The plain-English version: We collect what we need to help you plan your money. We never sell your data. We never share it with advertisers. Your bank password never touches Hafen. You can disconnect or delete your account anytime, and we'll erase your information.
1. What we collect
When you create a Hafen account, we collect:
- Your name and email address.
- Your phone number, if you choose to provide one.
- Information you give us when you contact support.
When you connect your bank, we receive (through a secure, bank-grade connection):
- Your transaction history and current balance.
- Identifiers for the bills and paychecks we detect.
- Your account name and last four digits — never the full account number, never your password.
We also collect basic technical information when you visit the site, like your device type, browser, and a referring page if you arrived from one.
2. How we use it
We use this information to:
- Build your 14-day map of paychecks and bills.
- Surface options and resources that fit your situation.
- Send you account-related messages (like sign-in confirmations and important updates).
- Improve the product, fix bugs, and prevent fraud.
3. What we don't do
- We don't sell your personal information.
- We don't share it with advertisers.
- We don't share it with data brokers.
- We don't read or store your bank password.
- We don't pull, check, or report to your credit.
4. Who we share it with
We share your data only with service providers who help us run Hafen — for example, the secure connection that links your bank, the email service that sends your confirmations, and the cloud provider that hosts the product. These partners are bound by contract to use your data only to provide their service to us.
If a partner offers an option you choose to use (for example, a cash advance), we share with that partner only what is necessary to complete the action you asked for, and only after you've reviewed the offer.
We will share your information when required by law, a valid legal process, or to protect against fraud or harm.
5. How we protect it
Your data is encrypted in transit and at rest. We use the same security standards that major banks use, and we limit access internally to the people who genuinely need it for support, fraud prevention, or product reliability.
If you believe your account has been compromised, write to security@gethafen.com and a real person will reply quickly.
6. How long we keep it
We keep your data for as long as your account is active. If you delete your account, we erase your data within 30 days (faster if you ask). Some records may need to be retained longer to comply with law, accounting, or fraud-prevention obligations — we keep only the minimum required.
7. Your choices
- Disconnect your bank. Stops new transactions from being read. One click in settings.
- Delete your account. Removes all of your data. One more click in settings, or email hello@gethafen.com.
- Update or correct your data. Edit it in settings, or write us.
- Get a copy of your data. Email privacy@gethafen.com. We'll send you everything we hold.
- Opt out of marketing emails. Use the unsubscribe link in any non-essential email.
8. State-specific rights
If you live in California, Colorado, Connecticut, Virginia, Utah, or any other state with consumer-privacy laws, you have additional rights — including the right to know what we have, correct it, delete it, and limit how we use it. To exercise any of these, email privacy@gethafen.com.
9. Children
Hafen is not for anyone under 18. We don't knowingly collect data from minors. If we learn we have, we'll delete it.
10. Changes
If we change this policy in a way that meaningfully affects your rights, we'll email you and update the "last updated" date above before the change takes effect.
11. Contact us
For privacy questions: privacy@gethafen.com
For security concerns: security@gethafen.com
For everything else: hello@gethafen.com
This document is a working version. Specific obligations under applicable laws will be finalized prior to public launch.