hayvens legal

Privacy Policy

Effective June 9, 2026

This Privacy Policy explains what information Hayvens ("we," "us") collects when you use hayvens.com, how we use and share it, and the choices you have. Hayvens is based in Denver, Colorado.

1. Information we collect

Account information. Name, email address, password (stored as a hash), role (host or renter), and profile details you choose to add.
Listing information. For hosts: listing details, photos, pricing, and the listing address. Street addresses are stored encrypted and shown to renters only as a neighborhood until you choose to share more.
Messages and inquiries. The messages, inquiries, and reviews you send through Hayvens.
Identity verification. If you verify your identity, the check is performed by Stripe Identity. Stripe processes your ID document and selfie; Hayvens receives the verification result and limited metadata, not copies of your documents.
Payment information. Host subscription payments are processed by Stripe. Hayvens does not receive or store full card numbers. Rent payments happen off-platform, so we never see them.
Usage and device data. Log data (IP address, browser, pages viewed), cookies needed to keep you signed in, and product analytics.

2. How we use information

To run the marketplace: accounts, listings, search, inquiries, and messaging.
To process host subscriptions and send transactional email (receipts, inquiry notifications, verification links).
To send marketing or lifecycle email you can opt out of at any time.
To keep Hayvens safe: fraud prevention, abuse investigation, and enforcing our terms.
To improve the product through aggregate analytics.
To comply with legal obligations.

3. How we share information

With other users. Your profile name and relevant details are visible to the people you interact with — a host sees the inquiry you send; a renter sees your listing and host profile.
With service providers who process data on our behalf: Stripe (payments and identity verification), Resend (email), Cloudflare (content delivery and image storage), Fly.io (hosting), Sentry (error monitoring), and PostHog (analytics).
For legal reasons. When required by law, subpoena, or to protect the rights and safety of Hayvens and its users.
In a business transfer. If Hayvens is acquired or merged, your data may transfer with appropriate protections.

We do not sell your personal data, and we do not share it with third parties for their own advertising.

4. Email choices

Transactional email (receipts, inquiry and message notifications, security notices) is part of having an account. Marketing and lifecycle email always includes an unsubscribe link, and opting out never affects transactional messages.

5. Retention and deletion

We keep your information while your account is active and as long as needed for the purposes above. You can delete your account from your profile settings; we then remove or anonymize your personal data except where we must retain it (for example, records of subscription payments, or content needed for an open dispute or legal obligation).

6. Security

We use industry-standard safeguards: TLS in transit, hashed passwords, encrypted street addresses at rest, and access controls. No system is perfectly secure — if we learn of a breach affecting your data, we'll notify you as required by law.

7. Your Colorado privacy rights

If you are a Colorado resident, the Colorado Privacy Act gives you the right to:

Confirm whether we process your personal data and access it.
Correct inaccuracies in your personal data.
Delete personal data concerning you.
Obtain a portable copy of the data you provided to us.
Opt out of targeted advertising, the sale of personal data, and certain profiling. Hayvens does not sell personal data or use it for targeted advertising.

To exercise any of these rights, email support@hayvens.com with the subject "Privacy request." We'll respond within 45 days. If we decline a request, you may appeal by replying to our decision; if the appeal fails, you may contact the Colorado Attorney General. We never discriminate against you for exercising your rights. Residents of other states may have similar rights under their local law — use the same contact to invoke them.

8. Children

Hayvens is for adults. We don't knowingly collect personal data from anyone under 18; if you believe we have, contact us and we'll delete it.

9. Changes to this policy

We may update this policy as the product evolves. If a change is material, we'll notify you by email or in-product notice before it takes effect.

10. Contact

Privacy questions or requests: support@hayvens.com.