Updated: October 13, 2026
Book With Haven LLC ("Haven," "we," "us," or "our") provides software, websites, booking tools, guidebooks, guest portals, payment workflows, marketing tools, and related services for short-term rental hosts, property managers, and their guests.
This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our websites, platform, booking pages, guest portals, host dashboard, support channels, integrations, and related services (collectively, the "Services").
The Book With Haven marketing text message program has its own SMS Privacy Policy and SMS Terms and Conditions. Those pages, together with Section 6.10 below, are the messaging-program policy.
This Privacy Policy applies to:
By using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.
Book With Haven LLC provides software that helps Hosts create direct booking websites, manage guest-facing property information, accept bookings, connect payment and protection providers, and communicate with Guests.
For privacy questions or requests, contact us at:
Book With Haven LLC 34 Thurston Point Rd Gloucester, MA Email: hello@bookwithhaven.com
Haven processes personal information in different roles depending on the context.
For account, platform, billing, security, marketing, analytics, product improvement, and legal compliance purposes, Haven acts as an independent business or controller of personal information.
For certain Guest information processed on behalf of a Host in connection with a Host's property, booking, guest portal, or direct booking site, Haven may act as a service provider or processor for that Host. Hosts are independently responsible for their own privacy notices, legal compliance, guest communications, tax obligations, rental agreements, and use of Guest information they receive through the Services.
A Host may also authorize an approved third-party software product to connect to the Host's Haven account through our public API. We refer to that product as an "Application" and to the organization that operates it as a "Developer." When a Host authorizes an Application, the Host is instructing Haven to disclose information from that account to the Developer. The Developer receives it as a service provider, processor, or sub-processor acting for that Host, not as an independent marketing partner of Haven and not as a vendor Haven has engaged for Haven's own purposes. Haven's role for that Guest information does not change: we remain the Host's service provider or processor, acting on the Host's instruction. Section 6.4 describes what may be disclosed and how a Host controls it.
We collect personal information in the categories below.
We may collect:
If you are a Host or property manager, we may collect:
If you are a Guest or prospective Guest, we may collect:
Payments are processed through third-party payment providers, including Stripe. Haven does not intentionally store full payment card numbers.
We may receive and store payment-related information such as:
Payment providers process payment information under their own terms and privacy policies.
If a Host enables screening or damage protection features, we may collect or receive information needed to operate those features, such as:
Screening and protection may be provided by third-party providers such as Truvi. Those providers may collect additional information directly from Hosts or Guests under their own terms and privacy policies. Haven is not the insurer, underwriter, claims administrator, or guarantor of any screening, protection, or claim outcome.
Integrations run in two directions, and a Host may use either or both.
Inbound connections. If a Host connects Haven to a third-party platform so that Haven can retrieve information from it, we may collect and process information from that integration, including:
These integrations may include property-management systems, channel managers, booking platforms, calendar providers, payment providers, email providers, analytics providers, and other tools selected or authorized by the Host.
Outbound connections. If a Host authorizes an Application to connect to the Host's Haven account through our public API, we disclose information from that account to the Developer as described in Section 6.4, and we may also receive information back from the Application, including updates it writes to listings, calendars, rates, stay rules, reservations, and messages, together with the connection records described below.
For both directions we also collect and retain connection records, including which Application or integration is connected, which account it is connected to, which permissions the Host approved, when the connection was made and by whom, when it was changed or disconnected, access and error logs, and the addresses to which we deliver events.
We may collect information when you communicate with us, including:
When you use the Services, we may automatically collect:
We and our service providers may use cookies, pixels, tags, local storage, SDKs, and similar technologies to:
Some of these technologies are essential. Others are used for analytics, advertising, or personalization.
Haven may offer AI-assisted features, such as listing suggestions, property descriptions, guidebook content, local recommendations, tax-rule suggestions, SEO content, support assistance, or other product workflows.
When you use these features, we may process the prompts, inputs, outputs, property data, booking context, and related content needed to provide the feature. You are responsible for reviewing AI-generated content before relying on it or publishing it.
We do not intentionally use Guests' full payment card information for AI-assisted content generation.
We do not intentionally request sensitive personal information unless it is necessary for a specific feature, legal obligation, security purpose, support request, screening/protection workflow, or claim process.
Depending on how you use the Services, sensitive information may include government identification information, precise property addresses, financial account-related metadata, claim evidence, or other information you choose to provide.
Do not submit sensitive personal information unless it is necessary for the specific purpose for which you are providing it.
If you apply for access to Haven's public API on behalf of a Developer organization, we collect the information needed to review and administer that access, including the organization's legal name, display name, website, security contact address, support contact address, company type, product description, requested permissions, and redirect destinations. We also record which version of Haven's Developer and API Terms was accepted, when, and by which administrator, along with the credentials, permission ceiling, and connection records associated with the Application.
We act as an independent business or controller for this information.
If a Host connects a Facebook Page, and optionally the Instagram professional account linked to it, through Facebook Login for Business, Meta Platforms sends us, and we store:
We use this information only to run ads under the Host's Page when the Host chooses, and to publish the posts the Host asks us to publish from Haven's creative tools, either immediately or at a time the Host schedules. For each post, we keep the caption, the media we send to Meta, the destination Page or account, the scheduled time if there is one, the ID and link Meta returns for the published post, and any error Meta reports. We do not read the Host's Page messages, followers, or other Page content, and we do not sell or share this information with anyone other than Meta.
Deleting your Facebook and Instagram information. You can remove this information at any time:
We collect personal information from:
We use personal information to:
We may disclose personal information as described below.
We may disclose Guest information to the Host responsible for the property or booking. This may include name, contact information, booking details, messages, payment status, cancellation status, security deposit information, screening/protection status, and other information needed to manage the booking or stay.
We may disclose Host information to Guests, including property information, contact information, house rules, check-in information, guidebook content, cancellation policies, and other information needed for the booking or stay.
We disclose information to Stripe and other payment providers to process payments, subscriptions, payouts, refunds, disputes, chargebacks, account onboarding, fraud prevention, tax reporting, and compliance.
If screening or damage protection is enabled, we may disclose relevant booking, Guest, Host, property, claim, and transaction information to providers such as Truvi.
A Host may connect Haven to other software in either direction. Both are covered by this section.
Inbound integrations. If a Host connects a third-party platform so that Haven can retrieve information from it, we may disclose information to or receive information from that integration as needed to provide the requested functionality.
Outbound Applications. A Host may also authorize an approved Application to connect to the Host's Haven account through our public API. When a Host does so, we disclose information from that account to the Developer that operates the Application, at the Host's instruction and limited to the permissions the Host approved.
Depending on the permissions granted, the information disclosed may include:
We do not disclose full payment card numbers to an Application. Card information stays with our payment provider.
How a Host controls this. The Host chooses the Application. Before approving, the Host sees the specific permissions the Application is asking for on an authorization screen. Sensitive and restricted permissions, including access to arrival secrets and the ability to issue a refund, are never pre-selected and must be chosen by the Host.
Authorization is per account. A property manager acting on a linked client account may approve several accounts at once, but each account produces its own connection, each connection is separately revocable, and a manager's authorization never exceeds the permissions that manager holds in the account.
A Host may disconnect an Application at any time from the connected applications screen. Disconnecting takes effect immediately and stops all further access.
Disconnecting does not, by itself, erase information the Developer already received. After disclosure, that information sits in the Developer's own systems, which Haven does not operate, control, or have access to. Our Developer and API Terms require a Developer to stop processing the information and to delete or de-identify it within a set period after disconnection, but Haven cannot verify a Developer's internal systems, and the Developer's own privacy policy governs how it handles the information. Hosts should read that policy before connecting an Application, and Guests with questions about an Application should contact the Host.
Review and limits. Haven staff review every application for API access and set a maximum set of permissions an Application may ever request. A Host's authorization can only fall within that maximum. Haven may narrow it at any time, and may suspend or revoke an Application immediately. That review is a screening step, not a certification, audit, or endorsement of the Developer or its security practices.
How we treat this legally. Disclosure to an Application is made at the Host's direction, for the Host's business purpose. The Developer receives the information as a service provider, processor, or sub-processor acting for that Host. It is not a sale of personal information and it is not a share for cross-context behavioral advertising. Our Developer and API Terms prohibit a Developer from selling the information, using it for the Developer's own marketing to Guests, using it to train general-purpose artificial intelligence models, or combining it across Hosts beyond what is needed to operate the authorizing Host's workspace.
We may disclose personal information to vendors and service providers that help us operate the Services, including providers of:
These service providers are authorized to use personal information only as needed to provide services to us, comply with law, or as otherwise permitted by their agreements with us.
An Application that a Host authorizes under Section 6.4 is not one of these service providers. Haven does not engage it, does not direct its work, and does not use it to operate the Services. It is software the Host chose, and it acts for the Host. Section 6.4 governs those disclosures.
We may disclose device, usage, cookie, pixel, and similar information to analytics and advertising partners to measure website traffic, understand user behavior, improve marketing, and show relevant ads. This never includes mobile phone numbers or text-messaging consent, which are not shared with third parties or affiliates for marketing or promotional purposes (see Section 6.10).
We do not sell personal information for money. However, some privacy laws define "sale," "sharing," or "targeted advertising" broadly enough to include certain advertising, retargeting, analytics, or cookie-based disclosures. Where required by law, you may opt out as described in this Privacy Policy.
We may disclose personal information if we believe it is necessary or appropriate to:
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, personal information may be disclosed or transferred as part of that transaction.
We may use and disclose aggregated, anonymized, or de-identified information that does not reasonably identify you.
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. Nor do we rent that information, disclose it to lead generators, data brokers, or affiliate marketers, or buy it from them. This is not an affiliate, lead-generation, or third-party marketing program: Book With Haven LLC is the sole sender of every text we send, and consent is never transferred to another brand.
What we collect and how we use it for text messaging. When you provide a mobile number for text messages we collect that number, the consent you gave (the wording you saw, the date and time, and the page or form where you gave it), and delivery records for the messages we send (including the carrier segment count and cost reported by our text-messaging provider). We use this information only to send the messages you have consented to receive, to operate the service, to honor opt-outs, and to demonstrate that consent was given.
Marketing text program. For the Book With Haven marketing text message program we disclose mobile numbers only to the text-messaging service provider that delivers messages on our behalf. We do not disclose marketing-text opt-in data to Hosts, Host-authorized Applications, affiliates, lead generators, or advertising partners. The program terms are in the SMS Terms and Conditions and the SMS Privacy Policy.
Reservation texts (separate program). For reservation and account messages only — a separate opt-in, not the marketing campaign — we may share the mobile number with the Host of a property you have booked so they can communicate with you about your stay, and, where that Host has authorized an Application under Section 6.4 and granted it permission to receive guest contact information, with that Application so it can operate the Host's booking and stay workflows. Hosts may not use a Guest's mobile number for marketing, and they do not receive marketing-text opt-in data. The same limits apply to a Host-authorized Application: it receives a mobile number only to operate that Host's booking and stay workflows, it does not receive marketing-text opt-in data, and our Developer and API Terms prohibit it from using the number for its own marketing or from passing it to anyone else.
Separate programs, separate consents. Text-messaging consent is not shared between programs. Consenting to reservation and account messages does not constitute consent to receive promotional or marketing text messages. Consenting to marketing texts about a stay does not constitute consent to receive Haven product texts, and the reverse is also true. Each marketing program requires its own affirmative opt-in (an unchecked box you tick yourself). Consent to receive text messages of any kind is never a condition of booking a stay, contacting us, or purchasing anything.
Stay marketing text messages. When you opt in to marketing texts about a stay, Book With Haven LLC is the sole sender of record. Those messages contain offers, discounts, and availability for the stay you selected. The stay name identifies the listing the offer is about; it is not a separate sender. Example: "Book With Haven: 20% off Harborview Cottage this weekend. Reply STOP to opt out." Message frequency varies; we send at most one marketing text per recipient per 24 hours. Message and data rates may apply. Marketing texts are sent to United States numbers only. Reply STOP to any message to opt out at any time, or HELP for help; you can also email hello@bookwithhaven.com. The program terms are in the SMS Terms and Conditions and Section 22.2 of our Terms of Service.
Haven product marketing text messages. When you opt in on a Book With Haven lead form — including https://www.bookwithhaven.com/contact — Book With Haven LLC is the sole sender and may send recurring automated marketing texts about your inquiry, demos, and product news. Message frequency varies. Message and data rates may apply. Consent is not required to contact us or to use Haven. Reply STOP to cancel, HELP for help. The program terms are in Section 22.3 of our Terms of Service.
Reservation and account text messages. If you provide a mobile number when booking or creating an account and tick the reservation-text box, we may send booking confirmations, check-in instructions, access codes, reservation changes, and account alerts. Message frequency varies with your reservation activity. Message and data rates may apply. Reply STOP to opt out; opting out does not cancel your reservation.
The exclusions in this section apply specifically to mobile information and text-messaging consent, and override any more general description of "sale," "sharing," "targeted advertising," or disclosure to advertising partners elsewhere in this Privacy Policy.
You can control cookies through your browser settings. If you disable cookies, some features of the Services may not work properly.
Where available, you may also use our cookie settings or privacy preference tools to manage non-essential cookies.
You may opt out of marketing emails by using the unsubscribe link in the email. Even if you opt out of marketing emails, we may still send transactional, legal, security, billing, support, and booking-related messages.
Some browsers or extensions allow you to send a Global Privacy Control or similar opt-out signal. Where required by applicable law, we will treat recognized opt-out preference signals as a request to opt out of sale, sharing, or targeted advertising for the browser or device that sends the signal.
We currently do not respond to browser "Do Not Track" signals unless required by law.
Where a legal basis is required, we process personal information based on one or more of the following:
Disclosure to an Application a Host has authorized under Section 6.4 is made on the Host's instruction, to provide the Services the Host has asked for, and as a business purpose disclosure to a service provider or processor acting for that Host.
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
Retention periods vary depending on the type of information, the context in which it was collected, legal requirements, and business needs.
Information we disclose to an Application under Section 6.4 is retained by the Developer under the Developer's own retention practices, which Haven does not control. Our Developer and API Terms require the Developer to stop processing that information and to delete or de-identify it, including derived copies, within thirty days after a Host disconnects the Application or the Developer's access ends, with a limited allowance for backups already taken, for records the Developer keeps as its own business, and for information the law requires it to keep. We retain connection records, including which Application was authorized, by whom, with which permissions, and when it was connected and disconnected, for as long as needed for security, audit, dispute, and compliance purposes.
When personal information is no longer needed, we will delete, anonymize, de-identify, or securely retain it as required or permitted by law.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include access controls, encryption, monitoring, logging, vendor review, and other security measures appropriate to the nature of the information we process.
Access to our public API is not self-serve. Every developer application is reviewed by Haven staff before approval, credentials are issued as secrets, access tokens are short-lived, and Haven can suspend a developer, an Application, or a single connection immediately.
No method of transmission or storage is completely secure. We cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of any unauthorized account access or suspected security issue.
Depending on where you live and which laws apply, you may have the right to:
To exercise these rights, contact us at hello@bookwithhaven.com.
We may need to verify your identity before fulfilling a request. We may deny or limit a request where permitted by law, including when fulfilling the request would interfere with legal obligations, security, fraud prevention, dispute resolution, transaction records, tax records, contractual obligations, or the rights of others.
If your request concerns information held by a Host, or by an Application a Host has authorized, we will act on the request for the information in our systems and will direct you to the Host, who decides how information in their own systems and in the systems of the software they have chosen is handled. Where we act as a Host's service provider or processor, we follow that Host's instructions.
If we deny your request, you may appeal by replying to our decision or contacting us at hello@bookwithhaven.com with the subject line "Privacy Appeal."
Certain U.S. state privacy laws may require additional disclosures.
In the past 12 months, we may have collected the following categories of personal information:
We collect personal information from the sources described in Section 4.
We collect, use, and disclose personal information for the purposes described in Sections 5 and 6.
We may disclose personal information to the categories of recipients described in Section 6, including Hosts, Guests, payment providers, screening/protection providers, integrations, Applications that Hosts have authorized, service providers, analytics providers, advertising partners, professional advisors, legal authorities, and business transfer recipients.
We do not sell personal information for money.
We may use advertising, retargeting, analytics, pixels, and similar technologies that may be considered a "sale," "sharing," or "targeted advertising" under certain privacy laws. Mobile phone numbers and text-messaging consent are excluded from any such "sale" or "sharing" and are never shared with third parties or affiliates for marketing or promotional purposes (see Section 6.10). You may opt out by contacting us at hello@bookwithhaven.com, using any available cookie or privacy preference tool, or using a recognized browser-based opt-out signal where required by law.
Disclosure to an Application a Host has authorized under Section 6.4 is not a sale and is not a share for cross-context behavioral advertising. It is a business purpose disclosure made at the Host's direction to a service provider or processor acting for that Host, and the Developer is contractually restricted from retaining, using, or disclosing the information for any other purpose.
We do not use or disclose sensitive personal information for purposes that would require a right to limit use under applicable law unless we provide the required notice and choice.
The Services are not directed to children under 18. We do not knowingly sell or share the personal information of anyone under 18 or use it for targeted advertising.
Hosts may receive Guest personal information through the Services. Hosts are independently responsible for:
Hosts may not use Guest information for unrelated marketing, resale, profiling, discrimination, harassment, or unlawful purposes.
The Services may link to, integrate with, or rely on third-party services, including payment providers, screening/protection providers, PMS tools, channel managers, booking platforms, analytics tools, advertising platforms, AI providers, communication tools, and Applications that Hosts authorize through our public API.
This Privacy Policy does not apply to third-party websites, services, or privacy practices, including those of a Developer whose Application a Host has authorized. You should review the privacy policies of any third-party services you use or authorize.
Haven is based in the United States. If you use the Services from outside the United States, your personal information may be processed and stored in the United States or other countries where we or our service providers operate. Privacy laws in those countries may differ from the laws where you live.
An Application a Host authorizes may be operated from, or store information in, a different country than the Host or the Guest. The Host chooses that Application, and the Host and the Developer are responsible for putting in place any transfer mechanism the law requires for the information the Developer receives.
The Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us at hello@bookwithhaven.com, and we will take appropriate steps to delete it.
We may update this Privacy Policy from time to time. When we make changes, we will update the effective date above. If changes are material, we may provide additional notice, such as through the Services or by email.
Your continued use of the Services after an updated Privacy Policy becomes effective means you accept the updated Privacy Policy.
For questions, requests, appeals, or concerns about this Privacy Policy or our privacy practices, contact us at:
Book With Haven LLC 34 Thurston Point Rd Gloucester, MA Email: hello@bookwithhaven.com
Version 2026-10-13