Privacy Policy

This Privacy Policy explains what information HavnSight collects when your organization uses HavnSight Desk, HavnSight Respond, HavnSight Keystone, Visual Workflows (together, the “Service”), why we collect it, and the choices you have. It applies to everyone who signs in to the Service — we refer to your organization as the “Customer” and its end users as “you”.

1. Information We Collect

We collect information in three broad categories:

• Account and identity information — name, work email, and organization membership, collected when you or your organization’s administrator provisions your access through our identity provider.
• Customer Data — the tickets, runbooks, workflow definitions, on-call schedules, and messages your organization creates while using the Service. This is your organization’s content; we process it on your behalf, not for our own purposes.
• Usage and device information — log data such as IP address, browser type, pages visited, and timestamps, collected automatically to keep the Service secure, diagnose problems, and understand feature usage in aggregate.

2. How We Use Information

We use the information above to:

• Provide, maintain, and secure the Service, including authenticating sign-ins and enforcing organization-level access controls;
• Send transactional communications — sign-in codes, escalation pages, ticket notifications — that you or your organization has configured;
• Respond to support requests you send us directly;
• Detect, investigate, and prevent fraud, abuse, and security incidents; and
• Improve the Service, using aggregated or de-identified data wherever practical.

We do not sell personal information, and we do not use Customer Data to train models shared across other customers.

3. Sub-processors

We rely on a small number of specialist providers to operate parts of the Service, each bound by its own data processing agreement with us:

• Twilio — voice and SMS delivery for on-call paging in HavnSight Respond.
• Stripe — payment processing for subscriptions; we never store full card numbers ourselves.
• Cloud infrastructure and email delivery providers used to host the Service and send transactional email.

If your organization connects optional third-party integrations (Slack, Microsoft Teams, Google Calendar, Zoom, Jira, Linear, or Zapier), the data shared with those tools is governed by your organization’s own agreement with that provider, not by us.

4. Data Storage and Security

Customer Data is stored in regionally isolated infrastructure, encrypted in transit and at rest. Access to production systems is limited to personnel who need it to operate the Service, and all administrative access is logged. No method of transmission or storage is perfectly secure, but we design the Service to minimize what could be exposed by any single failure.

5. Data Retention

We retain Customer Data for as long as your organization’s account is active. If an organization’s subscription ends, Customer Data remains available for export for 30 days before deletion from active systems, after which it may persist in encrypted backups for a limited period before being permanently purged.

6. Your Rights

Depending on where you’re located, you may have rights to access, correct, export, or request deletion of your personal information. Because the Service is organized around your employer’s organization, most requests about Customer Data should go through your organization’s administrator, who controls that data on the Service. For requests about your own account information directly, contact us using the details below.

7. Cookies

We use a small number of strictly necessary cookies to keep you signed in, remember your selected organization, and remember interface preferences like theme and language. We don’t use third-party advertising or tracking cookies on the product itself.

8. Children’s Privacy

The Service is intended for business use by adults acting on behalf of their organization and is not directed at children. We don’t knowingly collect personal information from anyone under 16.

9. Changes to This Policy

If we make a material change to this policy, we’ll notify your organization’s administrators by email before it takes effect.

10. Contact

Questions about this policy, or requests regarding your personal information, can be sent to support@havnsight.com.