This Privacy Policy explains how Haven Creators Group (“Haven,” “we”) collects, uses, and shares personal information when you use havencreators.com and our related services (the “Service”). We operate from the United States; this policy is written for U.S. users.
You must be at least 18 years old to use the Service. We do not knowingly collect information from anyone under 18 and will delete such information if we learn of it.
1. Information we collect
Account and profile
Email, name, password hash, role (creator / agency / strategist), and profile details (display name, location, social handles, timezone, preferences).
Creator data (if you are a creator)
- OnlyFans integration data: via OnlyFansAPI.com: subscriber counts, revenue, transactions, fan activity, content performance, and historical snapshots. Retrieved read-only and cached on our servers to power audits and Match Kits.
- Match Kit responses: niches, revenue ranges, goals, agency history, and related free-form answers you provide in the onboarding flow.
- Uploaded content: profile images, screenshots, or documents you upload to support your profile.
Agency data (if you are an agency)
- Legal/trade name, owner contact info, team roster, brief content (services offered, case studies, screenshots), revenue-share settings, and Stripe connect/customer identifiers (we do not store card numbers).
Usage and device data
IP address, browser and device information, pages viewed, and interactions with features of the Service. Collected via logs and cookies.
Communications
Emails you send us and support-ticket messages, including internal notes admins add to your tickets.
2. Why we use your information
- Operate the Service: create accounts, run audits, generate matches, schedule calls, issue invoices, send email notifications.
- Match creators and agencies: compute benchmark scores, rank candidates, and share your Match Kit / audit with agencies you’ve consented to.
- Billing and fraud prevention: process payments via Stripe, track invoices, prevent self-referral abuse in the Recruiter program.
- Product improvement: analyze aggregate usage to improve matching, detect bugs, and build new features.
- Legal compliance: comply with tax, KYC, and other legal obligations.
3. Who we share with
We share personal information only with the following categories of recipients:
- Matched agencies: once you, as a creator, signal interest in a specific agency, we share your Match Kit and audit with that agency for their review. You can revoke this at any time.
- Infrastructure providers: Supabase (database + file storage), OnlyFansAPI.com (OnlyFans read-only integration), Google (Calendar + OAuth), Stripe (billing), and Resend (transactional email). Each is a processor acting on our instructions.
- Haven staff (strategists, admins): to operate the platform, review agency briefs, moderate, and assist you.
- Legal and safety: when required to comply with law, enforce our Terms, or protect Haven, users, or third parties.
- Business transfers: if Haven is acquired, merged, or sells assets, personal information may transfer as part of that transaction. We’ll notify you first.
We do not sell your personal information.
4. Cookies
We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies in your browser, but turning them off will break core features like staying logged in.
5. Data retention
We retain your personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations (tax, billing records), resolve disputes, and enforce our agreements. Audit snapshots and aggregated statistics may be retained in de-identified form indefinitely.
6. Security
We use reasonable administrative, technical, and physical measures to protect your information: encrypted transport (HTTPS), hashed passwords, encrypted OAuth tokens at rest, role-based access, and audit logs for sensitive admin actions. No system is perfectly secure; if you believe your account is compromised, contact team@havencreators.com immediately.
7. Your rights
Subject to U.S. and applicable state law (including the CCPA/CPRA if you are a California resident), you have the right to:
- Access: request a copy of the personal information we hold about you.
- Correct: update inaccurate information from your portal or by contacting us.
- Delete: request deletion of your account and personal information. Creators can delete their account from the portal (Settings → Delete account); certain records may be retained as required by law.
- Withdraw consent: revoke consent to share your data with a specific agency at any time.
- Opt out of non-essential email: manage from Settings → Notifications; some account/billing emails are required for us to operate the Service.
- Non-discrimination: we will not retaliate against you for exercising these rights.
Email team@havencreators.com to exercise any of these rights. We may ask you to verify your identity before fulfilling a request.
8. Children
The Service is not directed to anyone under 18. We do not knowingly collect personal information from children, and will delete any we discover.
9. Changes
We may update this policy from time to time. Material changes will be announced in-portal or by email at least 14 days before they take effect.
10. Contact
Haven Creators Group · Wyoming, USA
Privacy requests: team@havencreators.com
Security reports: team@havencreators.com