Privacy Policy

This Privacy Policy describes how InspectionGo Inc., a Delaware corporation, doing business as Haven (“Haven,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information. Haven operates www.haven.living, our homeownership platform that helps homeowners, home buyers, and home sellers organize a lasting digital record of their home and access home-related services. This Privacy Policy applies to Haven’s homeownership services, including the platform at www.haven.living and the sites, applications, and services we provide through it (collectively, the “Services”).

This Privacy Policy is posted at haven.living/privacy-policy. It applies to information collected through our websites, mobile and web applications, and software platforms; and through our related communications, support, and sales interactions. This Privacy Policy is designed to follow generally recognized industry standards for web accessibility. If you use assistive technology and have difficulty accessing this Privacy Policy, or if you would like to receive it in an alternative format, please contact us as described in Section 14 and we will provide it.

Supplemental notices. Individual products may present shorter, product-specific privacy notices at sign-up or at other points of collection describing the information that product collects and how it is used. Those notices supplement this Privacy Policy and should be read together with it; if a supplemental notice conflicts with this Privacy Policy, the supplemental notice governs for that product.

Related terms. Your use of the Services is also governed, as applicable, by our website Terms of Use and our Haven Terms of Service. If a specific Service or program has supplemental privacy terms, those supplemental terms govern that Service to the extent they conflict with this Privacy Policy.

Third parties. This Privacy Policy does not apply to websites, products, or services operated by third parties (including real estate agents, mortgage lenders, contractors, and other service professionals you may connect with through the Services) even if they are accessible through our Services. We encourage you to review the privacy policies of any third party you interact with.

We collect personal information in four principal ways: directly from you, automatically when you use the Services, from our Professional Partners (defined below), and from third-party sources.

2.1 Information You Provide to Us

• Account information. We do not operate a traditional registration process. Your account is typically created from information a home inspector or other referral partner provides to us, including your name, email address, telephone number, and postal address, as described in Section 2.4. You access your account through a one-time sign-in link we email to you; if you no longer have that link, you can request a new one by entering your email address. You may add or update your contact details and any optional profile information at any time.
• Home and property information. Information about your home and its contents that you choose to provide, such as the property address, MLS listing information, photographs of the home, and details about its features, systems, appliances, warranties, maintenance history, service providers, and mortgage. Most of this information is optional; providing less may limit certain features.
• Inspection reports and related documents. Inspection reports and supporting documents you upload or order, which identify you and describe a property in detail, including its condition, systems, components, and any defects noted by the inspector.
• Transaction and payment information. Billing details and records of your purchases. Payment card data is collected and processed by our third-party payment processors; we do not store full payment card numbers.
• Communications. Information you provide when you communicate with us, including by email, text, chat, or telephone. We may record or monitor calls with our team for quality assurance, training, and to document your requests and consents, where permitted by law and after notifying you at the start of the call.

2.2 Information We Collect Automatically

When you use the Services, we and our vendors automatically collect certain information from your browser or device, including:

• Device and connection data. IP address, browser type and settings, operating system, device identifiers, mobile carrier or internet service provider, and language settings.
• Usage and log data. Pages and screens viewed, features used, links clicked, referring and exit URLs, search terms, access dates and times, and interactions with our emails (such as opens and click-throughs).
• Cookies and similar technologies. Information collected through cookies, pixels, software development kits, and similar technologies, as described in Section 5.
• Crash and error reports. Technical and usage information generated if you experience a crash or error, which may include account information if you are logged in.

2.3 Information We Receive from Inspectors, Lenders, or Other Professionals

Home inspection companies, lenders, and other professionals we work with (collectively, “Professional Partners”) provide information to us in connection with the Haven services their clients use, including their contact information and inspection reports (“Partner-Provided Information”). We use Partner-Provided Information to provide the Haven services to you – creating your Haven home portal, making your inspection report available in it, and contacting you about those services. We also use Partner-Provided Information for our own purposes, including analytics, product research and improvement, security and fraud prevention, and building and maintaining our property-data record for homes serviced through our platforms. We act as a business (or controller) under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”) and other applicable state privacy laws with respect to these uses, and this Privacy Policy governs them.

2.4 Information from Third-Party Sources

We may receive information about you or your property from third-party sources and combine it with information we already hold, including:

• Property-data providers and public records. Publicly available and licensed information about properties from third-party property-data providers and listing sources, and from state and local administrative agencies and property databases (for example, parcel data, listing history, and property characteristics).
• Professionals you work with. Your real estate agent, home inspector, mortgage provider, contractor, or other service professional may provide information about you or your home in connection with the Services (see Section 2.3).
• Referrals from your home inspector. If your home inspector refers you to us for Haven services, the inspector may provide us with your name and contact information after obtaining your permission for us to contact you about those services. We use that information to contact you, and, if you are interested, to establish your account or connect you with a home service provider as described in Section 4.
• Other sources. Marketing and referral partners, social media platforms (if you interact with our pages or sign in through them), and analytics providers.

We use the information described above for the following purposes:

• Providing the Services. To create and administer accounts; operate the platforms; build and maintain home portals and property records; deliver, host, and transmit inspection reports; schedule and manage services or products that you request; process transactions; and provide customer support.
• Communications. To send service, security, and transactional messages (which you may not opt out of while you maintain an account); to respond to your inquiries; and to send offers, surveys, and other marketing communications, subject to the opt-out choices described in Sections 6 and 9.
• Identifying services you may want. To remember your preferences and to recognize actions you take on the Services so that we can identify services or offers that may be relevant to you and follow up with you about them, subject to the cookie choices described in Section 5 and the communication choices described in Sections 6 and 9. We do not currently use your personal information to personalize or customize the content of the Services.
• Research, analytics, and product improvement. To understand how the Services are used; to develop, test, and improve products and features; and to produce aggregated or de-identified statistics and insights.
• Property-data record. To create and maintain records of properties serviced through our platforms, as described in Section 2.3.
• Security and fraud prevention. To authenticate users, secure the Services, detect and prevent fraud, abuse, and security incidents, and enforce our terms.
• Legal compliance. To comply with applicable law, respond to legal process, and establish, exercise, or defend legal claims.
• Other purposes disclosed at collection or with your consent.

De-identified and aggregated data. We may de-identify or aggregate personal information so that it cannot reasonably be used to infer information about, or otherwise be linked to, you or your household, and may use and disclose such data for any lawful purpose. We maintain reasonable measures to prevent re-identification, and we commit to maintaining and using such data only in de-identified or aggregated form and not attempting to re-identify it, except as permitted by law to test the effectiveness of our de-identification processes.

Artificial intelligence and machine learning. We may use de-identified or aggregated information – information that no longer identifies you and that we do not attempt to re-associate with you – to develop, train, test, and improve our own models, analytics, and product features, including our property-data record. We do not use information that identifies you to train third-party artificial-intelligence or machine-learning models, and the AI and data-processing vendors we engage do not use your personal information to train their models except as necessary to provide services to us. If we offer AI features (for example, report summaries or a chat assistant), we will use the information you submit through those features to provide the feature at your direction, and we will describe any material change in how we use your information as provided in Section 13.

Your home portal is private by default. If you use the Haven home portal, you control who can view or access your home portal. Content you post to your home portal and activity you conduct through it are available only to you and anyone you expressly authorize. Publishing or sharing information is always at your election.

We disclose personal information to the following categories of recipients:

• Vendors. Companies that operate the Services on our behalf, such as cloud hosting, data storage, payment processing, communications and SMS delivery, email distribution, analytics, customer support tooling, artificial intelligence and data-processing services, and professional advisors. These companies use personal information only to perform these services for us and are contractually restricted from using it for other purposes. This category does not include the home service providers, contractors, or other professionals we may refer you to – those disclosures are made only at your direction and are described under “Service provider referrals” below.
• Affiliates. We may share personal information with entities we control, are controlled by, or are under common control with. We share personal information with affiliates to help operate, provide, secure, and improve the Services and, where you have expressed interest in an affiliate’s products or services, to respond to your interest, in the same manner as the service provider referrals described below. An affiliate’s use of your personal information for its own purposes is made only at your direction or with your consent.
• Professional Partners, at your direction. For example, when you request an inspection, the details of your request are shared with the inspector or inspection company; when you authorize access to your home portal or publish or export a report, the recipients you designate receive the information you choose to include. Information you make publicly available may be viewed, indexed, and reused by others outside our control.
• Service provider referrals, at your request. If you tell us you are interested in a product or service offered by one of our home service providers (for example, a home service or internet service), we will, at your request, either process your request or provide your contact information and relevant property details to that provider so it can respond to your interest. We may receive compensation from these providers in connection with these referrals. We make these disclosures only at your direction, in response to your expressed interest.
• Corporate transactions. In connection with, or during negotiations of, a merger, acquisition, financing, reorganization, bankruptcy, receivership, or sale or transfer of some or all of our business or assets, in which case personal information may be transferred to the counterparty subject to appropriate protections.
• Legal process; protection of rights. To comply with law, regulation, subpoena, court order, or other legal process; to cooperate with government and law-enforcement authorities; to enforce our terms; to investigate and defend against claims; and to protect the rights, property, or safety of Haven, our users, or others. Where appropriate and lawful, we attempt to notify users of legal demands for their information, and we may contest demands we believe are overbroad or improper.
• With your consent or at your direction, for any other purpose disclosed to you.

We use your personal information to provide and improve the Services and to give you helpful information through the Haven platform, and we retain it as described in Section 7 (Data Retention). We do not sell or share your personal information and we do not use it for cross-context behavioral advertising or targeted advertising. Apart from the disclosures described above, the only data we make available to others is de-identified or aggregated so that it cannot reasonably be used to infer information about, or otherwise be linked to, you or your household. We do not attempt to re-identify that data (except as permitted by law to test our de-identification), and we contractually require recipients not to re-identify it. Because that data is not personal information, providing it – including any sale or license – is not a “sale” or “sharing” of personal information under applicable law.

Cookies and similar technologies. We and our vendors use cookies (small data files stored on your browser or device), pixels, tags, and similar technologies. Some are session-based and expire when you close your browser; others persist across visits. We use these technologies to: keep you signed in and remember your preferences (essential and functional cookies); recognize actions you take on the Services so that we can identify services or offers that may be relevant to you (functional cookies); and understand how visitors and users navigate and interact with the Services, including within your home portal after you sign in, so that we can measure, secure, and improve them (analytics). These providers act on our behalf. They do not use this information for their own purposes, including advertising, and do not combine it with information about you collected on other websites or online services. You can limit this collection through your browser settings, as described under “Your controls” below.

Analytics and marketing technologies. We use third-party services in three categories: site analytics, which tell us how visitors reach and move through our public sites; product and session analytics, which record how users navigate and interact with the home portal after signing in; and marketing automation, which tells us how our own emails and campaigns perform and which pages a recipient visited. We use service providers for this, and each of them may use the information only to provide those services to us, and is prohibited from selling it or using it for its own advertising purposes. We use Google Analytics for site and product analytics. Google Analytics sets cookies and collects the information described in this Section 5, including your IP address and device and browser identifiers, and processes that information on our behalf to produce the measurement reports we use. You can read how Google handles information from sites that use its services at policies.google.com/technologies/partner-sites, and you can prevent Google Analytics from collecting information from your browser by installing Google’s opt-out browser add-on, available at tools.google.com/dlpage/gaoptout.

Email technologies. Our emails may contain pixels and click-through URLs that tell us whether a message was opened and which links were clicked. If you prefer not to be tracked in this way, do not click links in our emails and set your email client to block remote images.

How these technologies are deployed. Apart from technologies that are strictly necessary to operate the Services and deliver the content and features you request, the only non-essential technologies we use are the analytics and marketing-automation technologies described above; we do not use cookies or similar technologies for cross-context behavioral advertising, and we do not permit our vendors to do so. When you visit or sign in to the Services, these technologies collect the information described in this Section 5 (including your IP address and device or browser identifiers) and transmit it to us and our vendors. If we later deploy technologies for which applicable law requires your prior consent, we will request that consent before deploying them.

Your controls. You can block or delete cookies at any time through your browser settings, which will disable the preference and analytics cookies described in this Section 5; blocking cookies may also sign you out and limit features of the Services. Browser settings do not affect information your device sends with every request, such as your IP address and the log data described in Section 2.2, which we receive whether or not you allow cookies. Because we do not sell or share personal information, do not use it for cross-context behavioral advertising, and do not engage in targeted advertising, there is no “sale” or “sharing” opt-out that applies to the Services, and we do not publish a “Do Not Sell or Share My Personal Information” link. Browser signals such as “Do Not Track” and opt-out preference signals communicate a choice to opt out of the sale or sharing of personal information and of targeted advertising; because we do not engage in those activities, we do not separately respond to them. If our practices change, we will update this Privacy Policy and provide the opt-out methods that applicable law then requires.

Consent. If you opt in to one of our SMS programs, you consent to receive recurring automated text messages from us at the mobile number you provide. Consent to receive marketing texts is not a condition of any purchase. Message frequency varies. Message and data rates may apply.

Opting out. Reply STOP to any message to cancel and opt out of further texts from that program; you may receive a single confirmation message. You may also opt out by any other reasonable means that clearly expresses your request, including by contacting us using the information in Section 14.

No marketing sharing of SMS data. We do not sell or share mobile telephone numbers, SMS opt-in consent, or text message content with third parties or affiliates for their marketing or promotional purposes. We share this information only with vendors (such as carriers, aggregators, and messaging platforms) as necessary to operate the SMS program.

Carrier disclaimer. Wireless carriers are not liable for delayed or undelivered messages. Your carrier’s standard messaging and data rates apply to all messages; wireless service and certain features may not be available in all areas or on all devices.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, using the following criteria to determine retention periods: the nature of the Services and of our relationship with you; the type and sensitivity of the information; whether the information is needed to maintain accurate business and property records; our legal, tax, accounting, and regulatory obligations; the applicable statutes of limitations; and the need to prevent fraud and abuse and to establish, exercise, or defend legal claims.

In general: we retain account and profile information for as long as your account is active, plus a reasonable period thereafter for the legitimate needs described above; we retain transaction and billing records for the periods required by tax and accounting law; and we retain log and analytics data for shorter operational periods. We may also deactivate or delete an account that has remained inactive for an extended period.

Home portals and property records. Because a home portal is designed to be a long-term record of a home, we maintain your home portal for as long as your account remains active, which may extend across the full period of your ownership of the home. We retain inspection reports associated with your account for as long as your account is active and for a reasonable time thereafter, as part of that long-term record. The property records built from those reports are retained indefinitely in de-identified form as part of our property-data record, because that record is designed to persist for the life of the home. This retention is subject to the deletion practices described below.

If you request deletion of any personal information, we will delete or de-identify it within a reasonable time, except that we may retain limited information as needed to comply with legal obligations, resolve disputes, prevent fraud and abuse, collect amounts owed, enforce our agreements, maintain the integrity of our records and backups, and preserve de-identified or aggregated data. Property-level data that has been de-identified (i.e., data about the home that cannot reasonably be used to infer information about, or otherwise be linked to, you or your household) may be retained as part of our property-data record. We may also retain property information that is publicly available (for example, from public property or land records), which applicable law does not treat as personal information.

Partner-Provided Information. We retain Partner-Provided Information for as long as needed to provide the Haven services described in Section 2.3 and for the additional periods described above.

We maintain a written information security program with administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, and destruction, appropriate to the nature of the information and the risks involved. These safeguards include encryption of data in transit using current transport layer security (TLS) protocols and encryption at rest where appropriate; role-based access controls and authentication requirements limiting access to personnel who need it; logging and monitoring of our systems; vulnerability management and periodic security testing; due diligence and contractual security requirements for vendors that handle personal information; personnel training; and an incident response plan.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping access to your email account secure, since that is where we send your one-time sign-in links, and for not forwarding those links to anyone else. If we determine that a breach of security has compromised your personal information, we will notify you and the appropriate regulators as required by applicable law.

Depending on where you live, you may have some or all of the following rights with respect to your personal information, subject to legal limits and exceptions:

• Access / to know. To confirm whether we process your personal information and to obtain a copy of it, including the categories collected, the purposes, and the categories of recipients.
• Correction. To correct inaccurate personal information.
• Deletion. To request deletion of personal information we hold about you.
• Portability. To obtain a copy of personal information you provided to us in a portable and, where feasible, readily usable format.
• Opt-out of sale, sharing, and targeted advertising. To opt out of any “sale” or “sharing” of personal information and of processing for targeted advertising. We do not sell or share personal information or process it for targeted advertising, so this right does not currently apply to the Services. See Sections 5 and 10.1.
• Limit sensitive personal information. To limit certain uses of sensitive personal information, where applicable (see Section 10.1).
• Appeal. To appeal our denial of a rights request, as described in Section 10.2.

Cookies and tracking choices. We use cookies and similar technologies (described in Section 5) that disclose certain identifiers and information about your activity on the Services to our analytics and marketing-technology providers. Those providers act as our service providers and may not use that information for their own purposes.

These disclosures are not a “sale” or “sharing” of personal information and are not processing for targeted advertising, so no sale or sharing opt-out applies to them. You can still limit them. The analytics and marketing-automation technologies described in Section 5 are the only non-essential technologies we use, and you may limit them by blocking or deleting cookies through your browser settings, as described in Section 5. Blocking or deleting cookies does not turn off the technologies that are strictly necessary to operate the Services, and it does not stop information your device sends with every request – such as your IP address and the log data described in Section 2.2 – from reaching us.

How to exercise your rights. You may exercise these rights by: (i) emailing us at legal@haven.living, and providing enough detail for us to locate your records and understand your request; or (ii) calling us toll-free at (888) 316-9202.

Verification and authorized agents. We will verify your request using information associated with your account or that you provide, and we may request additional information reasonably necessary to verify your identity. You may designate an authorized agent to submit a request on your behalf; we may require proof of the agent’s authority and verification of your identity.

Non-discrimination. We will not discriminate against you for exercising your privacy rights, including by denying you Services, charging different prices, or providing a different level or quality of Services, except as permitted by law (for example, where the difference is reasonably related to the value of your data in a voluntary program).

Marketing choices. You may opt out of marketing emails by using the unsubscribe link in any marketing message, and out of marketing texts by replying STOP (Section 6). We may still send you non-promotional service and transactional messages.

10.1 California (CCPA/CPRA)

This section supplements the rest of this Privacy Policy and applies to California residents. It serves as our notice at collection. The following table summarizes the categories of personal information we collect (or have collected in the preceding 12 months), the purposes of collection and use, the categories of recipients to whom each category is disclosed for a business purpose, and the applicable retention criteria. The sources of each category are described in Section 2.

Category of Personal Information (Cal. Civ. Code § 1798.140)

Sale / sharing. We do not sell personal information nor do we use personal information for cross-context behavioral advertising. We use analytics and marketing-technology providers, each of which acts as a service provider under Cal. Civ. Code § 1798.140(ag) and is prohibited from using personal information for its own purposes, including advertising. Disclosures to them are therefore not a “sale” or “share.” Accordingly, we do not publish a “Do Not Sell or Share My Personal Information” link, and there is no sale or sharing opt-out to which an opt-out preference signal would apply. We have no actual knowledge that we sell or share the personal information of consumers under 16 years of age.

Sensitive personal information. The sensitive personal information we collect is limited to the credential used to sign you in – the email address to which we send your one-time sign-in link – which we use solely to authenticate access to your account. We do not use or disclose sensitive personal information for purposes that would trigger a right to limit under Cal. Civ. Code § 1798.121.

California rights. California residents may exercise the rights to know/access, correct, delete, and opt out of sale/sharing, and the right to limit use of sensitive personal information, using the methods in Section 9, without discrimination. Your right to know is not limited to the 12-month period preceding your request; upon a verifiable request, we will provide the required information for the period during which we have retained it, except that we are not required to provide personal information collected before January 1, 2022. Because we do not sell or share personal information, the right to opt out of sale or sharing does not currently apply to the Services, as described in Section 5. “Shine the Light” (Cal. Civ. Code § 1798.83): except at your direction (for example, the service provider referrals described in Section 4) we do not disclose personal information to third parties for their own direct-marketing purposes; California residents may request further information by contacting us as described in Section 14.

10.2 Other U.S. State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Montana, Maryland, Minnesota, and other states with comprehensive consumer privacy laws may exercise the rights described in Section 9, including the rights to confirm processing, access, correct, delete, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects (we do not sell personal data, engage in targeted advertising, or conduct such profiling; the analytics and marketing-technology providers we use act as our processors and are prohibited from using personal data for their own purposes, including advertising). We will respond to authenticated requests within the time required by the applicable law (generally 45 days, extensible once by 45 days where reasonably necessary). If you are a resident of Minnesota or Oregon, you may also request a list of the specific third parties to which we have disclosed personal data. You may exercise this right using the methods described in Section 9.

Appeals. If we decline to act on your request, you may appeal within a reasonable period by replying to our decision or emailing legal@haven.living with the subject line “Privacy Request Appeal.” We will respond to appeals within the period required by your state’s law (generally 45–60 days). If your appeal is denied, you may submit a complaint to your state Attorney General using the contact information published on that office’s website.

The Services are intended for individuals age 18 and older and are not directed to children. We do not knowingly collect personal information from anyone under 18, and, consistent with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us as described in Section 14, and we will delete the information as required by law.

The Services are operated from, hosted in, and directed to users in the United States. Some of the vendors that process information on our behalf, including our analytics providers, may do so in other countries where they or their subprocessors maintain facilities; where that occurs, they remain subject to the contractual restrictions described in Sections 4 and 5. If you access the Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and in the other countries described above, where privacy laws may differ from those of your jurisdiction, and that we will handle your information as described in this Privacy Policy.

We may update this Privacy Policy from time to time. When we do, we will post the revised version at the URL identified in Section 1 and update the version date at the top of the policy. If we make material changes – including changes that would materially expand how we use or disclose previously collected personal information – we will provide more prominent notice (such as email to your account address or an in-Service notice) before the changes take effect and, where required by law, obtain your consent. Your continued use of the Services after the effective date of an updated Privacy Policy constitutes your acknowledgment of the updated policy.

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, or wish to exercise your rights, you may contact us at: