Privacy Policy

Last updated: 10 July 2026

Weave turns your speech into visual maps, so we take what happens to your voice seriously. The short version: we never store your audio, we don’t use your content to train AI models, we don’t show ads, and we never sell your data.

1. Who is responsible

Weave, operated from the United Kingdom, is the data controller for the personal data described here. Contact us about anything in this policy at team@sayweave.com.

2. What we collect

Account data — your email address and a securely hashed password, managed by our authentication provider.
Your voice, in the moment — while you hold the mic, audio streams to our speech-to-text provider and the transcript goes to our AI provider to build your map. Audio and transcripts are processed in real time and are not stored by Weave; they exist only for the duration of the session.
Your boards — the cards, links, and edits derived from what you said. These are stored in your account so your boards persist and can be replayed; they naturally reflect the content of your speech.
Usage and billing data— voice seconds used per month, your plan, and top-up purchases. Card details go directly to Stripe; we never see your card number, only Stripe’s references for your customer and subscription.
Technical data — essential cookies that keep you signed in, device-local preferences (stored in your browser, not on our servers), and anonymous, cookie-free page analytics.

3. How we use it, and why we’re allowed to

To provide Weave (contract): turning speech into maps, saving your boards, metering voice minutes, taking payment, and emailing you sign-in codes and receipts.
To keep Weave safe and improve it (legitimate interests): preventing abuse, rate limiting, debugging, and aggregate analytics.
To meet legal obligations: keeping billing records for tax and accounting.

We do not use your content or voice to train AI models, and we never sell personal data.

4. Who processes data for us

These providers process data only on our instructions, to run the service:

Supabase — database and authentication (your account and boards).
Vercel — hosting and cookie-free analytics.
Deepgram — real-time speech-to-text.
Anthropic — the AI that turns transcripts into map updates.
Stripe — payments and subscriptions.
Resend — transactional email (sign-in codes).

Some of these providers are in the United States. Where data leaves the UK we rely on the UK’s approved safeguards for international transfers (the UK Addendum to the EU Standard Contractual Clauses, or the provider’s UK adequacy arrangements).

5. How long we keep things

Audio: never stored. Transcripts: never stored.
Boards and account data: until you delete a board, or ask us to delete your account.
Billing records: as long as UK tax law requires (typically 6 years).

6. Sharing a board

Boards are private to your account unless you create a share link. A share link makes that board readable by anyone who has the URL — treat it like handing over a copy. You can revoke a link at any time from the board’s share menu.

7. Cookies

We use only strictly necessary cookies: the ones that keep you signed in. There are no advertising or tracking cookies, and our analytics don’t use cookies — which is why you don’t see a cookie banner. Per-device preferences (like themes and sticker settings) live in your browser’s local storage and never leave your device.

8. Your rights

Under UK GDPR you can ask us for access to your data, correction, deletion, a portable copy, or restriction of or objection to processing. Email team@sayweave.comand we’ll respond within one month. You can also export any board yourself (Markdown, PNG, or SVG) from the export menu. If you’re unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office at ico.org.uk.

9. Children

Weave isn’t directed at children under 13, and we don’t knowingly collect their data.

10. Changes

If we materially change this policy — especially anything about your voice — we’ll email account holders before the change takes effect.