Legal
Privacy Policy
Last updated 23 October 2026
This policy explains what personal data Haviland (“we”, “us”) collects when you use our website, join the invite list, or use the Haviland application and its online service; what we do with it; who receives it; and the rights you have. Haviland is based in Israel and is responsible for your personal data as described here. Contact us at legal@haviland.software.
The short version
Your projects stay on your computer. When you ask Haviland for help, the parts of a project needed to answer are sent to our AI provider, Anthropic, to generate the answer. Our own service doesn’t keep that content.
On this website we collect only what you give us, such as your email address when you ask for an invite, plus cookie-free visit statistics.
We don’t sell your data, use it for advertising, or train AI models on it.
You can ask to see, correct or delete your data at any time.
This summary is a reading aid. It isn’t part of the policy.
1. What we collect on this website
Invite requests. Your email address, your name if the form asks for it, and the time you sent the request.
Visit statistics. Which pages are viewed, the referring website, browser and device type and approximate country. Our website provider, Framer, collects these without cookies or persistent identifiers. It hashes your IP address and browser details with a key that is replaced and deleted every day, so the statistics cannot be linked back to you.
Technical data. To show you the website, our website host and the services that deliver its fonts and code process your IP address and browser information. Section 5 names them.
2. What stays on your computer
The Haviland application stores your projects, designs, files, conversation history and project history on your computer. When you speak to Haviland, your voice is turned into text on your computer, and the recording is not sent to us. Spoken replies are produced by your computer. We do not receive any of this, except the parts that are included in a request to the AI model, as section 3 explains.
3. What is sent when Haviland uses its AI model
When you ask Haviland for help, your request and the project context Haviland needs to answer it, such as relevant files, the parts list and earlier messages, are sent to an AI model provided by Anthropic. How they get there depends on how your copy of Haviland is set up:
Through our online service. Your request passes through our service to Anthropic, and the answer passes back. Our service does not store the content of requests or answers. For each request it keeps a usage record: your account ID, the time, a request ID, the model, the outcome and any error code, the number of tokens processed, the number of web searches, the cost and how long the request took. It also keeps your current plan and allowance. It never stores your sign-in token.
Through your own Claude account. If you connect your own Anthropic or Claude account, requests go from your computer to Anthropic under that account, and we do not receive them. Anthropic’s terms and privacy policy for your account apply.
When the AI reads a web page for you, your computer fetches the page directly from that website, which sees your IP address as with any visit. The page’s text is then sent to the AI model as part of your request. Web searches made by the AI go through our service to Anthropic’s search tool, and we keep only the number of searches.
Our online service checks your IP address to apply the location rules in our Terms of Service. It does not store the address, but an IP address can appear in our server’s error logs, which are kept for up to 14 days.
Please do not include health information or other sensitive personal data in your prompts or projects.
4. Accounts and messages
If you create an account, we keep your name, email address, country and sign-in records. A service provider may run sign-in and accounts for us. If you email us, we keep your email address and what you write so that we can reply.
5. Who receives your data
Framer hosts this website, receives invite requests and produces our visit statistics. It processes this data on our behalf.
Google Fonts (Google LLC) delivers the fonts on this website. Google receives your IP address and browser information when the fonts load.
jsDelivr delivers the open-source code library that draws the 3D model on this website. It receives your IP address and browser information.
Anthropic, PBC provides the AI model and receives your requests, project context and answers. For requests that go through our online service, Anthropic processes them on our behalf under its data processing terms and may not use them to train its models, and its current policy is to delete them within 30 days, although it may keep content flagged as breaking its Usage Policy for up to 2 years, and related safety scores for up to 7 years.
DigitalOcean hosts our online service on servers in Frankfurt, Germany, where our usage records and backups are stored.
Our account and email providers run sign-in, accounts and our email for us.
Authorities and advisers. We share data with public authorities where the law requires it, and with professional advisers who are bound by confidentiality.
A successor. If Haviland moves into a company or is acquired, your data passes to that organisation under this policy.
We do not sell your personal data, share it for advertising, or use it to make decisions with legal or similarly significant effects about you based only on automated processing.
6. Why we use your data
To send your invite and updates about the beta, with your consent, which you can withdraw at any time.
To provide the Haviland application and online service you ask for, under our agreement with you.
To keep Haviland secure, prevent abuse, apply usage limits and location rules, and understand how the website is used in aggregate, because we have a legitimate interest in doing so.
To meet our legal obligations, such as tax and accounting rules, and to respond to lawful requests.
No law requires you to give us your data. It is your choice, but without it we cannot send you an invite or provide the online service. You can still use the parts of the Haviland application that work offline.
We do not use your prompts, projects or output to train AI models.
7. International transfers
We are based in Israel, which the European Commission recognises as providing adequate protection for personal data. Our online service runs in Germany, in the European Union. Anthropic and Google process data in the United States, and Framer may use providers outside the European Economic Area. Where data leaves Israel, the EEA or the UK, we rely on safeguards that the law recognises, such as standard contractual clauses.
8. How long we keep your data
Invite requests: until we send your invite, you ask us to remove you, or we stop running the invite list, whichever comes first.
Visit statistics: kept only as aggregated figures. The daily key that hashes visitor details is deleted every day.
Usage records: 13 months from the request, then deleted.
Plan record: until your last usage record is deleted.
Server error logs: up to 14 days.
Backups of our service’s database: up to 30 days.
Account details: while your account is open, then for as long as tax and accounting law requires.
Emails with us: for as long as we need them to handle your message and any follow-up.
9. Your rights
You can ask us to show you the personal data we hold about you and to correct it, and you can make that request in Hebrew, Arabic or English. Depending on where you live, you may also have the right to have your data deleted, to receive a copy of it, to object to or restrict how we use it, and to withdraw your consent at any time. To use any of these rights, email legal@haviland.software. We will reply within one month, or sooner where the law requires it.
You can also complain to Israel’s Privacy Protection Authority, or to the data-protection authority where you live.
Our online service does not keep the content of your requests, so there is no such content for us to return or delete. Usage records and account details can be returned or deleted, subject to tax and accounting law. Deleted records leave our backups within 30 days.
10. Children
There is no minimum age to use Haviland, but accounts for people under 18 are not open yet. We will open them only once Haviland has the additional safety features that younger users need.
If you are under 13, or under the age at which you can consent to online services in your country (up to 16 in some countries), please ask a parent or guardian to request an invite for you, using their own email address. We do not knowingly collect personal data from children under that age without verifiable consent from a parent or guardian. If we learn that we have, we delete it.
We design Haviland to comply with children’s privacy laws, including the US Children’s Online Privacy Protection Act (COPPA) and the GDPR’s rules on children’s consent. A parent or guardian can ask us at legal@haviland.software to review or delete their child’s data.
11. Cookies
This website does not use advertising or tracking cookies. Our visit statistics are collected without cookies. Our website provider may use storage on your device that is strictly necessary to show the website. The Haviland application stores your sign-in token on your computer so that you stay signed in.
12. Security
Traffic between the Haviland application and our online service is encrypted. We keep as little data as we can, and most of it stays on your computer. No system is perfectly secure, so please keep your computer and your sign-in safe, and report any security concern to legal@haviland.software.
13. Changes to this policy
We will update this policy when our practices change, and we will tell you about material changes by email, in the application or on this website before they take effect. The date at the top shows when it last changed.
14. Contact
For any question about privacy, or to use your rights, email legal@haviland.software.