Weaverly Privacy Policy
Effective date: [DATE]
Last updated: [DATE]
Weaverly is a Network Relationship Management platform operated by [LEGAL ENTITY NAME] ("Weaverly", "we", "us"). This policy explains what information we collect, how we use it, who we share it with, and the choices you have.
If you have questions about anything here, contact us at support@weaverlynrm.com.
1. Who this policy covers
This policy applies to people who create a Weaverly account and use the platform, and to people whose information a Weaverly user adds to the platform as a contact.
If you are not a Weaverly user and someone has added you as a contact, Section 9 explains your options.
2. Information you give us
Account information. Your name, email address, and a password. We store passwords only as a cryptographic hash and never in readable form.
Profile information. Anything you add to your Weaverly profile, including your job title, company, location, professional background, and the offers and needs that describe what you can help with and what you are looking for.
Contact information you import or enter. Weaverly is built around your professional network, so most of what you store with us is information about other people. This can include names, email addresses, phone numbers, mailing addresses, company names, job titles, LinkedIn URLs, and any notes you write about a person or a conversation.
Documents you upload. You may upload files such as a LinkedIn profile export, a resume, a capabilities document, or meeting notes so that Weaverly can extract professional information from them.
Communications. Introduction messages you write, posts you publish, direct messages you send on the platform, and messages you send to our support team.
Payment information. When paid plans become available, payments will be processed by Stripe. We receive and store a customer identifier and subscription status. We do not receive or store your full card number.
3. Information we collect automatically
Usage information. Pages viewed, features used, and actions taken in the product, collected through PostHog to help us understand how Weaverly is used and where it needs improvement.
Device and connection information. IP address, browser type, and operating system, collected in the ordinary course of serving the application.
Cookies and similar technologies. We use cookies that are necessary to keep you signed in and to keep the service secure, and analytics cookies to measure product usage. You can control cookies through your browser settings, though disabling necessary cookies will prevent you from signing in.
4. Information from third parties
LinkedIn. If you choose to connect your LinkedIn account, we receive the profile information LinkedIn makes available for that connection. You can disconnect at any time from your account settings.
Imported files. When you import contacts from a CSV export, a LinkedIn export, or a CRM export, we receive whatever that file contains.
5. How we use information
We use information to:
- Provide the platform: store your profile and contacts, keep your account secure, and let you sign in.
- Distill professional signals: analyze your profile, your contacts, and documents you upload to identify what each person offers and what each person is seeking.
- Surface opportunities: identify who in your network to reconnect with, who to introduce to whom, and why.
- Deliver introductions and invitations, including sending email on your behalf when you choose to make an introduction.
- Send you service email such as verification, password reset, notifications, and reminders you have enabled.
- Improve the product, diagnose problems, and measure feature usage.
- Process payments and manage subscriptions once paid plans are available.
- Meet legal obligations and enforce our Terms of Service.
We do not sell your personal information. We do not display advertising, and we do not allow third parties to pay to influence what Weaverly surfaces to you.
6. Artificial intelligence processing
Weaverly uses AI to read professional information and turn it into structured offers and needs, and to identify matches between people.
What is sent. Profile text, contact records, notes, and the contents of documents you upload may be sent to AI service providers for processing.
Which providers. Depending on how the platform is configured at the time of processing, content may be sent to OpenAI, Anthropic, Google, or Cerebras. These providers act as processors for us under their commercial terms.
Training. Each of these providers states that content submitted through their commercial or API products is not used to train their models by default. We do not opt in to model training on your content.
Retention by providers. Providers may retain submitted content for a limited period for abuse monitoring, security, and legal purposes, typically up to thirty days, after which it is deleted under their standard policies. Retention periods are set by each provider and may change.
Automated processing and your review. Weaverly proposes offers, needs, and matches automatically, but it does not act on them by itself. You review and accept or decline every extracted item and every suggested introduction. Nothing is shared with another person because of an automated suggestion alone.
Accuracy. AI-generated descriptions can be wrong or incomplete. You are responsible for reviewing what Weaverly proposes before acting on it.
7. How we share information
With other Weaverly users, when you choose. When you make an introduction, the people involved see the message you write and the reasoning Weaverly generated for the match. When you weave a connection with another user, that user sees the profile information you have made available to your connections.
With people who are not yet on Weaverly. If you introduce someone who does not have an account, we email them an invitation on your behalf. Until they create an account and verify their email, we limit what they can see about the other party to a job title and a general description, and we withhold the other party's name and company.
With service providers. We share information with the companies that operate our infrastructure. As of the effective date these are:
| Provider | Purpose |
|---|---|
| MongoDB Atlas | Primary database |
| Vercel | Application hosting and file storage |
| Google Cloud | Application hosting |
| SendGrid | Transactional and notification email |
| Pusher | Real-time updates in the application |
| Inngest | Background job processing |
| PostHog | Product analytics |
| Stripe | Payment processing (when paid plans launch) |
| OpenAI, Anthropic, Google, Cerebras | AI processing (see Section 6) |
For legal reasons. We may disclose information where we believe in good faith that disclosure is required by law, or is necessary to protect the rights, safety, or property of Weaverly, our users, or the public.
In a business transfer. If Weaverly is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will give notice before your information becomes subject to a different privacy policy.
8. Security
We protect information with measures including:
- Encryption in transit using TLS.
- Provider-managed encryption at rest, including AES-256 for MongoDB Atlas, our database backup snapshots, Vercel Blob, and Google Cloud Storage.
- Password hashing, so passwords are never stored in readable form.
- Access controls limiting which members of our team can reach production systems.
One limitation you should know about. Files you upload are stored with public-URL access. The URLs are long and unguessable and are not listed anywhere, but a person who obtains a file's URL can open it without signing in. If a document contains information you do not want reachable that way, do not upload it. We intend to change this and will update this policy when we do.
No system is perfectly secure, and we cannot guarantee absolute security.
9. If you are a contact and not a user
Weaverly users store information about the people in their professional networks. If you have been added as someone's contact, the user who added you decides what is stored about you and what they do with it. We process that information on their behalf.
You can email support@weaverlynrm.com to ask what is held about you, to correct it, or to ask that it be removed. We will act on the request, and where the information belongs to a specific user's contact list we will pass the request to that user and support them in honoring it.
If a Weaverly user invites you to an introduction and you are not interested, you can decline from the invitation email without creating an account, and you can ask not to be contacted again.
10. Your choices and rights
Access and correction. You can view and edit your profile, contacts, offers, and needs from within the product at any time.
Export. You can export your profile and contacts as a CSV file from the Contacts page.
Notification settings. You can change which emails and in-product notifications you receive from your account settings.
Deletion. To delete your account and the information associated with it, email support@weaverlynrm.com. We will confirm the request and delete your account, your profile, your contacts, your notes, your messages, your posts, and your offers and needs. Some information may remain in encrypted backups for the period our backup provider retains them, and we may retain records where we are legally required to.
Marketing. We do not send marketing email to Weaverly users without their consent, and every such email includes an unsubscribe link. Service email necessary to operate your account cannot be turned off while your account is active.
Regional rights. Depending on where you live, you may have additional rights, including the right to access, correct, delete, or port your information, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. Contact support@weaverlynrm.com to exercise any of these. We will not discriminate against you for exercising them.
11. Data retention
We keep your account information for as long as your account is active. When you delete your account, we delete the associated information as described in Section 10.
Information sent to AI providers is retained by those providers for the limited periods described in Section 6.
Deleted information may persist in encrypted database backups for the period configured with our backup provider before those backups expire.
12. International transfers
Weaverly is operated from the United States, and our service providers may process information in the United States and other countries. If you use Weaverly from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
13. Children
Weaverly is a professional networking product and is not intended for anyone under 18. We do not knowingly collect information from anyone under 18. If you believe a person under 18 has created an account, contact support@weaverlynrm.com and we will delete it.
14. Changes to this policy
We may update this policy as the product changes. When we make material changes we will update the date at the top and notify you in the product or by email before the changes take effect.
15. Contact
Questions, requests, or complaints:
Email: support@weaverlynrm.com
Postal: [MAILING ADDRESS]