Last updated: March 2026
Account information: When you register, we collect your name, email address, and organisation name. Publishers also provide cryptographic public keys for tool signing.
Usage data: We collect information about how you use the Platform, including workflow executions, tool installations, and feature usage. This data is used to improve the service and provide analytics to you.
Credentials: API keys and secrets you provide for integrations (e.g., OpenAI, Slack) are encrypted with AES-256-GCM before storage and are never stored in plaintext.
Technical data: We collect IP addresses, browser information, and device identifiers for security purposes (login tracking, session management, rate limiting).
We use your information to: provide and operate the Platform; authenticate your identity and secure your account; execute workflows and automations on your behalf; send transactional emails (verification, password reset, workflow alerts); provide analytics about your workflow performance; improve and develop the Platform; comply with legal obligations.
Your data is hosted on servers in the European Union (Germany). All data is encrypted in transit (TLS 1.3) and at rest. Passwords are hashed using Argon2id. Credentials are encrypted using AES-256-GCM with a master key stored separately from the encrypted data. Database backups are encrypted and stored in Cloudflare R2 (EU region).
We do not sell your personal data. We may share data with: infrastructure providers (Hetzner, Cloudflare, Vercel) as necessary to operate the service; AI providers (OpenAI, Anthropic) when you execute workflows that use their APIs — only the workflow data you choose to process is sent; law enforcement when required by law. Publisher tool listings (name, description, pricing) are publicly visible on the marketplace by design.
We use the following cookies:
Essential cookies: CSRF protection token and refresh token (httpOnly). These are required for security and authentication. The Platform cannot function without them.
Preference cookies: Sidebar state and UI preferences. These remember your layout choices.
We do not use third-party advertising or tracking cookies. You can manage cookie preferences via the cookie banner shown on your first visit.
Each user's data is isolated by a unique tenant identifier. Your workflow data, execution history, analytics, and credentials are never visible to other users. Marketplace analytics (download counts, ratings) are aggregated and anonymised.
If you are in the European Economic Area, you have the right to: access your personal data; correct inaccurate data; delete your account and associated data (via Settings → Security → Delete Account); export your data; withdraw consent for non-essential processing; lodge a complaint with your local data protection authority.
To exercise these rights, contact us at privacy@weavixai.com or use the in-app account deletion feature.
Account data is retained while your account is active. Deleted accounts are soft-deleted and permanently purged after 30 days. Workflow execution logs are retained for 90 days. Anonymised analytics data may be retained indefinitely.
The Platform is not intended for users under 18 years of age. We do not knowingly collect data from minors.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Platform.
Data Controller: WeavixAI
Email: privacy@weavixai.com