What we do What it answers How it works Questions Book a free demo

Privacy Policy

Last updated: 20 August 2026

In short. We collect the minimum we need to answer enquiries and run the assistants we build. We do not sell data, we do not share it with advertisers, and a business's customer conversations belong to that business, not to us.

This policy explains how Vanta Haven ("we", "us") handles personal data. It covers two different groups of people, and it is worth separating them clearly:

  • Visitors and enquirers: people who use this website or contact us
  • Customers of our clients: people who message a business whose WhatsApp assistant we operate

1 · Who we are

Vanta Haven is a business registered in the Republic of Maldives, based in Malé, providing automated customer-messaging assistants and websites to small businesses. For any privacy question, contact vantahaven@gmail.com.

2 · Visitors and enquirers

What we collect

  • What you type into our contact form: your name, business name, WhatsApp number, and anything you write in the message field
  • Any message you send us directly by WhatsApp or email

This website does not use advertising cookies, tracking pixels, or third-party analytics. We do not build profiles of visitors. Fonts and every other asset are served from this site itself, so opening a page here sends nothing to any other company — not even a request for a typeface.

One thing is kept on your device: if you use the light/dark switch, your choice is stored in your browser's local storage so the site remembers it on your next visit. This never leaves your device and you can clear it through your browser settings at any time.

Why we collect it

Solely to respond to your enquiry and, if you become a client, to provide the service. Nothing else.

How long we keep it

Enquiries that don't become clients are deleted within 12 months. Client records are kept for the duration of the relationship and for a reasonable period afterwards for accounting purposes.

3 · Customers of our clients

When we operate a WhatsApp assistant for a business, messages from that business's customers pass through our systems so the assistant can read and answer them.

What passes through

  • The customer's WhatsApp phone number
  • The content of their messages and our assistant's replies
  • The time of the conversation

How it is used

  • To answer the customer: the message is sent to an AI language model provider together with the business's own information, and the reply is returned
  • To improve that business's assistant: we review conversations the assistant could not answer, so gaps can be filled
  • To report to the business: aggregate counts, such as how many questions were answered

What we do not do

  • We do not sell or rent conversation data to anyone
  • We do not use one client's conversations to benefit another client
  • We do not use conversation content to train AI models
  • We do not contact a business's customers ourselves for our own purposes

Who the data belongs to

The business is the owner of its customer conversations. We process that data on their behalf and under their instructions. If a client ends their service with us, their conversation data is deleted on request.

4 · Third parties we rely on

Delivering the service requires a small number of providers, each of which handles data under its own terms:

  • Meta Platforms: WhatsApp message delivery
  • An AI language model provider: generating the assistant's replies
  • A hosting provider: running the service and storing data

We choose providers that offer reasonable security and confidentiality commitments, and we share only what is necessary for the service to function.

5 · Security

Access to client data is restricted to the people who need it to run the service. Credentials are stored securely and connections are encrypted in transit. We will tell any affected client promptly if we become aware of a breach involving their data.

We are a small business, not a bank. We take security seriously and we would rather state that plainly than imply protections we cannot guarantee.

6 · Your rights

You may ask us to:

  • tell you what personal data we hold about you
  • correct anything inaccurate
  • delete your data, where we are not required to keep it
  • stop contacting you

Email vantahaven@gmail.com and we will respond within 30 days. If your request concerns a conversation with a business we work for, we may need to refer you to that business, since the data is theirs.

7 · Children

Our services are provided to businesses and are not directed at children. We do not knowingly collect data from anyone under 18.

8 · Changes

If this policy changes we will update the date at the top of this page. Material changes affecting existing clients will be communicated to them directly.

9 · Contact

Vanta Haven
Malé, Republic of Maldives
vantahaven@gmail.com