KeptHaven

Privacy Policy

Version 2026-10-19 · Last updated October 19, 2026

Last updated: October 19, 2026

This policy is reviewed and re-published at least once every twelve months.


The short version

We hold records about your home. Here is what we do with them.

The section most people want is Your choices and rights.


<a id="notice-at-collection"></a>

1. What we collect, why, and for how long

This section is our notice at collection.

We do not sell or share the information in your account, your home record, or your home file. The one exception to "we do not share" is the visitor-identification tag on our public marketing pages, described in Section 5; you can opt out of it at any time.

CategoryExamplesWhy we collect itRetention
IdentifiersName, email, postal address, phone number, account ID, IP addressCreate and secure your account; deliver the Service; communicate with youWhile your account is open, then removed from active systems within 30 days, and from our database provider's backups when those roll off, within 30 days
Customer recordsProperty address, ownership details, transaction dateBuild your home record; connect you to the right brokerageWhile your account is open, then 90 days
Commercial informationPlan type, payment history with usBilling and support7 years, for tax and audit purposes
Internet activityPages viewed, features used, device and browser type, session logsOperate the Service; security; abuse detection24 months
IP addressThe IP address a request comes fromSecure the Service; prevent abuse; enforce request limits; keep a record of consent, privacy requests, and staff access24 hours in rate-limit records. In bot-trap and blocked-address records, for as long as the address is blocked. Kept with the record it belongs to when it is stored with a privacy request, a consent or attestation record, or an entry in our staff access log, which is a permanent record that is never edited (see Section 8)
ImagesPhotographs you add of your home and its contentsBuild your inventory; identify items, appliances, and conditionWhile your account is open, then 90 days
Professional informationFor agents and brokerage staff only: license number, brokerage, roleOperate the brokerage side of the ServiceWhile the account is open, then 90 days
InferencesHome Health Score (shown in the product as your home readiness score), maintenance schedule, condition estimatesGenerate the features you useWhile your account is open, then 90 days
Sensitive informationSee Section 2See Section 2See Section 2

Sensitive information reaches us only because it appears inside documents you choose to add. We use it to provide the Service you asked for, to secure it, and to maintain its quality. We do not use sensitive information to draw conclusions about you. Because our use stays within those purposes, we do not offer a separate "limit the use of my sensitive information" control. If that ever changes, we will add one and tell you.


2. Sensitive information, specifically

Closing documents, insurance policies, and warranty paperwork often contain Social Security numbers, driver's license numbers, financial account numbers, and sometimes health-related information.

What we doDetail
EncryptionDocuments are encrypted in transit and at rest. Each brokerage's documents and photographs are encrypted with their own key before they reach storage, and that key is itself protected by a master key KeptHaven holds separately from the database. A copy of the database alone cannot unlock your files.
Access controlAccess to document contents is limited to you, the people you authorize, the small number of KeptHaven staff who need it to answer a request you opened, and your brokerage's staff (your assigned agent or a brokerage administrator) for the items you or they have made visible to them. Every such access is logged.
Never disclosed for marketingDocument contents are never disclosed to advertisers, and are never used to select or target advertisements for you. What your brokerage and agent can see is described in Section 5.
Never used for trainingDocument contents are not used to train, fine-tune, or improve any AI model unless you give us separate, specific permission.
PhotographsSince September 2026 we remove embedded location data on upload. Our image analysis identifies household items and their condition. It performs no facial detection or recognition and draws no conclusions about the people in your home.
MinimizationWe ask you not to add documents containing this information unless you need to keep them.

3. Where information comes from

SourceWhat we receive
YouEverything you enter or add
Your brokerage or agentYour name, property address, contact details, transaction date, and documents they place in your home file
Public records providersCounty property records, tax and assessment data, permit history for your address
Your deviceIP address, browser and device type, usage events
Service providersDelivery and engagement data from our email and messaging providers; error and performance data

We obtain county records, tax data, and permit history from commercial data providers. We do not create that information and cannot guarantee it is accurate or current.


4. How we use information

To create, secure, and operate your account; to build and maintain your home record, home file, inventory, maintenance schedule, and Home Health Score; to run the assistant; to send you the service communications described in Section 10 of the Terms of Service; to send marketing email only where you gave separate permission; to display advertising as described in Section 6; to provide support you request; to detect and prevent fraud, abuse, and security incidents; to measure and improve the Service using aggregate and de-identified information; and to comply with law.

We do not use your information to make decisions about your access to housing, credit, insurance, or employment, and we do not permit anyone else to use information from the Service to do so.


5. Who we disclose information to

We do not sell or share the information in your account, your home record, or your home file, and never have.

Our public marketing website. Since 2026-09-30, our public marketing pages (the homepage, About, the pages for agents, brokerages and homeowners, Pricing, Security, Education, the changelog and the sample home) load a website tracker from Apollo.io. When you visit one of those pages, the tracker sends Apollo the address of each page you open, the page that referred you, any campaign tags in the link, and an identifier stored in your browser. It also loads a script from LiveIntent, which may recognize your browser and give Apollo a hashed (scrambled) form of an email address associated with it. Apollo uses this to tell us which companies, and in the United States which people, visited our website, so we can follow up with brokerages and agents who may be interested. Apollo and LiveIntent may also use this information under their own privacy policies. Under some state laws this counts as "sharing" personal information, and may count as a "sale," so we treat it that way and offer an opt-out (Section 7).

The tracker never runs in the home file, the agent workspace, sign-in, sign-up, claim or account pages, or in the KeptHaven iPhone and Android apps, and it never receives anything from your account, home record, or home file. It does not run if your browser sends a Global Privacy Control signal, or after you opt out.

RecipientWhat they receivePurpose
Cloud hosting and database providersAll categories, encryptedOperate the Service
AI service providersThe specific text or image you submit to an AI featureGenerate the response. Prohibited from training on it, and from retaining it beyond what is needed to process the request and any short abuse-monitoring period their enterprise terms define.
Email and messaging providersIdentifiers and message contentDeliver communications you asked for
Payment processor (Stripe and its Link service)Name, email, billing address and payment details you enter at checkoutSell and bill paid plans. Link is the merchant of record for them, calculates sales tax, and handles payment support, so Link's own privacy policy also applies to that information.
Apple (App Store)Your purchase of a subscription bought inside the iPhone app, and whether it is still activeSell and bill that subscription. Apple is the seller for it, takes the payment through your Apple Account and handles refunds and cancellation, so Apple's own privacy policy applies to what you give Apple. We never receive your card details from Apple — only a subscription identifier, the renewal date and the status.
Property data providersProperty address onlyRetrieve public records for your home
Analytics and error monitoringInternet activity, device informationDiagnose problems and measure performance
Apollo.io and LiveIntent (public marketing pages only)Pages viewed on our marketing website, referrer, campaign tags, a browser identifier, IP address, and a hashed email address LiveIntent associates with your browserIdentify companies and people visiting our marketing website, for our sales outreach. Counts as "sharing"; you can opt out (Section 7).
Email hosting (Google Workspace)Name, email, and the contents of any message you send to our support, privacy or legal inboxesAnswer your requests
Mapping providerProperty address and coordinatesRender maps and imagery
Web search provider (appliance manuals)The brand and model number of an appliance in your home file, nothing elseFind the manufacturer's owner's manual so the assistant can answer from it
Your brokerage and agentThe limited information in Section 4.2 of the Terms: how you use your home file while activity sharing is on (never the contents of your documents or your questions to the assistant), and anything you send your agent through the Service; any item you share with them; and any item they placed in your home file themselvesOperate the branded home file you were invited to, and deliver what you send your agent
AdvertisersNothing about you. See Section 6.—
Professional advisors in a corporate transactionAs required, under confidentialityDiligence and transfer
Law enforcement or courtsAs legally requiredRespond to valid legal process

Current providers are listed at /privacy#subprocessors.

We have no actual knowledge that we sell or share the personal information of consumers under 16. The Service is not offered to anyone under 18.

When we receive legal process we require it to be valid, interpret requests narrowly, and — unless prohibited — notify you before disclosing so you can object.


6. Advertising

How advertising works here. Advertisers pay a fixed fee to appear in the Service. Placements are chosen by geography and by the general category of the page you are on. We do not use the contents of your documents, your photographs, your inventory, or your conversations with the assistant to select or target advertisements for you.

What advertisers receive from us: nothing about you. They do not receive your name, contact details, address, documents, or any figure drawn from them. They are not told which homeowners saw their advertisement. If you choose to contact an advertiser, you decide what to send them, and your dealings from that point are with them.


7. Your choices and rights

We honor these requests from everyone, wherever you live.

RightWhat it means
Know and accessThe categories and specific pieces of information we hold about you, its sources, why we collected it, and who received it
CorrectFix information that is wrong
DeleteDelete your information, subject to the narrow exceptions in Section 8
ExportReceive your records in a common machine-readable format
Opt out of sale or sharingStop the Apollo website tracker described in Section 5. This is the only sale or sharing we do.
Withdraw permissionTurn off any marketing communication or optional use, individually
No retaliationWe will not deny you service, charge you differently, or reduce your service quality for exercising any of these

How to make a request

RequestHowVerificationOur deadline
Know, correct, delete, exportAccount → Privacy & Communications, or /account, or privacy@kepthaven.comYes — sign in, or if you have no account, we match information you provideAcknowledge within 10 business days; respond within 45 calendar days, extendable once by 45 days with notice and a reason
Opt out of marketing, withdraw permissionAccount → Privacy & Communications, use an unsubscribe link, or call 931-614-5094None. We will never ask you to prove who you are in order to stop contacting you.10 business days, generally immediate
Opt out of sale or sharingUse Your privacy choices at the foot of this page (also linked from every page footer), or write to privacy@kepthaven.com. If your browser sends a Global Privacy Control signal, the tracker never loads and we treat the signal as an opt-out automatically; signed-in members also see a receipt in Account → Privacy & Communications.NoneImmediate in your browser; within 15 business days for a written request

Someone can act for you. For access, correction, and deletion we may ask for written permission signed by you and may ask you to confirm your identity directly. For opt-out requests we will not ask for proof of authorization.

Cost. We do not charge for privacy requests. If a request is manifestly unfounded or excessive we may decline it or charge a reasonable fee, and we will tell you why. We never charge for an opt-out or withdrawal.

If we deny a request, you can appeal. We will tell you why and how. To appeal, reply to our denial or write to privacy@kepthaven.com with the subject "Appeal." Someone not involved in the original decision will review it and respond within 45 days with our decision and reasons. If we deny the appeal, we will give you contact information for your state Attorney General.


8. Retention and deletion

We keep information for the periods in Section 1. Identifiers held in our internal usage and engagement logs are anonymised after 24 months, even while your account stays open. Records held only to support your data export are deleted 7 days after the export is built. Rate-limit records used to stop abuse are deleted after 24 hours.

When you delete your account, we remove your sign-in, your personal details, and your files immediately. Deleted rows can persist in our database provider's backups until those backups roll off, within 30 days. Daily backups are kept for 7 days on our current plan, and we are enabling point-in-time recovery. We keep no separate archive of deleted data.

What we keep afterward. This list is complete:

WhatWhyHow long
Permission records — the type, timestamp, the exact text you agreed to, and any withdrawalTo show we had your permission and honored your withdrawal6 years from the last message sent in reliance on it, or if no message was ever sent, 6 years from the date of the record
Privacy request records, recorded in our privacy event log: date, type, how it was made, our responseRequired by law, and our proof that we answered you24 months
Which versions of our Terms and this Policy you acceptedTo show what agreement applied and when6 years after your account closes
Transaction and tax recordsLegal obligation7 years
Security and abuse recordsDetect and prevent recurrenceOur staff access log and security event log are append-only and are kept for as long as the Service operates; they are never edited or deleted by the application. Rate-limit records are kept for 24 hours, and blocked-address records for as long as the address is blocked.
De-identified home history: the vendor companies, service kinds, dates, and warranty and association facts about the home, with no cost, contact, or owner informationSo the next owner's file, and your brokerage, keep the home's service history without any of yoursKept with the home for as long as a brokerage on KeptHaven serves it
Operational measurements — usage counts, feature-level engagement, performance data, stripped of identifiers and not reasonably linkable to youUnderstand and improve the ServiceIndefinitely, in non-identifiable form only
The published text of our legal documents — contains nothing about youSo we can always show what was published whenIndefinitely
Anything covered by a legal hold or court orderLegal obligationAs required

We do not use any of these for marketing or for any purpose other than the one stated.


9. Security

We protect your information with encryption in transit and at rest, a distinct encryption key per brokerage for document and photograph storage, least-privilege access controls, logging of every staff and staff-of-your-brokerage access to document contents, multi-factor authentication for administrative access, and regular review of our providers.

No system is perfectly secure. If a breach affects your personal information we will notify you as required by law and as promptly as we can, and tell you what happened, what was involved, and what we are doing about it.

Security questions or vulnerability reports: legal@kepthaven.com.


10. Children

The Service is not offered to anyone under 18 and we do not knowingly collect information from anyone under 18. If you believe a minor has given us information, write to privacy@kepthaven.com and we will delete it.


11. Where we operate

KeptHaven is offered to residents of the United States. We do not offer the Service to individuals in the European Union, the United Kingdom, or Canada, and we do not market there. We do not direct the Service to, or offer it in, those territories, and we do not intend to be subject to the EU General Data Protection Regulation.

We have adopted several practices modeled on it as internal design standards, because they are the right way to run a service holding records about someone's home:

We describe these as our practices. We do not claim certification or compliant status under any privacy framework.


12. Changes

We review and re-publish this policy at least once every twelve months. For any material change we will give you at least 30 days' notice by email and in the Service before it takes effect, and summarize what changed at the top. We will not apply a materially different use to information we already hold without that notice and, where required, your permission.


13. Contact

Privacy questions and requests: privacy@kepthaven.com
Mail: KeptHaven LLC, Attn: Privacy, KeptHaven LLC, Saint Augustine, FL 32080

Phone: 931-614-5094

Privacy contact: Steven Bell, Authorized Member

If you need this policy in an alternative accessible format, write to privacy@kepthaven.com.

Your privacy choices

Our public marketing pages use Apollo's website tracker, described in Section 5. Opting out stops it in this browser. It does not need an account, and it does not change anything else.

Subprocessors

This page is public, at /privacy#subprocessors, and is referenced by the Privacy Policy and the Terms of Service.

Last updated: October 16, 2026


About this page

We use the companies below to help operate KeptHaven. Each is contractually required to protect your information at least as well as we do, to use it only to perform the service we engaged them for, and — where they touch content you upload — not to train any AI model on it or retain it beyond what the request requires.

Stripe's Link service, as the merchant of record for paid plans, also handles the payment details you give it under its own privacy policy.

Some rows below are federal and state government data services (county and state property records, weather alerts, disaster declarations). They are not contracted vendors, we send them nothing about your account beyond a property address or coordinates, and they never receive your name, contact details, or documents. We list them here anyway, for completeness.

We give brokerage customers at least 30 days' notice before adding a subprocessor that will process their data.


Current subprocessors

CompanyWhat they doData they processLocation
SupabaseDatabase, authentication, file storageAll categories, encrypted at restUnited States
RailwayRuns the applicationData in transit through the applicationUnited States
AnthropicAI model provider for the KeptHaven assistant, document extraction, and image analysisFor extraction, the document or photo you submit. For the assistant, your message and the parts of your home file that relate to it. Kept for the request and any short abuse-monitoring period their enterprise terms defineUnited States
ResendDelivers email, and receives email forwarded to a home's ingest addressName, email address, message content, attachments you forward, delivery and engagement eventsUnited States
StripeProcesses agent subscription payments. Its Link service is the merchant of record for paid plans and calculates sales taxName, email, billing address, payment token. We do not store full card numbers.United States
ATTOMSupplies county records, valuation, tax, and permit historyProperty address onlyUnited States
PermitStackSupplies building-permit historyProperty address onlyUnited States
RentCastSupplies property records and valuation estimatesProperty address onlyUnited States
US Census Bureau GeocoderTurns a street address into coordinates and countyProperty address onlyUnited States (federal)
Florida Department of Revenue, statewide property roll (ArcGIS) and public sale data filesSupplies the parcel record for Florida homes: parcel id, owner of record, situs address, legal description, year built, living area, lot size, assessed, land and taxable values, whether the roll shows a homestead exemption, and recorded sales. The sale data files are downloaded a county at a time; nothing about a home is sent to get themStreet number and street name of the property; coordinatesUnited States
Tennessee Comptroller statewide parcels; Metro Nashville GIS; Montgomery County TN GISSupplies the parcel record for Tennessee homesStreet number and street name; coordinatesUnited States
Boone County / City of Columbia, Missouri GISSupplies the parcel record for Boone County, Missouri homesStreet number and street name; coordinatesUnited States
New York State ITS Geospatial Services (statewide tax parcel centroids, ArcGIS)Supplies the parcel record for New York homes: parcel id, owner of record, situs address, year built, living area, bedrooms and full baths, lot size, assessed, land and full market values, and what the assessment roll files about the house (building style, heating and its fuel, water, sewer, utilities, school district)Street number of the property; coordinatesUnited States
Metropolitan Council, MetroGIS Regional Parcel Dataset (ArcGIS)Supplies the parcel record for homes in the seven Twin Cities counties of Minnesota (Anoka, Carver, Dakota, Hennepin, Ramsey, Scott and Washington): parcel id, owner of record where the county publishes one, situs address, year built, finished living area, lot size, estimated market and land values, the last sale, homestead classification, the property tax billed, and what the record files about the house (dwelling type, style, heating, cooling, garage, basement, city, watershed district)Street number of the property; coordinatesUnited States
Utah Geospatial Resource Center (UGRC), county assessor Land Information Records (ArcGIS)Supplies the parcel record for Utah homes, one layer per county for all 29 counties: parcel id, situs address, year built, the primary building's square footage, lot size, market and land values, property class and the count of buildings. Utah's record carries no owner name and no saleStreet number of the property; coordinatesUnited States
Wisconsin State Cartographer's Office and Department of Administration, Statewide Parcel Map (ArcGIS)Supplies the parcel record for Wisconsin homes, all 72 counties: parcel id, owner of record, situs address, lot size, assessed, land and estimated fair market values, the net property tax and its roll year, the municipality and the school district. The statewide record carries no year built, living area or saleStreet number of the property; coordinatesUnited States
National Weather Service (api.weather.gov)Supplies active weather alerts for the home's locationCoordinates rounded to four decimal places (about 10 meters); no name or account identifiersUnited States (federal)
FEMA (OpenFEMA and the National Flood Hazard Layer)Supplies federal disaster declarations for the home's county and the flood zone for the home's coordinatesState and county only; coordinatesUnited States (federal)
Google Maps Platform (Street View Static API)Supplies a Street View photograph of the home's exteriorCoordinates of the home onlyUnited States
MapboxAddress typeahead suggestions during signup, and satellite imageryThe address fragment you type during signup; coordinatesUnited States
Tavily, or Brave Software (Brave Search API), whichever is configuredWeb search used once per appliance model to find the manufacturer's owner's manual, so Ask My Home can answer from it, and, when you ask where to buy a replacement part, one search of amazon.com for that part number. In service since 2026-10-13; the part search from 2026-10-16The brand and model number of an appliance recorded in a home file, or a part number from its manual. No address, no name, no serial number, no account identifierUnited States
SentryDiagnoses application errorsTechnical logs, device and browser information, user ID; request bodies and cookies are stripped before sendingUnited States
Firebase Cloud Messaging (Google)Delivers push notifications to the installed Android appDevice push token, notification contentUnited States
Apple Push Notification service (Apple)Delivers push notifications to the installed iPhone app. Effective 2026-10-14 (notice posted 2026-09-14, below)Device push token, notification contentUnited States
Apple (App Store)Sells and bills an agent seat bought inside the iPhone app, where Apple is the seller. We receive a subscription identifier, its renewal date and its status; never card detailsSubscription identifier, renewal date, statusUnited States
Google WorkspaceHosts our support, privacy and legal inboxesYour name, email address, and the contents of any message you send usUnited States

AI providers, specifically

Because this is the question people actually ask:

We use third-party AI providers to run the KeptHaven assistant, extract information from documents you upload, and identify items in photos you upload.

Our agreements with these providers require that:

  • your content is used only to generate the response to your request;
  • your content is not used to train, fine-tune, or improve their models;
  • your content is not retained beyond what is necessary to process the request and any short abuse-monitoring window their enterprise terms define; and
  • your content is not disclosed to anyone else.

We do not use your documents, photographs, or conversations to train any AI model, ours or anyone else's.


What is deliberately not on this list

No advertising networks. No retargeting. No tags of any kind in the home file, the agent workspace, your account, or our apps. Nothing in your account, home record, or home file is sold or shared.

One exception, on our public marketing website only. Since 2026-09-30 the marketing pages load Apollo.io's website tracker, which in turn loads LiveIntent's identity script. Together they tell us which companies, and in the United States which people, visit those pages. They are not subprocessors: they process no customer data on our behalf, and they use what they collect under their own privacy policies. The Privacy Policy, Section 5, says exactly what they receive, and you can opt out in one click under Your privacy choices on the same page.

Advertisers who appear in KeptHaven are not subprocessors. They receive nothing about you.


Changes to this list

We publish changes here before they take effect. Brokerage customers receive at least 30 days' notice and may object on reasonable data-protection grounds by writing to privacy@kepthaven.com.

Listed 2026-10-16: the web search provider already on the list (Tavily, or Brave) gains a second use: when you ask Ask My Home where to buy a replacement part named in an appliance manual, it runs one search of amazon.com for that part number. The part number and the appliance model are all that are sent. The links it returns open Amazon in your own browser; we send Amazon nothing. The same row is brought up to date: the manual search has been in service since 2026-10-13.

Notice posted 2026-09-14, effective 2026-10-14: Apple Push Notification service joins the list so the KeptHaven iPhone app can deliver maintenance reminders, alerts and notes from your agent. It receives the device's push token and the text of each notification, nothing else. Until the effective date, iPhone notifications are limited to KeptHaven's own accounts.

Listed 2026-09-29, second edit: two more government property-record services join the list: the Utah Geospatial Resource Center's county assessor Land Information Records (one layer for each of Utah's 29 counties), and Wisconsin's Statewide Parcel Map, published by the State Cartographer's Office with the Department of Administration. They are public data services, not contracted vendors. For a home in Utah or Wisconsin we send the property's street number and coordinates, and nothing about your account. Both are read from the day this edit is published; neither was read before it.

Listed 2026-09-29: two government property-record services join the list: New York State ITS Geospatial Services, and the Metropolitan Council's MetroGIS Regional Parcel Dataset for the seven Twin Cities counties of Minnesota. They are public data services, not contracted vendors. For a home in New York or in those counties we send the property's street number and coordinates, and nothing about your account. The Minnesota service has been read since 2026-09-28 and the New York service since 2026-09-29. The Florida row is brought up to date in the same edit: it now names the homestead exemption, the taxable value, the legal description and the public sale data files, all from the Florida Department of Revenue, which was already on the list.

Disclosed 2026-09-30: the marketing website begins loading Apollo.io's website tracker and LiveIntent's identity script, on public marketing pages only, never in the home file, the agent workspace, account pages or the apps. They are not subprocessors and receive no customer data; the section above is updated to say so, and the Privacy Policy gains an opt-out.

To be notified of changes, email privacy@kepthaven.com with the subject "Subprocessor Updates."


Privacy Policy · KeptHaven