How the Havn assistant handles your information, including the email, calendar and files you connect to it.
Havn is operated by PM Tech Consulting Inc., an Ontario, Canada company. This policy covers the Havn assistant: the software, the accounts you connect to it, and the servers we run for customers. The website privacy notice covers this website. If you have a customer agreement with us, its privacy terms also apply, and where they say more, they take precedence.
Your Havn assistant runs on your own computer, or on a server we set up for you alone and never share with another customer. Your email, calendar, files, conversations and the assistant's memory stay there. We don't keep a copy, we don't have a database of them, and we don't sell or share them. Your assistant reads your accounts to do what you ask, and only you decide what it sends.
You can connect your Google account (Gmail, Google Calendar and Google Drive) or your Microsoft account (Outlook mail and calendar) so your assistant can work with them. Connecting is your choice, and you approve exactly what it may access on the Google or Microsoft sign-in screen.
What your assistant accesses. Depending on what you approve: your email messages and their contents, your calendar events, the files you open with it or create through it, and your name and email address so it knows which account is connected.
What it does with it. Only the things you use it for: finding and summarising email, telling you what needs a reply, drafting replies and new messages, sending a message after you approve it, checking and adding calendar events, and working with your files. If you ask for something on a schedule, such as a morning briefing, it reads your accounts at that time to prepare it.
Where it is stored. The sign-in tokens that let your assistant reach your account are kept in an encrypted vault on your assistant's own computer or server. They are not stored on any other Havn system. Email, calendar and file contents are read when needed. Your assistant may keep notes in its memory on that same machine, such as a reminder you asked for or a fact about a client, and you can ask it to forget them.
Signing in. When you connect an account, the sign-in may pass through our connection service at connect.gethavn.ai, which hands it to your assistant and keeps no copy of your tokens or your data. It records only that a connection took place.
To answer you, your assistant sends the relevant part of your request, which can include email, calendar or file content, to the AI model that powers it. That is either an AI provider you chose with your own account (such as Anthropic, OpenAI or Google), or, on a plan where we supply the AI, Anthropic under our account. Content goes to that provider only to produce the answer you asked for, under that provider's terms for business use, which do not use it to train their models.
We don't sell your information, or use it for advertising.
We don't use your email, calendar or file data, or any other information from Google or Microsoft, to train or improve AI or machine-learning models, ours or anyone else's.
We don't read your email, calendar, files or conversations. If you ask us for help and show us something, or send it in a support request, we use it only to fix your problem.
We don't move your data to any other service except your AI provider, as described above, and services you tell your assistant to use.
Havn's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, Google user data is used only to provide and improve the features you use in your assistant, is transferred only as needed to provide them (to your AI provider, as described above), is never used to serve advertising, and is never read by a person unless you ask us to and agree, it is needed for security or to comply with the law, or it has been aggregated and anonymised for internal operations.
If we host your assistant, it runs on a server dedicated to you. We keep administrative access to that server so we can patch, monitor, back up and repair it, and we use that access only for those purposes or when you ask. Backups of the server are kept by our hosting provider for a short rolling period. When your service ends, we give you a copy of your data if you ask within 30 days, then erase the server and its backups.
You can disconnect an account at any time by asking your assistant, or from your Google account permissions or Microsoft app permissions page. Once disconnected, your assistant can no longer reach that account. When you disconnect by asking your assistant, it also deletes the stored sign-in token. To have everything deleted, including what your assistant remembers, uninstall it, or for a hosted assistant, write to us and we'll erase the server.
Sign-in tokens and keys are encrypted at rest. Hosted servers accept only key-based administrator logins, block all inbound traffic except what the assistant needs, and install security updates automatically. No system is perfectly secure. If a breach creates a real risk of significant harm, we will tell you and the regulators the law requires.
You can ask what we hold about you, correct it, or have it deleted. Write to privacy@gethavn.ai, and we'll answer within 30 days. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
If we change this policy, we'll update it here and change the date below. If a change affects how we handle data from your connected accounts, we'll tell you before it takes effect.
Last updated October 13, 2026.