Legal

Privacy Policy

Effective October 9, 2026

3Haystack is operated by Haversham Enterprises ("3Haystack," "we," "us," or "our"). This policy explains how we collect, use, disclose, and retain information when you visit haystackorigins.com or use the 3Haystack service.

Information we collect

• Account information, such as your name, email address, authentication details, and preferences.
• Content you choose to enter, including venture ideas, answers, notes, tasks, analyses, uploaded files, and other workspace information.
• Subscription and transaction information when paid enrollment is available. Payment processors handle complete payment-card details; we do not store complete card numbers.
• Technical and usage information, such as device and browser type, IP address, timestamps, diagnostic events, security logs, pages viewed, referring website, and interactions with the service. We use an IP address briefly to estimate country and state or region and to limit abusive traffic; the sales-site analytics record does not retain the raw IP address.
• Messages and other information you provide when contacting support.

How we use information

We use information to:

• provide, personalize, synchronize, maintain, and secure the service;
• process requested AI-assisted features and return their results;
• manage accounts, subscriptions, support requests, and service communications;
• diagnose problems, prevent abuse, and improve reliability and product performance; and
• comply with law and enforce our agreements.

AI-assisted features

Before your first AI-assisted request, we ask for permission to share the relevant instructions, venture details, saved answers, and profile information with Google's Vertex AI service to generate your requested result. Your permission is saved for your account. We limit the context sent to what the feature needs. You can use 3Haystack without AI assistance. Your content isn't used to train Google's AI models. You can turn off AI sharing in Settings under AI assistance. This stops new AI requests; requests already sent may finish. Do not enter information you do not have the right to use or information you do not want processed for that request.

How we disclose information

We disclose information to service providers that help us operate the product, including cloud hosting, authentication, storage, support, security, AI processing, and payment processing providers. We may also disclose information when required by law, to protect users or the service, in connection with a business transaction, or with your direction or consent. We do not sell personal information or use it for third-party targeted advertising.

We require third parties with whom we share personal information to provide protection at least equivalent to the protections described in this policy and required by Apple's App Review Guidelines. Service providers processing information on our behalf are subject to confidentiality, security, and data-use restrictions under their applicable service terms.

Retention and deletion

We retain information while your account is active and as reasonably needed to provide the service, meet legal obligations, resolve disputes, prevent fraud, and enforce agreements. You can request account deletion in Settings. The standard option pauses your workspace and provides a 72-hour recovery window. Sign back in and choose Recover account before the displayed deadline to cancel deletion. After that deadline, recovery ends and scheduled permanent deletion proceeds; temporary service failures may require cleanup retries. You can also choose permanent deletion immediately, without recovery. We retain only information reasonably needed for legal, security, fraud-prevention, transaction, or backup obligations. Future Stripe subscription renewals are stopped when the deletion request is prepared; recovering your account does not restart billing. Your Stripe customer record is retained until permanent cleanup. A private deletion-confirmation page lets you check when cleanup completes and is available for up to 30 days after the recovery deadline. Deleting your 3Haystack account does not cancel an Apple subscription; manage that subscription in Apple's subscription settings.

Detailed sales-site traffic events are scheduled for deletion after 30 days. We retain de-identified daily and monthly totals for longer-term trend reporting. These totals do not contain a visitor identifier, raw IP address, precise location, or the content of information entered into the service.

Security

We use administrative, technical, and organizational safeguards designed to protect information. No system can guarantee absolute security. See our Security page for more information.

Your choices and rights

You may update account information through the service and may ask us to access, correct, or delete personal information by contacting us. We will respond as required by applicable law and may need to verify your identity. You can control renewal of a paid membership as described in our Refund and Cancellation Policy.

Children and geographic availability

3Haystack is intended for adults and is not directed to children under 18. Initial availability is limited to the United States.

Changes to this policy

We may update this policy as the service changes. We will post the updated policy and change the effective date. When required, we will provide additional notice.

Contact us