Privacy Policy

Haven is a business-to-business platform used by residential care organizations ("facilities"). Facilities are the data controllers for the resident and staff records they enter; Haven processes that information on their behalf and only to provide the service.

• Account data: name, work email, job title, phone number and role assignments.
• Resident records: demographics, admission and discharge history, medical details, case documentation, service plans and billing information entered by facility staff.
• Workforce records: employment details, certifications, schedules and clock records.
• Operational logs: authentication events and record changes, retained for auditing.

Information is used solely to deliver the platform: authenticating users, isolating each facility's data, generating documentation and reports, and supporting the facility. We do not sell information, and we do not use resident or staff records to train advertising models.

Document extraction and case-note assistance send the specific document or text a user submits to a third-party model provider for processing. Output is returned to the user for review before it is saved. These providers process the content to fulfil the request and do not retain it for model training.

Every record is bound to a facility and enforced at the database layer, so users can only read records belonging to their own organization. Within a facility, access is further restricted by the role and permissions their administrator assigns.

Discharged resident records are archived rather than deleted so facilities can meet record-retention obligations. Facility administrators may deactivate accounts at any time; deactivation preserves the documentation the person authored. Requests to permanently delete a facility's data should be made by the facility administrator.

Residents, guardians and staff should direct access, correction or deletion requests to the facility that holds their record. Haven will assist that facility in responding.

Questions about this policy can be sent to andrew@leanengineering.io.