Privacy policy

Last updated: May 10, 2026

Haven CPAP (“Haven,” “we,” “us”) operates this site and the related subscription service for CPAP supplies. This document explains what we collect, what we do with it, and what we don’t do.

What we collect

We collect information you give us directly: name, shipping address, email, phone number, payment details, and the machine and mask data you provide in the Mask Finder. We also collect basic usage data — pages visited, items added to cart, referral source — to make the site work and improve it over time.

What we don’t collect

We don’t collect protected health information beyond the machine and mask data you voluntarily share. We don’t collect therapy data, sleep study results, or insurance information.

How we use it

• To process orders and ship products to you.
• To match products to your machine in the Mask Finder.
• To send you order updates and, with consent, occasional educational and cadence reminder emails.
• To respond when you write to us.

Who we share it with

A small number of service providers help us run the business — Stripe for payments, Resend for email delivery, Vercel for hosting, Supabase for data storage. Each is bound by contract to use your data only to provide their service to us.

We do not sell your data. We do not share it with advertisers or data brokers.

Your rights

You can access, correct, export, or delete your account data any time from your account page or by emailing privacy@havencpap.com. We respond to requests within 30 days.

Retention

Order records are kept for 7 years for tax and warranty purposes. Marketing email lists are pruned annually for inactive subscribers. Account data is deleted on request, except where retention is legally required.

Cookies

We use a small number of essential cookies (cart state, authentication) and one analytics cookie (Vercel Analytics, which does not track you across sites). We do not use advertising cookies.

Contact

Questions: privacy@havencpap.com. We reply within 12 hours.