Privacy Policy

Last updated: 28 July 2026

Weave turns your speech into visual maps, so we take what happens to your voice seriously. The short version: we never store your audio, we don’t use your content to train AI models, we don’t show ads, and we never sell your data.

1. Who is responsible

Weave, operated from the United Kingdom, is the data controller for the personal data described here. Contact us about anything in this policy at team@sayweave.com.

2. What we collect

Account data — your email address and a securely hashed password, managed by our authentication provider.
Your voice, in the moment — while you hold the mic, audio streams to our speech-to-text provider and the transcript goes to our AI provider to build your map. Audio is processed in real time and is never stored by Weave.
Your transcripts — the finalized text of what you said is saved alongside each board, so the transcript reappears when you reopen a board and can be exported. Clearing or deleting a board deletes its transcript with it.
Your boards — the cards, links, and edits derived from what you said. These are stored in your account so your boards persist and can be replayed; they naturally reflect the content of your speech.
Usage and billing data— voice seconds used per month, your plan, and top-up purchases. Card details go directly to Stripe; we never see your card number, only Stripe’s references for your customer and subscription.
Product usage events— small records linked to your account of when you use key features (for example exporting a board, creating a share link, or starting the mic), so we can see which features actually help people and fix the ones that don’t. These record that an action happened, never its content.
Shared maps you’ve viewed— if you open someone else’s shared board while signed in, we save that link in your account so you can find it again under “Shared with you”. You can remove entries at any time, and an entry dies automatically if the owner revokes the link.
Referral data — if you sign up through a referral or shared-map link, we record who referred you so both sides can receive bonus minutes. Referral emails to the referrer never identify you.
Technical data— essential cookies (see section 7), device-local preferences (stored in your browser, not on our servers), a rough “last seen” timestamp on your account, and anonymous, cookie-free page analytics.

3. How we use it, and why we’re allowed to

To provide Weave (contract): turning speech into maps, saving your boards, metering voice minutes, taking payment, and emailing you sign-in codes and receipts.
To keep Weave safe and improve it (legitimate interests): preventing abuse, rate limiting, debugging, product usage events, and aggregate analytics.
To run the referral programme (contract/legitimate interests): crediting bonus minutes to referrers and the people they invite.
To meet legal obligations: keeping billing records for tax and accounting.

We do not use your content or voice to train AI models, and we never sell personal data.

4. Who processes data for us

These providers process data only on our instructions, to run the service:

Supabase — database and authentication (your account and boards).
Vercel — hosting and cookie-free analytics.
Deepgram — real-time speech-to-text.
Anthropic — the AI that turns transcripts into map updates.
Stripe — payments and subscriptions.
Resend — transactional email (sign-in codes).

Some of these providers are in the United States. Where data leaves the UK we rely on the UK’s approved safeguards for international transfers (the UK Addendum to the EU Standard Contractual Clauses, or the provider’s UK adequacy arrangements).

5. How long we keep things

Audio: never stored.
Boards and their transcripts: until you clear or delete the board, or ask us to delete your account. Deleting a board deletes its transcript with it.
“Shared with you” entries and product usage events: until you remove them (for entries) or your account is deleted.
Billing records: as long as UK tax law requires (typically 6 years).

6. Sharing a board

Boards are private to your account unless you create a share link. A share link makes that board readable by anyone who has the URL — the map, its replay, and its transcript— so treat it like handing over a copy. While you’re capturing a meeting, anyone with the link also sees the map and transcript grow liveas people speak. You can revoke a link at any time from the board’s share menu; revoking it kills the link everywhere, including viewers’ saved lists.

If you capture a meeting, it’s your responsibility to tell participants and get their consent — their words become part of the board and its transcript, visible to anyone you share the link with.

7. Cookies

We use a small number of strictly necessary and functional cookies: the ones that keep you signed in; a short-lived referral cookie set when you arrive via an invite or shared-map link (so signing up credits the person who referred you, used once); and a once-an-hour throttle cookie that limits how often we update your “last seen” time. There are no advertising or tracking cookies, and our analytics don’t use cookies — which is why you don’t see a cookie banner. Per-device preferences (like themes and sticker settings) and small housekeeping entries (like shared maps you viewed before signing in) live in your browser’s local storage and never leave your device.

8. Your rights

Under UK GDPR you can ask us for access to your data, correction, deletion, a portable copy, or restriction of or objection to processing. Email team@sayweave.comand we’ll respond within one month. You can also export any board yourself (Markdown, PNG, or SVG) from the export menu. If you’re unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office at ico.org.uk.

9. Children

Weave isn’t directed at children under 13, and we don’t knowingly collect their data.

10. Changes

If we materially change this policy — especially anything about your voice — we’ll email account holders before the change takes effect.