Privacy policy

WEFT is operated by WEFT Technologies Inc., a Delaware corporation, 4174 Central Sarasota Parkway, 227, Sarasota, FL 34238, United States ("WEFT", "we", "us"). We are responsible for the personal information described in this policy.

Gabriel Khoury, founder of WEFT, is the person in charge of the protection of personal information at WEFT. You can write to him about privacy at gabriel@wefthq.io, and you can reach our general support at support@wefthq.io.

This policy covers WEFT on the web and in the WEFT apps. WEFT is for adults only.

Your account. Your email address, your date of birth and your confirmation that you are 18 or older, your country (and, in the United States, your state), your language, and the versions of our notices and terms you accepted. Your date of birth is used only to keep WEFT to adults.

Your profiles and what you choose to share. The names, descriptions, photos and links you add to your profiles, what you can help with, what you offer and what you are looking for, your answers to a Community's questions, and your Coffee Chats and Business preferences. You decide what each profile shows and where it appears.

What you ask and what you say. Your Requests and the answers you give to clarify them, notes you add when you ask someone, your conversations and the files and photos you share in them, your Community posts, comments and polls, and outcomes you record.

What you choose to import. If you upload a résumé or a LinkedIn profile PDF, we read it to propose profile entries for you to confirm and delete the file within 24 hours. If you import your LinkedIn connections, the file is read on your device and only scrambled references leave it, so WEFT can recognise those people if they join later. If you use Find people you know, the addresses you check are scrambled in your browser and are not stored.

Information about other people. Members may give us information about other people, for example in a Request or an import, and Community or Organization administrators may give us member lists to decide who may join. We use it only for the purpose it was provided for, and we never create a profile of someone who has not joined.

Your settings and activity. Your notification choices, who can find you, your translation setting, your blocks, reports and appeals, and how much of your plan's allowances you have used.

What WEFT works out. To suggest people, WEFT draws concepts from what you write, which you can see and correct, and assesses whether you could help with another member's Request; that assessment is deleted with that Request or with your account. WEFT also keeps the result of each safety check of what you write.

Plans and payments. If you buy a plan, the payment and billing details you enter at checkout go directly to our payment provider, Stripe, and never to WEFT. WEFT keeps a record of your plan, its status and dates, and the provider's reference for your account. If you buy a plan in the WEFT app for Android, the payment goes through Google Play and your payment details go to Google, never to WEFT. WEFT gives Google a random reference for your account, never your name or email address, and keeps from Google only the plan you bought, its status and dates, whether it renews, and a purchase reference. If you live in Canada, WEFT also reads from Google the number, amounts and tax of that purchase and the province and postal code of your Google Play billing address, only to email you the copy of your plan agreement, and does not keep them. If your purchase shows a Québec billing address, WEFT asks you once, on Your plan, for your postal address, only to print it on the copy of your plan agreement that Québec law requires; it is deleted with your account.

Your device, if you use the app. If you turn on notifications, a notification token, an installation identifier, the app version, and your phone's language and time zone.

Messages to us, and technical data. What you send to our support or privacy addresses. Like any website, our systems record technical details of requests, such as IP address, browser type and the page requested, and we keep short-lived records to prevent abuse. Error reports, and counts of app sessions used to measure the app's stability, are sent to our error-monitoring provider with personal fields removed.

We do not ask for your phone number or postal address, we do not collect your precise location or your phone's contacts, and we do not use advertising identifiers, advertising networks or third-party analytics. The one exception is the postal address a Québec purchaser gives once for their plan agreement, described under "Plans and payments".

To provide WEFT. We use your information to run your account and profiles, to understand what you ask for and what you offer, to suggest relevant people and opportunities, to deliver Requests and open conversations when people accept, to translate what members write, to help you draft your profile, and to provide paid plans. This is necessary to provide the service you signed up for.

To keep WEFT safe and working. We check content for safety, prevent abuse and fraud, enforce our Terms of Use, review reports and appeals, and secure our systems. We do this because we, our members and the public have a legitimate interest in a safe service, and because the law sometimes requires it. Some safety decisions are made by automated processing alone: our safety checks can refuse or hold a Request, a Community post, a photo or a profile entry without a person looking at it. You are told the decision, and you can ask us, from the notice or at gabriel@wefthq.io, which personal information was used and the main reasons and factors behind the decision, have that information corrected, and send your comments to a person at WEFT who can review the decision.

To communicate with you. We send emails and notifications about your account, your Requests and your plan. You choose which notifications you receive, and you can unsubscribe from the weekly email from the email itself.

To understand and improve WEFT. We measure how WEFT is used through counts that do not identify anyone.

To meet legal obligations, for example to keep financial records or to respond to lawful requests.

Sensitive information. What you write may reveal sensitive information, for example about your health, beliefs or sexuality, and you are free to write about these subjects. We use such information to provide what you asked for, in the places and to the people you choose, and we do not use it for advertising. A Request that may reveal sensitive information travels only after you have agreed to how it will be shared, and you can withdraw the Request at any time. WEFT does not infer sensitive characteristics about you or build profiles of them.

When you make a Request, WEFT compares it with what members have chosen to make available for matching in the places your Request may travel, and suggests a short list. You decide whom to ask. A person you ask receives what your chosen sharing level allows, and nothing more is shared until they accept. People you do not ask never see your Request.

Suggesting people involves profiling: WEFT assesses the experience, skills and interests in what you make available for matching to judge whether you may be relevant to someone's Request. It does so for the items you show on a profile in your Communities and for private items with "Use for matching" on. WEFT's suggestions are not decisions about you: the member who asks decides whom to contact, and nobody contacts you without your acceptance.

Some things you add can be kept private but still used to find relevant people and opportunities, using "Use for matching". Your words are never shown to other members. You may, however, be suggested by name to someone whose Request matches it, and that person may infer from the suggestion that you could help with that kind of need. "Use for matching" is on for a private item unless you turn it off. You can turn it off for any item, and WEFT then stops using it to suggest you. When you are suggested because of an answer you gave to a Community's question, the person sees you without your name until you accept.

Other members never see which plan you have. If you have WEFT Business, WEFT uses that only as described in section 9 of the Terms of Use.

WEFT uses Anthropic, PBC as an AI service provider. With the permission you give at signup, the text you write in WEFT, the text of documents you choose to upload, and the photos you post in Communities are sent to Anthropic's models to check content for safety before others see it, to understand what you ask for and offer so WEFT can suggest people, opportunities and Coffee Chats, to propose profile entries for you to confirm, to help you draft your profile, and to translate what you write for members who read another language.

WEFT does not send your Private Notes, your email address, your date of birth or your payment details, and does not attach your name or account identifier to what it sends. Anything you include in your own text is sent as part of that text.

WEFT does not collect, use or sell personal information to train large language models. Anthropic's commercial terms do not allow it to use this content to train its models. Under its published retention policy, Anthropic deletes this content within 30 days, unless its automated safety systems flag it as possibly breaking its usage policies, in which case it may keep it for up to 2 years, or the law requires it to be kept longer.

AI suggestions never become part of your profile, or anything WEFT uses to suggest you, until you confirm them. You can withdraw your permission in Settings. Because WEFT cannot work without this processing, you would then no longer be able to use WEFT, but you could still download your information and delete your account.

Private Notes, including the people you record in them, are encrypted on your device with a key made from your passphrase, and the key never leaves your device. We store only encrypted data that we cannot read. Private Notes are never used for matching, suggestions, AI processing or analytics, and never shown to anyone else. Any search or help inside Notes runs on your device. If you lose your passphrase, we cannot recover your Notes.

Other members, only as described in section 4 and as you choose.

Community and Organization administrators see what members of their Community can see, and the membership and application information for their Community. Their administrator permissions never give them your Requests, the people suggested to you or whom you asked, your consent decisions, your Private Notes, your conversations or your activity in other Communities. Like any member, an administrator sees a Request only if it is sent to them.

Service providers that process information for us under contract and on our instructions: Supabase (database, sign-in and storage), Vercel (hosting), Amazon Web Services (background processing and scanning uploaded files), Resend (email delivery), Sentry (error monitoring), Anthropic (AI processing, section 5), Google Workspace (our email), and Apple and Google (delivering app notifications, if you turn them on).

Stripe and Link, if you buy a plan. Stripe processes payments. Where an order is sold through Link, Stripe's affiliate Sold through Link, LLC completes it on WEFT's behalf as merchant of record. They receive the payment and billing details you enter at checkout directly and handle them under their own privacy policies; WEFT shares with them your email address and an account reference, and cannot delete records they keep for their own legal obligations.

Google, if you buy a plan in the Android app. Google Play processes the purchase under its own terms and privacy policy. WEFT shares with Google only a random account reference and the purchase reference, and asks Google for the purchase's status, and to stop or refund a plan when you cancel or delete your account.

For legal and safety reasons, we may disclose information if the law requires it, or where necessary to protect someone's safety, to investigate abuse of WEFT or to defend our legal rights. If WEFT is reorganised or sold, information may transfer to the new owner, who must respect this policy.

Advertising and sale. Today WEFT shows no advertising, does not sell personal information or share it for targeted advertising, and allows no third-party advertising or analytics trackers. WEFT may in the future offer advertising, sponsored content or other commercial features. Before personal information is used or shared for a purpose of that kind, we will update this policy and tell you in advance, and we will give you the choices and ask for the consents that the law requires, including before information we already hold is used in a new way.

WEFT is operated from the United States, and our systems and service providers process information there. If you use WEFT from another country, your information is transferred to and processed in the United States, where courts and authorities may obtain access to it under US law. Where the law requires safeguards for such transfers, we and our providers use appropriate ones, such as standard contractual clauses.

If you live in Québec, your information is communicated outside Québec, to the United States, where WEFT and the service providers in section 7 process it. We have assessed the privacy risks of these transfers, and our service providers are bound by written terms that limit how they may use the information and require them to protect it.

We keep your account information while you have an account, and delete it when you delete your account (section 10). Some information is deleted sooner: unconfirmed Request drafts and unconfirmed AI suggestions after 14 days, uploaded résumé files within 24 hours, records used to prevent abuse after between 24 hours and 90 days, and scrambled references from a connections import after 12 months.

Records of payment events hold only identifiers and statuses and are deleted after 90 days. Financial records that the law requires us to keep are kept in our systems with your identity removed; invoices and payment records held by our payment provider keep the details shown on them. A Google Play purchase reference is kept, encrypted, while the plan exists, and is deleted with your account.

Private Notes are kept until you delete them or your account.

You can delete your account in Settings, on the web or in the app. Deletion starts as soon as you confirm, cannot be undone, and removes your information from WEFT's systems. Deleting the app from your phone does not delete your account.

Five records are kept: financial records, with your identity removed; the tamper-evident record of system actions; a content-free record that WEFT showed you safety support resources, kept for 12 months; a pseudonymised record that consent was given before any contact; and, if you live in the United States, a record of which Terms you accepted with the arbitration agreement, when, and whether you opted out of arbitration, kept for 6 years with a code made from your email address with a secret key instead of the address itself. Messages you sent stay in the other person's copy of each conversation, and in shared Pods, without your name. Posts you wrote as a Community administrator stay in that Community without your name. Files and photos you shared are deleted. We may also keep limited information where applicable law or valid legal process requires it, and only for as long as it requires.

Encrypted database backups are kept for 7 days and used only to restore the service, so copies of your information disappear from them on that schedule; your deletion confirmation shows the date. A copy occasionally made for system maintenance is kept on an encrypted device and deleted within 30 days. Deleting your account also ends any paid plan straight away and deletes your customer record with our payment provider, including any saved payment method. Records of past payments and invoices are kept by the payment provider, in WEFT's account and its own, as tax and financial law requires, and a Link account you created at checkout is yours, not WEFT's. For a plan bought through Google Play, deleting your account also tells Google Play to stop payments; Google keeps its own records of the purchase under its own policies.

In WEFT you can download a copy of your information (as a readable PDF, a machine-readable file, or both with your photos and files), correct it in your profiles and settings, delete items or your whole account, choose who can find you, turn automatic translation off, turn "Use for matching" off for any private item, choose your notifications, and withdraw your AI permission.

Depending on where you live, you may also have rights to know what information we hold about you and whom we have shared it with, to access, correct or delete it, to receive a portable copy, to object to or restrict some processing, and to withdraw consent at any time without affecting processing that already happened. To use any right, email gabriel@wefthq.io from your account address. We respond within the time the law that applies to you requires, free of charge, and we will never treat you differently for using your rights. If we decline your request, you can appeal by replying to our decision, and if we refuse your appeal you can contact your data protection authority or, in the United States, your state attorney general.

Where you live. If you are in the European Union, the United Kingdom or Switzerland, the reasons we may use your information are those given in section 3 (providing the service you asked for, legitimate interests, legal obligations and, where we ask for it, your consent), and you can complain to your data protection authority. If you are in Canada, Gabriel Khoury answers questions about how we handle your information, and you can complain to the Office of the Privacy Commissioner of Canada or your provincial authority (in Québec, the Commission d'accès à l'information). If you are in Saudi Arabia, you have the rights given by the Personal Data Protection Law. If you live in Washington, our Consumer Health Data Privacy Policy at app.wefthq.io/consumer-health-data explains how we handle health information you choose to share. In the United States, we do not sell or share personal information for targeted advertising, and we do not use sensitive information to infer characteristics about you.

If you live in Québec, you have the right to access the personal information we hold about you and to have it corrected, to receive the information you gave us in a structured, commonly used technological format, to withdraw your consent, and to ask us to stop disseminating information about you or to de-index a link to it where its dissemination breaks the law or a court order, or causes serious injury to your reputation or privacy. On request we also tell you what personal information we collected from you, which categories of people at WEFT can access it, how long we keep it, and how to reach our person in charge of the protection of personal information. We answer in writing within 30 days.

If you live in Connecticut, you can also ask for the inferences we hold about you. WEFT does not use personal information for profiling that leads to decisions with legal or similarly significant effects, and it sells personal information to no one. We answer an appeal within 45 days, and if we refuse it you can complain to the Connecticut Attorney General at portal.ct.gov/ag/common/complaint-form-landing-page.

WEFT is for people aged 18 or over. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has an account, please contact us at support@wefthq.io.

Information is encrypted in transit. Access to information in our database is restricted so that each member and administrator reaches only what they are allowed to, and actions in the WEFT application are recorded in a tamper-evident log. No system is perfectly secure. If a confidentiality incident presents a risk of serious injury to you, we notify you and, where the law requires, the authorities, including the Commission d'accès à l'information if you live in Québec, and we record every incident in our register of confidentiality incidents.

Gabriel Khoury approves WEFT's privacy policies and practices. Only people at WEFT who need personal information to operate, secure or support WEFT can access it. We keep information only for the periods in section 9 and then delete it. Before we build or substantially change a system that handles personal information, or entrust information to a provider outside the place where you live, we assess the privacy risks. To complain about how we handle your information, write to gabriel@wefthq.io; we acknowledge your complaint, look into it and answer in writing within 30 days.

This policy describes how WEFT works today. If we change it in a material way, for example to use personal information for a new purpose such as advertising, we will tell you before the change takes effect, and where a change needs your consent we will ask for it. If you live in Québec, the French version of this policy applies to you, and if the French and English versions differ you may rely on whichever is more favourable to you. Elsewhere, if versions of this policy in different languages differ, the English version controls, except where the law where you live requires otherwise.

WEFT Technologies Inc., 4174 Central Sarasota Parkway, 227, Sarasota, FL 34238, United States. Privacy: Gabriel Khoury, gabriel@wefthq.io. Support: support@wefthq.io. Telephone: +1 (617) 201-1413.