Privacy notice
Version draft-1
Draft for review. This policy has not been approved for release.
Publish Haven processes account details, newsletter content, subscriber email addresses, subscription choices, delivery records and payment identifiers to operate the service. Stripe handles payment-card details. Required financial records can be retained after account deletion; retained records should not be used to continue marketing to a deleted account.
Newsletter delivery uses the configured email provider. Hosting uses Railway and the configured database and private object-storage service. Optional AI tools can send selected issue content to OpenAI, Anthropic, ElevenLabs or fal when the relevant feature is configured and enabled. The Trust page identifies these categories of processing. Portrait processing remains unavailable until its separate consent and launch review pass.
The archive assistant stores questions and answers for up to 90 days. Email activity can include image loads and tracked links. Image proxies and scanners affect those records. Raw IP addresses are not retained in email activity records; coarse network information and approximate locations are used. Activity details are retained for 90 days. Global Privacy Control and Do Not Track requests are respected by tracking routes.
Readers can unsubscribe from each newsletter and use reader privacy controls to inspect or remove their information. Writers can export account data or request account deletion through their privacy settings. Open payments and subscriptions may need to be resolved before deletion can finish. Contacts collected for business research remain separate from confirmed newsletter subscribers and do not gain newsletter delivery permission merely because an address was found.
The operator’s identity, contact details, applicable legal bases, international-transfer arrangements and processor contracts require review before this notice is approved. This draft does not establish that those reviews or agreements are complete.