Privacy Policy

1. Information you provide

Woven processes information you submit to create and operate an account, including your email address, profile details, workspace and brand information, prompts, captions, uploaded media, brand knowledge, schedules and other content you choose to store in the service. If you use a paid plan, Woven also stores billing records such as the selected plan, transaction reference, payment status, amount, billing period and provider customer or subscription identifiers. Woven does not store full card numbers through its Paystack integration.

2. Connected social accounts

When you connect Instagram or another supported provider, Woven receives provider account identifiers, profile metadata, permissions and access tokens needed to perform the actions you authorize. Woven does not ask for or store your social-network password. Provider access tokens are encrypted at rest and are used only for supported connection, publishing and account-management functions.

3. AI processing

When you ask Woven to generate, edit, review or analyze content, the information needed for that request may be sent to an AI service provider. That can include your prompt, relevant brand context and the media being processed. Woven aims to send only the context needed for the task and does not treat another creator's media as reusable inventory.

4. Usage and technical information

Woven may record technical and operational information such as request times, feature usage, publishing attempts, delivery status, error information, browser or device information made available by standard web requests, and security logs. This information is used to operate, secure and improve the service.

5. How information is used

We use information to provide account access; generate and manage content; connect and publish to authorized social accounts; maintain revisions, approvals and schedules; send transactional or opted-in email; enforce plan limits; detect abuse; troubleshoot failures; and improve reliability and product quality.

6. Service providers

Woven relies on infrastructure and service providers to operate the product. Depending on the feature used, these can include Supabase for authentication, database and storage; Vercel and Railway for application infrastructure; OpenAI for AI processing; Resend for application email; Paystack for paid checkout and recurring subscription management; and Meta/Instagram for connected social functionality. Those providers process information under their own terms and privacy obligations.

7. Sharing and sale of personal data

Woven does not sell personal data. Information is shared with service providers when needed to deliver the service, with a connected platform when you direct Woven to perform an action there, when required by law, or as part of a legitimate corporate transaction subject to appropriate safeguards.

8. Media retention

Generated media and content you save can remain in your workspace until you delete or archive them or until account retention rules require removal. Temporary uploaded media used for publishing may be deleted after a confirmed provider publish to reduce unnecessary storage. Operational records, backups and security logs may remain for a reasonable period after the underlying content changes.

9. Your choices and rights

You can edit or remove content in Woven, disconnect supported social accounts, change available notification preferences, and request access, correction or deletion of personal information where applicable law provides those rights. Some records may need to be retained for security, fraud prevention, billing, legal or dispute-resolution purposes.

10. Security

Woven uses access controls, tenant boundaries, encryption for sensitive provider credentials and other technical safeguards designed to protect service data. No internet service can guarantee absolute security, so users should protect their account credentials and report suspected unauthorized access promptly.

11. International processing

Woven's service providers may process information in countries other than the country where you live. Where required, Woven will use appropriate contractual or legal safeguards for those transfers.

12. Children

Woven is a professional social-content service and is not directed to children. Do not create an account if you are not legally able to agree to the service terms in your jurisdiction.

13. Changes and contact

We may update this policy as Woven changes. The current version and update date will remain available on this page. Privacy requests can be made through Woven's support channel or the contact method provided with your account.