Workflow & Automation · gethevn.comHEVN, inc
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Privacy and data use
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Grants users the right to receive a machine-readable copy of their data for transfer to another service provider, establishing a data portability right.
Discloses that banking and payment processing partners have their own privacy policies that may apply to users' financial products, and that these will be disclosed during onboarding — identifying third-party data sharing relationships with regulated partners.
Defines identity and business verification providers as a category of third-party recipients, specifying that they conduct KYC/KYB checks, identity verification, and sanctions screening, scoping the permissible disclosure to this category for these purposes.
How to read this page: Overall risk rates what HEVN, inc's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 72 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 72 citationsLast captured 2026-07-20
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Introductory description defining the subject matter of the policy — how HEVN collects, uses, and protects personal and business information — establishing the scope of the document's legal obligations.
" How HEVN collects, uses, and protects your personal and business information."
Imposes an obligation on HEVN to process only the minimum personal and business information necessary to provide technology services, facilitate user-authorized transactions, and comply with applicable legal and regulatory requirements — data minimization obligation user-favorable.
" HEVN processes only the minimum personal and business information necessary to provide technology services, facilitate user-authorized transactions, and comply with applicable legal and regulatory requirements."
Discloses that certain information collected (government-issued IDs, financial account details, precise geolocation) may qualify as sensitive personal information under named state privacy laws, and states that such collection is limited to what is strictly necessary for service delivery and legal compliance — characterizes sensitive data scope and limits its use.
" Certain information collected by HEVN — such as government-issued identification numbers, financial account details, and precise geolocation — may be classified as "sensitive personal information" under the California Privacy Rights Act (C..."
Restricts use of sensitive personal information — including government-issued identification numbers and financial account information — to KYC/KYB verification only, prohibits its use for profiling or advertising, requires deletion after verification is complete, and limits sharing to regulated verification providers; collectively protective of the user by narrowly confining how sensitive data may be used and mandating its deletion.
" As described in Section 1, certain transient verification data we collect may be classified as sensitive personal information under the CPRA, including government-issued identification numbers and financial account information. This data i..."
Establishes identity verification as a processing purpose, obligating the use of collected data for KYC and KYB checks as required by applicable regulations, tying the processing to a compliance-driven necessity.
" Identity Verification: To verify your identity and conduct Know Your Customer (KYC) and Know Your Business (KYB) checks as required by applicable regulations"
Defines legitimate interests as a legal basis for processing, specifying fraud prevention, security, service improvement, and business analytics as qualifying interests, and qualifying this basis with a condition that these interests must not override the user's fundamental rights.
" Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, service improvement, and business analytics, provided these interests do not override your fundamental rights"
Restricts HEVN from maintaining long-term storage of identity documents, government-issued IDs, and other sensitive verification materials — user-favorable prohibition on retaining sensitive data.
" We do not maintain long-term storage of identity documents, government-issued IDs, or other sensitive verification materials."
Describes the procedural treatment of transient verification data — collected solely for identity and business verification, transmitted to regulated third-party providers as part of user-initiated account opening, and deleted from HEVN's systems once verification is complete — establishing user-favorable deletion obligations.
" The following information is collected solely for identity and business verification, transmitted to regulated third-party providers as part of the user-initiated account opening process, and deleted from HEVN's systems once verification i..."
Clause A strictly limits sensitive data processing to what is necessary for services or legal obligations, while Clause B permits processing for broader 'legitimate interests' like service improvement and analytics, which may not meet the 'strictly necessary' threshold for sensitive data.
" Certain information collected by HEVN — such as government-issued identification numbers, financial account details, and precise geolocation — may be classified as "sensitive personal information" under the California Privacy Rights Act (CPRA) and similar state privacy laws. HEVN's collection and processing of such data is described in Section 2 and is limited to what is strictly necessary to provide the Services and comply with legal obligations."
" Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, service improvement, and business analytics, provided these interests do not override your fundamental rights"
Within one documentClause A permits data processing for 'service improvement' and 'business analytics' under legitimate interests, while Clause B explicitly limits processing *only* to providing services, facilitating transactions, and legal compliance, creating conflicting scopes of permitted activities.
" Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, service improvement, and business analytics, provided these interests do not override your fundamental rights"
" HEVN processes only the minimum personal and business information necessary to provide technology services, facilitate user-authorized transactions, and comply with applicable legal and regulatory requirements."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Portability: Request a machine-readable copy of your data for transfer to another service provider"
Grants users the right to receive a machine-readable copy of their data for transfer to another service provider, establishing a data portability right.
AI-generated interpretation, not legal advice.
" Note: HEVN provides access to financial products through regulated banking partners. Your use of accounts, cards, and related financial products may also be subject to the privacy policies of our banking and payment processing partners, which will be disclosed to you during onboarding."
Discloses that banking and payment processing partners have their own privacy policies that may apply to users' financial products, and that these will be disclosed during onboarding — identifying third-party data sharing relationships with regulated partners.
AI-generated interpretation, not legal advice.
" We may share your information with the following categories of third parties:"
Defines identity and business verification providers as a category of third-party recipients, specifying that they conduct KYC/KYB checks, identity verification, and sanctions screening, scoping the permissible disclosure to this category for these purposes.
AI-generated interpretation, not legal advice.
" We do not sell, rent, or trade your personal information. "
Prohibits the sale, rental, or trading of personal information — user-favorable restriction that limits monetization of personal data.
AI-generated interpretation, not legal advice.
" We are transparent about how your data is shared. Personal and identity data is shared with third parties only for KYB/KYC verification and regulatory compliance purposes and only as part of the user-initiated account opening and verification process . We never share your personal data for marketing, advertising, or profiling."
Introduces the categories of third parties with whom data may be shared, functioning as a scoping clause that frames subsequent enumeration as exhaustive categories of permissible third-party recipients, limiting disclosure to those listed.
AI-generated interpretation, not legal advice.
" HEVN does not intentionally collect or process special categories of personal data as defined under GDPR Article 9, including health information, political opinions, religious beliefs, trade union membership, genetic data, or data concerning sex life or sexual orientation."
Restricts HEVN from intentionally collecting or processing special categories of sensitive personal data such as health information, political opinions, religious beliefs, genetic data, and similar categories — user-favorable prohibition on sensitive data processing.
AI-generated interpretation, not legal advice.
" As described in Section 1, certain transient verification data we collect may be classified as sensitive personal information under the CPRA, including government-issued identification numbers and financial account information. This data is collected solely for KYB/KYC verification as part of the user-initiated account opening process, shared with regulated verification providers, and deleted from HEVN's systems after verification is complete. HEVN does not use sensitive personal information for profiling or advertising purposes."
Restricts use of sensitive personal information — including government-issued identification numbers and financial account information — to KYC/KYB verification only, prohibits its use for profiling or advertising, requires deletion after verification is complete, and limits sharing to regulated verification providers; collectively protective of the user by narrowly confining how sensitive data may be used and mandating its deletion.
AI-generated interpretation, not legal advice.
" Note: Certain rights may be limited where we have a legal obligation to retain your data, such as AML record-keeping requirements, or where processing is necessary for the establishment, exercise, or defense of legal claims."
Establishes exceptions to the exercise of certain data subject rights where the company has a legal obligation to retain data such as anti-money laundering record-keeping requirements, or where processing is necessary for the establishment, exercise, or defense of legal claims.
AI-generated interpretation, not legal advice.
" Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete such information promptly."
Restricts collection of personal information from individuals under 18 by stating services are not directed to them and that the operator does not knowingly collect such data; imposes an obligation to delete inadvertently collected child data promptly — protective of children's data.
AI-generated interpretation, not legal advice.
" We do not maintain long-term storage of identity documents, government-issued IDs, or other sensitive verification materials."
Restricts HEVN from maintaining long-term storage of identity documents, government-issued IDs, and other sensitive verification materials — user-favorable prohibition on retaining sensitive data.
AI-generated interpretation, not legal advice.
" When we transfer your data internationally, we implement appropriate safeguards to ensure that your information remains protected. These safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Agreement (UK IDTA) for transfers from the United Kingdom, adequacy decisions, or other legally recognized transfer mechanisms."
Imposes an obligation on the company to implement appropriate safeguards for international data transfers, listing specific recognized mechanisms such as Standard Contractual Clauses, the UK International Data Transfer Agreement, adequacy decisions, and other legally recognized transfer mechanisms.
AI-generated interpretation, not legal advice.
" How HEVN collects, uses, and protects your personal and business information."
Introductory description defining the subject matter of the policy — how HEVN collects, uses, and protects personal and business information — establishing the scope of the document's legal obligations.
AI-generated interpretation, not legal advice.
" HEVN Inc. ("HEVN," "we," "our," or "us") is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, disclose, and protect information when you access or use our website at hevn.finance (the "Website"), our mobile application, and the technology platform and related services we provide (collectively, the "Services")."
Defines the identity of the data controller ('HEVN Inc.'), states the document's purpose (explaining collection, use, disclosure, and protection of information), and defines the scope of services covered, establishing foundational definitional scope for all downstream obligations.
AI-generated interpretation, not legal advice.
" By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use our Services."
States that by accessing or using the Services the user acknowledges reading and understanding the Privacy Policy, and instructs non-consenting users to discontinue use — functioning as an incorporation-by-use clause binding the policy's terms.
AI-generated interpretation, not legal advice.
" HEVN provides Non-Custodial Smart Contract Wallet infrastructure. You retain full control of your Digital Assets, which are authorized via PassKey-based cryptographic authentication directly at the smart contract level."
Defines the nature of HEVN's wallet infrastructure as non-custodial and describes that users retain full control of Digital Assets via PassKey-based cryptographic authentication, establishing the scope of HEVN's data access and control over user funds.
AI-generated interpretation, not legal advice.
" Private keys remain exclusively under your control. HEVN does not take custody of Digital Assets and does not have unilateral or joint control over user funds."
Disclaims that HEVN does not take custody of Digital Assets and has no unilateral or joint control over user funds, and that private keys remain exclusively under user control — user-favorable disclaimer limiting HEVN's claimed access to assets.
AI-generated interpretation, not legal advice.
" Blockchain transactions are publicly recorded and immutable. HEVN does not control the blockchain network and cannot reverse confirmed transactions."
Disclaims HEVN's control over the blockchain network and ability to reverse transactions, and notes that blockchain transactions are publicly recorded and immutable — user-favorable limitation on HEVN's responsibility over on-chain data visibility.
AI-generated interpretation, not legal advice.
" HEVN processes only the minimum personal and business information necessary to provide technology services, facilitate user-authorized transactions, and comply with applicable legal and regulatory requirements."
Imposes an obligation on HEVN to process only the minimum personal and business information necessary to provide technology services, facilitate user-authorized transactions, and comply with applicable legal and regulatory requirements — data minimization obligation user-favorable.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from HEVN, inc's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in HEVN, inc's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in HEVN, inc's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat HEVN, inc requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in HEVN, inc's published policies yet.
What the policies actually cover
0 topicsNone of HEVN, inc's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits sale of personal data or information.
“We do not sell, rent, or trade your personal information.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Portability: Request a machine-readable copy of your data for transfer to another service provider”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Note: HEVN provides access to financial products through regulated banking partners. Your use of accounts, cards, and related financial products may also be subject to the privacy policies of our banking and payment processing partners, which will be disclosed to you during onboarding.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We may share your information with the following categories of third parties:”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | worsens | HIGH | 2 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“Portability: Request a machine-readable copy of your data for transfer to another service provider”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“Note: HEVN provides access to financial products through regulated banking partners. Your use of accounts, cards, and related financial products may also be subject to the privacy policies of our banking and payment processing partners, which will be disclosed to you during onboarding.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may share your information with the following categories of third parties:”Open timeline citation
Latest stance: sale or sell on privacy data use
“We do not sell, rent, or trade your personal information.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-20· verified 2026-07-20verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
73 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of HEVN, inc's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified HEVN, inc's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from HEVN, inc's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.