Effective 2026-06-29

Weavae Privacy Policy

These terms are a draft. They have not been reviewed by a lawyer yet.

This is the binding wording of the Privacy Policy. The plain-language version explains the same rules in the words you would actually use, and names which section here governs each one.

This Privacy Policy explains what personal information Chimæra World ("we", "us") collects when you use Weavae (the "Service"), why we collect it, who we share it with, and what you can do about it. It forms part of, and is incorporated into, the Weavae Terms of Use.

⚠ This document is a DRAFT prepared by the operator and has not been reviewed by legal counsel. It describes what the Service actually does with data. It does not assert compliance with any particular data-protection regime; the open questions are published on the rules page.

1. Who is responsible

Chimæra World operates the Service at weavae.com and decides how the account and platform data described below is handled. You can reach us at support@chimaeraworld.com.

For the working content you and your collaborators put into a workspace — designs, specifications, measurements, supplier records, and any personal data about your own staff or counterparties contained in them — you decide what goes in and why, and we handle it on your instructions in order to run the Service for you.

2. What we collect

Account information: your name, email address, the role you registered under, the workspaces and organisations you belong to, and your authentication state. Where you sign in through a third-party identity provider, the basic profile information that provider returns (name, email address).

Content: everything submitted to or generated in the Service — styles, bills of materials, measurements, tech packs, patterns, samples, colourways, uploaded files, briefs, quotes, orders, and messages between users.

Transaction information: contracts, payment schedules, milestone amounts and states, releases, refunds, payouts, commissions, and the events behind them. Payment card details are collected and held by our payment processor and are not stored by us.

Consent records: each acceptance, opt-in and withdrawal, the document version it applied to, the time it happened, and the IP address at that moment, retained as evidence of the consent itself. This record is append-only.

Operational information: sign-in events, active sessions, notification and audit records, and errors, used to run and secure the Service.

3. Why we use it

To provide the Service and the features you use; to authenticate you and secure your account; to route work, quotes, briefs and messages between the parties you have chosen to deal with; to charge, hold, release, refund and pay out money through our payment processor; to notify you about things that happen on your work; to investigate abuse, fraud and disputes; to keep the audit and consent records that make the platform's decisions reviewable; and to comply with obligations that apply to us.

We do not sell personal information. We do not use your Content to train artificial-intelligence models unless you have separately and explicitly opted in, and that opt-in can be withdrawn.

4. Who we share it with

Other users, as directed by you: the counterparties you contract with see the briefs, quotes, deliverables, messages and contract terms you send them; an agency you engage can pass the work to one of its own people, which gives that person access to that brief.

Service providers who run parts of the platform on our behalf: our payment processor (payments, payouts, identity verification for payees), our database, authentication and file-storage provider, our hosting provider, our transactional email provider, and the provider behind any AI-assisted feature you use. A current sub-processor list is available on request and is one of the items still awaiting legal review.

Authorities, where we are legally required to disclose, and successors in the event of a merger or sale of the business.

5. Your choices

Access and portability: you can view your consent record in Settings, and export a workspace's data from the export page.

Consent: optional consents — including the AI-training opt-in — can be withdrawn in Settings at any time. The Terms of Use and this Privacy Policy cannot be withdrawn while your account is open; closing the account is the equivalent step.

Correction: account and workspace details can be edited in Settings.

If you believe we hold personal information about you that you cannot reach through the product, write to support@chimaeraworld.com.

6. Deleting your account

You can delete your account yourself from Settings. Deletion is irreversible and requires you to type your own email address to confirm; before you confirm, the Service shows you which workspaces would be deleted with you and which would survive.

A workspace of which you are the sole member is deleted together with its data. A workspace with other members survives, and only your access to it is removed. If you are the last platform operator, deletion is refused until another operator exists.

⚠ We do not currently state a retention period for records that survive deletion. Some transaction records are expected to have to be retained for accounting and tax purposes; which records, and for how long, is an open question for counsel and is published as such rather than guessed at here.

7. Security

Access to workspace data is enforced at the database level as well as in the application, so a user reaches only the workspaces and records their role and grants allow. Passwords and payment credentials are held by our authentication and payment providers rather than by us. No system is perfectly secure, and we do not claim otherwise.

8. Changes

Each version of this policy is recorded with an effective date, and your acceptance is recorded against the version you were shown. If we make a material change we will present the new version and record your acceptance of it rather than changing the document underneath you.

Something here does not match what the product did to you? Write to support@chimaeraworld.com. A rules page that disagrees with the product is a defect, and we would rather hear about it than have you find out during a dispute.