Privacy Policy

2.1 Information You Provide Directly

• Email address — used for authentication and account recovery
• Username and display name — shown to other users
• Profile avatar — if you choose to set one
• Messages and content — text messages, reactions, and file attachments you send in channels and direct messages
• Report submissions — if you file a report, the content of that report including any message context captured at the time of submission
• Voice session participation — who is in a voice channel and when (not audio recordings)

2.2 Information Collected Automatically

• Authentication data — login timestamps and session tokens, managed by Supabase Auth
• Push notification subscription data — your device push endpoint, user agent, platform, and an anonymous installation identifier, used only to deliver notifications you have enabled
• IP addresses — collected and processed by our infrastructure provider (Supabase) as part of normal database and authentication operations. We do not store IP addresses in Haven own application database.

2.3 Information We Do NOT Collect

• We do not record voice or audio from voice channels
• We do not collect payment information — Haven has no paid features at this time
• We do not sell your data to advertisers or third parties
• We do not build advertising profiles

4.1 With Other Users

Your username, avatar, and messages are visible to other members of the servers you join. Your online status and voice channel presence are visible to other members of those servers while you are active.

4.2 With Server Moderators

Server owners and moderators can see reports filed within their server that are designated for server-level review. They do not have access to your direct messages or your activity in other servers.

4.3 With Haven Moderation Staff

Haven Moderation Staff can access reports designated for Haven staff review, escalated reports, and direct message reports. This access is limited to the specific report content and does not include your private messages outside the report context.

4.4 With Service Providers

We use Supabase to host our database, authentication, and real-time infrastructure. Supabase processes data on our behalf and is contractually bound to protect your data. We use Xirsys for WebRTC STUN/TURN services to facilitate voice connections. Voice traffic is relayed through Xirsys servers but is not recorded or stored.

4.5 Legal Requirements

We may disclose your information if required by law, court order, or other valid legal process. We may also disclose information when we believe in good faith that disclosure is necessary to prevent harm, protect the safety of users, or protect the rights of Redrixx.

In cases involving child sexual abuse material (CSAM), we are legally required to report to the National Center for Missing and Exploited Children (NCMEC) and to cooperate fully with law enforcement.

5.1 Active Accounts

We retain your account data for as long as your account is active. Messages and content you post are retained until you or a moderator deletes them, or until your account is deleted.

5.2 Account Deletion

When you delete your account, we immediately and permanently delete your profile, messages, direct messages, reactions, attachments, social connections, and notification preferences. Account deletion is irreversible.

Some data may survive account deletion in limited circumstances:

• Moderation records where you took action (such as bans you issued) may retain a reference indicating a now-deleted user performed the action, to preserve audit trail integrity
• Reports filed about you by others may retain snapshot data captured at the time of the report, even after your account is deleted, as these may be relevant for ongoing moderation or legal matters
• Voice session presence data is ephemeral and is never stored persistently

5.3 Report Retention

Reports filed through Haven are retained indefinitely for audit and legal purposes. Resolved reports are not automatically deleted. If you have concerns about a specific report, contact legal@redrixx.com.

8.1 Access and Correction

You can update your username, avatar, and notification preferences at any time from your account settings.

8.2 Deletion

You can delete your account at any time from your account settings. This permanently and immediately deletes your personal data as described in Section 5.2.

If your account has already been deleted, your personal data has already been removed from our systems. The only data that may persist is anonymized audit trail references and reports filed by other users about your account, which we retain for legal and safety purposes as disclosed in this policy. There is nothing further to fulfill for a deletion request on a deleted account.

8.3 Notification Preferences

You can control notification and sound settings from within Haven. You can disable push notifications at any time.

8.4 Data Requests

To submit a data access, correction, or deletion request, email legal@redrixx.com from the email address associated with your Haven account. Requests submitted from unrecognized addresses cannot be verified and may not be fulfilled. We will respond within 30 days.