WEAVORI

Privacy Policy

Last updated: 28th July 2026

1. Introduction

Weavori is operated by Malik Mohammad Ammar as a sole proprietor. We provide a SaaS platform that helps you manage and optimize your workflows. This Privacy Policy explains what data we collect, how we use it, and the measures we take to keep it secure. We are committed to data minimization — we only collect information that is strictly necessary to provide and improve the Service.

The data controller responsible for your personal data is Weavori, reachable at privacy@weavori.com.

2. Information We Collect

Weavori collects only the data necessary to operate and improve the Service:

  • Account & Profile Data: When you create an account, we collect user ID, email address, and public profile information (such as your username and avatar).
  • Usage & Diagnostic Data: We collect aggregated analytics about how you interact with the platform (e.g., feature usage, page views, and session duration) to help us debug issues and improve user experience.
  • Country of Origin: When you access our website, we derive your approximate country from your IP address. The IP address itself is not stored — only the resolved country is recorded. This is used solely to understand our user base geographically and to provide better regional support.

What We Do NOT Collect: Weavori never stores sensitive database credentials, raw database records, payment card details, or any information not strictly required for the Service to function. We do not access or store the contents of your production databases.

3. How We Use Your Information

We use the limited information we collect to:

  • Provide and maintain the Service: Authenticate your account, manage subscriptions, and deliver core functionality.
  • Improve product reliability: Analytics and diagnostic data help us identify bottlenecks, fix bugs, and refine features based on real usage patterns.
  • Send service-related communications: We may notify you about important updates, security alerts, changes to the Service, or billing matters.
  • Provide support: Information you share helps us respond to technical issues and customer support requests.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases:

  • Performance of a contract (Art. 6(1)(b)): Processing your account information, authentication data, and billing details is necessary to provide the Service you signed up for.
  • Legitimate interests (Art. 6(1)(f)): We may process usage data for fraud prevention, security monitoring, and product improvement, where our legitimate interests are not overridden by your rights.
  • Consent (Art. 6(1)(a)): Website analytics are loaded only after you explicitly accept via the cookie consent banner. You may withdraw this consent at any time.
  • Legal obligation (Art. 6(1)(c)): We may retain or disclose data where required by applicable law.

5. Sharing Your Information

We may share limited information only with the following categories of recipients, each operating under their own privacy and security policies:

  • Cloud Infrastructure & Authentication Providers: We use third-party services to manage authentication, securely store your account credentials, and host our database. These providers process your profile and session data strictly to keep the Service operational.
  • Payment Processors: We use third-party payment gateways to handle billing and subscription transactions. These providers are fully PCI-DSS compliant, and we do not store your credit card or payment details on our servers.
  • OAuth Identity Providers: If you choose to log in via OAuth (such as GitHub or similar platforms), these providers authenticate your identity and share basic profile information with us only after you grant explicit permission.
  • Hosting & CDN Providers: Our website and application are served through global cloud hosting and content delivery networks. These platforms may process request metadata (such as IP addresses) for performance, security, and availability purposes.
  • Performance & Analytics Tools: We use privacy-friendly analytics tools to monitor website performance, diagnose errors, and collect aggregated usage metrics. These tools do not use tracking cookies to identify individual users across sessions.

We never share full database contents, raw production data, or any unnecessary parts of your account information. Data is only shared to the extent required to deliver and maintain the Service.

6. Data Security

Weavori takes data security seriously. We implement several measures to protect your information:

  • Encrypted transmission: All data sent to our servers is transmitted using industry-standard TLS encryption.
  • Secure storage: Data stored via Supabase is encrypted at rest and accessible only to authorized systems or personnel when strictly necessary.
  • Data minimization: We intentionally limit what we collect to reduce the risk exposure of your personal information.

Despite these measures, no method of electronic storage or transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain only the minimum amount of data necessary to operate and maintain the Service:

  • Account information (email, GitHub ID, subscription status) is retained for as long as your account is active and for a reasonable period thereafter (up to 30 days) in case of accidental deletion, unless you request earlier erasure.
  • Usage and diagnostic logs may be stored temporarily (up to 90 days) to troubleshoot issues, improve performance, and secure the platform.
  • Anonymized analytics (e.g., aggregate page views, feature usage counts) may be stored indefinitely for business intelligence purposes, as they contain no personally identifiable information.

We delete or anonymize personal data when it is no longer required for the purposes outlined in this policy.

8. Your Rights

If you are located in the European Economic Area (EEA), the UK, or California, you have the following rights regarding your personal data:

  • Right of access (Art. 15): You may request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16): You may ask us to correct inaccurate or incomplete data.
  • Right to erasure (Art. 17): You may request deletion of your personal data where it is no longer necessary.
  • Right to restriction of processing (Art. 18): You may ask us to pause processing of your data in certain circumstances.
  • Right to data portability (Art. 20): You may request your data in a structured, machine-readable format.
  • Right to object (Art. 21): You may object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent (e.g., analytics), you may withdraw it at any time by clearing your browser storage or contacting us.
  • Right to lodge a complaint: You have the right to file a complaint with your local data protection supervisory authority. EU residents can find their national authority at edpb.europa.eu.

To exercise any of these rights, contact us at privacy@weavori.com. We will respond within 30 days.

9. Analytics & Cookies

Weavori uses minimal, privacy-first analytics to understand how users interact with our platform:

  • Essential Cookies: We use essential session cookies strictly for authentication and maintaining your login state. These are necessary for the Service to function and do not require consent.

All non-essential analytics scripts are loaded only if you explicitly accept them via the cookie consent banner shown on your first visit. You may decline at any time — the website remains fully functional without analytics.

10. Third-Party Links

Our website may contain links to third-party pages. We are not responsible for their privacy practices and encourage you to review their respective privacy policies before providing any personal data.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Updates will be posted on this page with a new effective date. For material changes, we will notify active users via email. Your continued use of the Service after changes indicates your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us at:

privacy@weavori.com