Havby
Privacy

Privacy in plain English

This page summarizes how Havby handles your data. It accompanies our Privacy Policy, which remains the governing document. Where the two differ, the Privacy Policy applies.

Last updated October 3, 2026

1. Summary

  • We do not sell your data or share it with advertisers.

  • We do not train or fine-tune any AI model on your workspace content.

  • AI model providers process requests with data collection denied and may not store them for, or use them for, training.

  • Connected accounts such as Gmail, Google Drive and GitHub are linked through Composio, our integration provider in the United States. It holds the connection credentials, and a team reaches each account only at the level you set.

  • Every action an agent takes is recorded in a receipt you can review.

  • You can delete a workspace at any time. Its data is permanently erased 45 days later.

2. No training on your data

Havby does not train or fine-tune a model on customer workspace content, for any customer. We operate no training pipeline with access to customer data, so this is not a setting that can be changed.

3. How requests to AI models are handled

Every request Havby sends to a third-party model, whether served by Anthropic, OpenAI, Google or another provider through OpenRouter, carries one routing requirement:

  • Data collection denied. OpenRouter will not route the request to any provider that stores or trains on its inputs.

    provider.data_collection: "deny"

4. What agents can access

An agent can use only the connections you grant it, at the access level you set for each. Unless an account is set to Can act on its own, actions that cannot be reversed, such as sending an email, making a payment or deleting data, wait for your OK from a person in your workspace.

5. How long we keep data

  • Receipts. Kept for two years from the date each is written. A receipt cannot be deleted on its own before that date. Deleting the workspace it belongs to is the only exception.

    receipts.retain_until

  • Deleted workspaces. Stop working immediately, including all agent, connector and API access. The underlying data is permanently purged after 45 days.

    PURGE_AFTER_ARCHIVE_DAYS = 45

6. Where data is stored

Havby runs on Google Cloud in Canada. Stripe, Resend, OpenRouter and Composio process limited data in the United States, as listed on our Sub-processors page.

7. Your choices

You can request a copy of your data or the deletion of your account at hello@havby.com. We respond within 30 days. Organization owners can delete a workspace directly in Havby.

8. Contact

Questions about this page can be sent to hello@havby.com. Report a security concern to security@havby.com.