Privacy Policy

Businesses and River Haven

When you buy from or book with a business on River Haven, that business decides what it asks you for and how it uses it, and it can see your client record. River Haven stores and processes that record for the business, to provide River Haven to it, and doesn't use it for its own marketing. Questions about how a business uses your information go to that business; we'll help it answer them.

What we collect

From owners and staff

• Name, email address and mobile number, and your role at the business. If you sign in with Apple or Google, we receive the name and email address they share.
• Business details: name, type, address, logo, services, products, prices, schedules, booking policies and staff. When you search for your business, what you type goes to Google Maps, and we keep the listing's place ID. When you look up an address, such as your home address for card payments, what you type goes to Apple Maps. If you ask River Haven to bring in your website, we read its public pages.
• For card payments, the app collects the identity and business details Stripe needs to verify you, such as date of birth, home address, Social Security number or EIN, and ID documents, and sends them to Stripe without keeping them. Your bank is linked in Stripe's own form; River Haven receives the bank name and the last four digits of the account, and your verification status and payouts.
• For sales tax, the states where your business is registered and its permit numbers.
• Plans and text packs are bought through the App Store or Google Play. We receive what you bought and its status, not your payment details.

From clients

• Name, email address and mobile number, given at checkout, booking or check-in, added by the business, or brought over from the software the business used before.
• If you book for a child: the child's name and birth date. If you book for a pet: the details the business asks for, such as your pet's name, breed, behavior and vaccine dates. If the business comes to you: the address where the service happens.
• What you buy and book: purchases, memberships, packs and credits left, bookings, check-ins, tips, refunds and receipts, and how each visit was paid, including visits the business marks as settled outside River Haven.
• Waivers, agreements, booking policies and card-on-file agreements you accept, with the time, the version, your IP address and browser, the phone number you confirmed and, where asked, your typed name.
• Notes the business records to serve you, which can include things you tell it, such as an allergy or the formula for your hair color.
• Card payments are handled by Stripe. River Haven keeps the card brand, last four digits and expiration date so you and the business can recognize the card; we never receive or store full card numbers.
• Your text-message choices for each business (see Text messages below).

From everyone, automatically

• On riverhaven.app and store, checkout, booking and account pages: IP address and browser, recorded with sign-ins, checkouts, payments and agreements to prevent fraud and handle disputes; cookies that keep you signed in to a checkout or account for up to 90 days; Stripe's cookies on checkout, which it uses to prevent fraud; and, when you arrive from a business's Google ad, the ad's click ID.
• When you open a store from a link the business shared, or from Instagram: which link or source brought you, counted in the business's visits without anything that identifies you. If you then buy, your purchase keeps that link or source, so the business can see what each post brought in.
• On our servers: error logs.
• Face ID or a fingerprint, if you use one to unlock the app, stays on your device. River Haven never receives it.

How we use it

• To provide River Haven: stores, checkout, bookings, check-in, client records, payments, refunds, payouts and sales tax.
• To confirm a phone number or email address with a one-time code when you sign in, book or check out.
• To apply each business's booking policy to the bookings made under it.
• To send the messages the service depends on: receipts, booking and payment emails, and the texts you agree to.
• To verify businesses before they take card payments, prevent fraud and abuse, keep accounts secure and handle payment disputes.
• To answer support requests, and to find and fix problems.
• To meet legal, tax and payment-network obligations.

Text messages

If you agree to get text messages about your bookings with a business that uses River Haven, River Haven Ventures LLC sends them from (888) 554-9313. For texts, we use your mobile number and your consent only to send those messages, keep a record of your consent and opt-outs, and answer HELP and STOP requests. The business your texts are about sees in your client record whether its texts are on for you; it can't turn them on for you or send its own texts through River Haven. One-time codes aren't part of these texts: we text one only when you ask for it, to sign in, confirm your number for texts, turn on card payments or change the bank for payouts, sign a personal guarantee, or confirm deleting your account.

We don't sell, rent or share mobile numbers or text-message consent with third parties or affiliates for marketing or promotional purposes. Every category of sharing in this policy excludes text messaging originator opt-in data and consent: this information isn't shared with any third party, except the service providers that deliver the messages (our messaging provider and wireless carriers) and when the law requires it.

The Text Terms explain what we send, how often, and how to stop.

Who we share it with

• The business you buy from or book with, for your record with it. Its owner and the staff it gives access can see that record. If you sign up through the link of a renter who works at a host business, your details and the waiver you sign go to the host.
• Service providers that work for us under contract, only for that work, and that must protect information as this policy does:
  • Stripe, for payments, saved cards, identity verification, payouts and sales tax. Stripe's Privacy Policy explains how Stripe uses information.
  • Google Maps, for finding your business. The Google Privacy Policy applies to that search.
  • Our messaging provider and wireless carriers, for texts and phone codes; our email provider; and our database, server and web hosting providers.
  • Apple, for Sign in with Apple, address search, maps and weather in the app, and purchases in the App Store; and Google, for Sign in with Google, purchases in Google Play, and the fonts on store, checkout and booking pages, which your browser loads from Google.
• Advertising tags a business adds. A business can add its own Google Ads tag to its store and checkout pages to measure its ads. Google then receives information about your visit and purchase under Google's privacy policy. River Haven doesn't add advertising tags of its own.
• When the law requires it, to answer valid legal requests, or to protect people, River Haven or a business from fraud or harm.
• In a sale or merger of River Haven, under this policy's protections.

River Haven doesn't sell personal information or share it for cross-context behavioral advertising.

How long we keep it

• Account and client records: while the account, or the business's account, is open. When an owner deletes a business's account, its records are deleted within 90 days, except the records below.
• Payment, tax and dispute records, and the agreements they rely on: 7 years after the payment.
• Text consent and opt-out records: at least four years after your last text. If you delete your account, the record stays with your number replaced by a one-way code.
• Error logs: up to 90 days.

How we protect it

Information is encrypted in transit and at rest. Each business can see only its own clients and records, and staff see what the owner allows. Turning on card payments and changing the bank for payouts take a code texted to the owner's phone. Card numbers stay with Stripe. If a breach affects your information, we tell you as the law requires.

Your choices and rights

• You can see and correct your details in your account, or ask us for a copy of them, a correction or deletion by emailing support@riverhaven.app or through Delete your account. We confirm it's you first, and answer within 45 days.
• For your record with a business, you can also ask the business. We'll tell it about requests we receive.
• Turn texts off for one business in your account with it, or reply STOP to any River Haven text to stop them for every business.
• Depending on where you live, including California, you have the right to know what personal information we collect, use and disclose, and to have it corrected or deleted. You can use an authorized agent. We won't treat you differently for asking. If we turn down a request, reply to our answer and we'll review it again.
• We don't sell or share personal information, so there's nothing to opt out of. We treat a browser's Global Privacy Control signal as a request not to sell or share.

Children

River Haven isn't for children to use themselves, and we don't knowingly collect personal information directly from a child under 13. A parent or legal guardian can add a child to their account to book, buy and sign for them, under the Guardian Consent. The child's name, birth date and bookings are part of the parent's account and the child's record with the business. The parent can see, correct or delete them, and children don't get their own sign-in. If we learn we collected a child's information any other way, we delete it.

Where River Haven operates

River Haven serves businesses in the United States, and stores information in the United States.

Changes

When we change this policy, we update the date at the top. If a change affects how we use information you've already given us, we'll tell you by email or in the app before it applies.

Contact

River Haven Ventures LLC, 15 Lilac, Lake Forest, CA 92630, support@riverhaven.app