Legal
Owner Advisor Security and Data Practices Statement
This Security and Data Practices Statement explains, in plain language, how Haven Meridian, Inc. ("Haven," "we," "us," or "our") intends to protect information connected to owner-advisor.com ("OwnerAdvisor"). This statement is not a guarantee of perfect security. It should be read together with our Terms of Use and Privacy Policy.
1. Our Security Approach
OwnerAdvisor may collect business information, intake answers, report inputs, account data, billing records, usage data, affiliate/referral information, and other information needed to operate the service.
We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, misuse, loss, alteration, or disclosure.
No website, software system, cloud service, AI system, or internet transmission can be guaranteed to be completely secure.
2. Types of Safeguards We May Use
Depending on the product stage and systems in use, safeguards may include:
- reputable hosting and cloud infrastructure providers;
- access controls for internal tools;
- password-protected accounts;
- encryption in transit via HTTPS/TLS for web and API communications;
- payment processing through third-party payment processors rather than storing full card numbers ourselves;
- role-based or limited access to customer information;
- logging, monitoring, or audit records;
- backups and recovery practices;
- security review for higher-risk systems;
- vendor review where practical;
- separation of customer data where the product architecture supports it;
- human review for sensitive security, billing, data, or permission-related changes.
3. Payment Data
We intend to use third-party payment processors for payment transactions. We do not intend to store full payment card numbers on Haven-owned systems.
Payment processors may collect and process payment information under their own terms and privacy policies.
4. AI and Data Processing
Some OwnerAdvisor services may use AI systems, automation, structured analysis, or third-party model providers.
Information submitted to OwnerAdvisor may be processed to generate reports, summaries, recommendations, follow-up questions, or other outputs. We may also use logs and outputs for quality assurance, debugging, product improvement, safety monitoring, and support.
We aim to avoid collecting unnecessary sensitive personal information. Users should not submit sensitive information unless specifically requested and necessary for the service.
5. Account and Memory Data
Future Owner Advisor products may preserve business context, reports, memory, profile facts, prior recommendations, assumptions, and other information to provide continuity over time.
We intend to design memory systems so that customer data is not intentionally shared across unrelated customers and so that corrected, stale, or invalidated information can be handled appropriately.
However, no memory or AI system is perfect. Users remain responsible for reviewing outputs and correcting inaccurate information.
6. Customer Responsibilities
You are responsible for:
- using a secure email account;
- protecting your account credentials;
- choosing strong passwords where applicable;
- not sharing login credentials;
- limiting the sensitive information you submit;
- reviewing outputs for accuracy;
- notifying us promptly if you suspect unauthorized access.
7. Vendors and Subprocessors
We may use third-party vendors and service providers for hosting, analytics, payments, AI/model processing, email, forms, support, security, affiliate tracking, and other business operations.
A vendor/subprocessor list may be maintained separately or included in the Privacy Policy as the product matures.
8. Security Incidents
If we become aware of a security incident affecting information we control, we will evaluate the incident and take steps we believe are appropriate under the circumstances, including notice where required by law.
9. Limits of This Statement
This statement is intended to provide a high-level description of security and data practices. It does not create a warranty, guarantee, contractual security commitment, or representation that any specific control will always be used or will prevent all unauthorized access or misuse.
10. Contact
Security or data-practice questions may be sent to:
Haven Meridian, Inc.
4900 Copper Creek Trail
Kannapolis, North Carolina 28081
security@owner-advisor.com
https://owner-advisor.com
10. Security Reviews and Product Maturity
We intend to conduct periodic security reviews of higher-risk systems, vendor practices, account access, payment workflows, database permissions, and AI/data workflows as the product matures. These reviews may include internal checks, contractor review, code review, configuration review, or other reasonable measures appropriate for the product stage.
11. Vendor and Service Provider Information
We may provide additional vendor or subprocessor information where required by law, contract, or a customer's applicable rights. Vendor relationships may change as the product evolves.
12. Security Incidents
If we become aware of a security incident that may affect your information, we will investigate and take steps we believe are reasonable under the circumstances, including notifying affected users and applicable authorities where required by law. We will document the incident and our response where appropriate. We do not guarantee that we will detect all incidents.