Privacy Policy — Haven

Haven (“we,” “our,” “us”) is a property rental marketplace operating in Bangladesh. This Privacy Policy explains what personal information we collect when you use haven.3okay.com, how we use it, and your rights over it.

1. Information we collect

We collect only the information needed to provide our services:

Account information — name, email address, phone number, password (stored as a one-way hash), profile photo (optional).
Verification information — only what you submit voluntarily for property listing verification (e.g. ownership notes, property photos).
Booking information — properties you save, search queries, bookings you make or receive, reviews.
Payment information — processed by our payment providers (SSLCommerz, bKash). Haven does not store full card numbers.
Technical information — IP address, browser type, operating system, pages visited, collected automatically via standard server logs and cookies.

2. How we use your information

To create and operate your account.
To send you transactional emails — account verification, one-time passwords, password resets, booking confirmations and status updates, security alerts.
To process bookings and payments.
To verify property listings and screen for fraud.
To improve our service and respond to support requests.
To meet legal obligations under Bangladesh law.

We do not sell your personal information to third parties. We do not send marketing emails without explicit consent.

3. Email communications

All emails from no-reply@3okay.com are strictly transactional and triggered by an action you took (signing up, requesting a password reset, completing a booking, etc.). You are added to our email list only by registering an account yourself.

If you no longer want to receive any emails, you can delete your account at any time from your dashboard, or email us at support@3okay.com.

4. Sharing your information

We share information only with:

Property owners — your name, contact phone, and booking details, only after a booking is confirmed.
Payment processors — SSLCommerz and bKash, to process transactions.
Infrastructure providers — AWS (hosting, email delivery via SES), so they can deliver our service.
Government or law enforcement — only when legally required.

5. Data retention

We keep your account information for as long as your account is active. When you delete your account, we remove your personal information within 24 hours, except where we’re required to retain it for legal, accounting, or fraud-prevention purposes.

6. Security

We protect your data with industry-standard practices: HTTPS-only traffic, password hashing, JWT-based session tokens, role-based access controls, and isolated user data per tenant. No system is perfectly secure, but we work continually to keep yours safe.

7. Your rights

You have the right to:

Access the personal information we hold about you.
Correct inaccurate information — do this from your dashboard.
Delete your account and personal information.
Request a copy of your data.

To exercise any of these rights, email us at support@3okay.com.

8. Cookies

We use cookies and local storage to keep you signed in, remember your preferences (language, currency), and understand how the site is used. You can clear them at any time from your browser settings.

9. Children

Haven is not intended for children under 18. We do not knowingly collect personal information from children.

10. Changes to this policy

We’ll update this page when our practices change and revise the date at the top. If the changes are significant, we’ll let you know by email.

11. Contact us

For questions about this policy or your data, email support@3okay.com.