article 6):

• Performance of a contract — to provide the core Service you sign up for (your account, posting, community participation).
• Consent — for non-essential cookies, optional marketing, and the connection-suggestion and personalization features that go beyond what is strictly necessary to deliver the Service. You can withdraw consent at any time.
• Legitimate interests — to keep the platform secure, prevent abuse and harassment, and improve the Service, balanced against your rights and interests.
• Legal obligation — where we must process data to comply with the law.

5. Automated Processing and Profiling

Our connection-suggestion feature and harassment detection involve profiling: we analyze patterns in your activity to produce suggestions and to flag possible rule violations. Connection suggestions are presented to you for your decision; they do not by themselves produce a legal or similarly significant effect on you. Where an automated process could lead to a penalty such as a suspension, a person reviews the decision. You can object to profiling and ask for human review by contacting us. We do not use your data for solely-automated decisions that produce legal or similarly significant effects on you without a lawful basis and appropriate safeguards.

6. How We Share Information

With other users — your content is shown to the audiences and circles you choose. Public content can be seen by anyone.

With service providers — companies that host, secure, analyze, process payments for, or help us communicate through the Service, under contracts that limit their use of the data.

For legal and safety reasons — to comply with law, enforce our Terms, or protect rights and safety.

In a business transfer — if Haven or Metaplexus LLC is involved in a merger, acquisition, or sale of assets, subject to this policy.

We do not sell your personal information for money. We do not "sell" or "share" personal information for cross-context behavioral advertising as those terms are defined under California and other state privacy laws. If this ever changes, we will update this policy and provide the required opt-out.

7. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your settings, secure the Service, and understand usage. Strictly necessary cookies are always on. For non-essential cookies (such as analytics), we ask for your consent where required and you can manage your choices through our cookie banner or your browser settings. This consent is separate from your acceptance of the Terms and this Policy.

8. International Data Transfers

Haven is operated from the United States, so if you use it from outside the U.S. your information will be transferred to and processed in the U.S. and other countries. Where we transfer personal data out of the EU or UK, we use appropriate safeguards, including the European Commission's Standard Contractual Clauses (and the UK addendum), together with any additional measures required following the Schrems II decision.

9. How Long We Keep Your Information

We keep personal information only as long as needed for the purposes in this policy: for the life of your account, and for a limited period afterward to meet legal, security, dispute-resolution, and backup needs. When you delete content or your account, we delete or de-identify your personal information within a reasonable period, except where retention is required by law.

10. Your Rights and Choices

Depending on where you live, you have some or all of these rights:

• Access a copy of your personal information.
• Correct inaccurate information.
• Delete your information.
• Port your data to another service.
• Object to or restrict certain processing, including profiling, and withdraw consent at any time.
• Opt out of any "sale" or "sharing" of personal information and of targeted advertising (we do not currently do these), and have us honor recognized opt-out signals such as Global Privacy Control.
• Non-discrimination — we will not treat you worse for exercising your rights.

To exercise any right, contact us at haven@metadock.io or use the privacy controls in the app. You may use an authorized agent where the law allows. We will verify your request and respond within the time the applicable law requires. If we decline, you may appeal by replying to our response. EU/UK users may also lodge a complaint with their local data-protection supervisory authority.

11. Children

Haven is not intended for children under 13, and we do not knowingly collect personal information from them. Consistent with the Children's Online Privacy Protection Act (COPPA), if we learn we have collected personal information from a child under 13 without verifiable parental consent, we will delete it promptly. If you believe a child under 13 has provided us information, contact us. Where Haven is used by minors aged 13-17, we limit certain features and processing as appropriate.

12. Security

We use technical and organizational measures to protect personal information, including encryption in transit, hashing of passwords, access controls, and regular security review. No system is perfectly secure, but we work to protect your data and to notify you and regulators of incidents where the law requires.

13. U.S. State Privacy Disclosures

Residents of California (CCPA/CPRA) and of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as they take effect) have the rights described in Section 10. The categories of personal information we collect, our purposes, and the categories of recipients are described in Sections 2, 3, and 6. We do not sell personal information or share it for cross-context behavioral advertising. California residents may designate an authorized agent and have the right not to be discriminated against for exercising their rights.

14. Changes to This Policy

We may update this Privacy Policy as Haven and the law evolve. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice (such as in the app or by email). Your continued use after an update means you accept the revised policy.

15. Contact Us

For any privacy question or request, contact Metaplexus LLC at haven@metadock.io.