Privacy Policy

1. Who we are

Weave is operated by [Legal business name], at [Registered address]. In this policy, “we” means that operator.

This policy covers personal data handled by the Weave design app and this portfolio.

2. Data we collect

• Account details: your name, mobile number with country code, role, account status and timestamps. The sign-in form defaults to country code +91.
• Creative work: briefs, prompts, optional reference images, generated body, pallu, border and motif artwork, edits, colour palettes, weave structures, loom and machine settings, quantised thread grids, and exported loom files such as EP or JC5 Jacquard files.
• Payment records: order, payment and subscription identifiers and amounts. Weave does not store card, UPI or bank details.

Account data and saved creative work are stored per account on the operator’s server. Saved work counts towards your storage allowance.

3. How we use data

We use this data to:

• Create and manage accounts, verify sign-in and review account access.
• Generate and edit designs, and save and export your work.
• Manage credits and storage, process payments and subscriptions, and respond to requests.

New accounts start as pending and may require operator approval. The operator can disable accounts.

4. AI providers and payments

Prompts, reference images and artwork are sent to third-party AI providers to generate or edit images and text. Depending on the operator’s configuration, providers may include OpenAI, Google (Gemini), Anthropic, Recraft, OpenRouter, KIE.ai and Cloudflare (Workers AI).

Their applicable terms and privacy policies govern their processing. Do not include personal information or confidential material you are not authorised to send for this processing.

Razorpay processes payments in Indian rupees (INR), including recurring subscriptions. Payment details you give Razorpay are handled under its terms and privacy policy. Weave retains the payment identifiers and amounts listed in section 2.

5. Cookies and sign-in

• Sign-in: sign-up and sign-in use a mobile number and a one-time code valid for 10 minutes. There are no passwords. Codes and session tokens are stored only as hashes.
• Session cookie: a strictly necessary cookie keeps you signed in for 7 days. It is HttpOnly, so browser scripts cannot read it, and SameSite=Strict, which restricts its use in cross-site requests.
• Other cookies: the app uses no advertising or analytics cookies. This portfolio’s static pages do not set cookies.

Keep access to your phone and codes secure.

6. Retention and security

Retention depends on why data is held and applicable legal requirements:

• Account data and saved work are held to provide your workspace.
• Payment records may need to be retained where required by law.
• AI providers’ retention is governed by their applicable policies.

Reaching your storage limit blocks new jobs; it does not automatically delete existing work. Account deletion is not self-service. You can request account or data deletion as described below.

No storage or transmission method can guarantee complete security.

7. Your rights and requests

Use the contact details below to request access to your data, correction of inaccurate details, account or data deletion, or to raise a privacy grievance. Include your account’s mobile number and country code, and describe the request. Do not send a one-time sign-in code.

India’s Digital Personal Data Protection Act, 2023 provides rights to:

• Access information about personal data and its processing.
• Correct, complete or update data, and request erasure.
• Seek grievance redressal.
• Nominate another person to exercise rights in the event of death or incapacity.

These statutory rights apply subject to the relevant provisions coming into force and the Act’s conditions and exceptions. You can contact the operator with requests now.

8. Children

Weave is not directed at anyone under 18. If you believe a child has provided personal data, contact the operator to request review and deletion.

9. Changes and contact

We may update this policy as the service or legal requirements change. The “Last updated” date identifies the latest revision.