Privacy Policy

Hosted WeaveLedger service · Last updated August 8, 2026

This policy describes how WeaveHub Technologies LLC handles information in the hosted WeaveLedger service at weaveledger.app. If you self-host the open-source application, your instance is under your control and this policy does not apply to it.

1. What we collect

• Account information: your email address, name, and chosen subdomain.
• Your bookkeeping content: receipt images, PDFs, forwarded emails, and the financial records the application derives from them. You provide this content; we store it to run your instance.
• Billing information: handled by Stripe. We never see or store full card numbers — we receive subscription status and a customer reference.
• Operational data: standard server logs and minimal usage metrics (e.g., AI scans used) needed for reliability and billing.

2. How we use it

Solely to provide, secure, support, and bill the service. We do not sell personal information, do not use your content for advertising, and do not use your content to train AI models.

3. AI processing disclosure

When a receipt is scanned, its image or text is transmitted to Anthropic (via our AI gateway) to extract structured data (merchant, amount, date, category, line items, tax flags). Under the commercial terms we use, Anthropic does not train models on this data. If you bring your own AI provider key on a self-hosted instance, your data flows directly to your chosen provider under your own agreement.

4. Subprocessors

Provider	Purpose
Cloudflare	Infrastructure: compute, isolated per-tenant database and file storage, networking
Anthropic	AI receipt extraction
Stripe	Subscription billing and payments
Resend	Transactional email (receipts of purchase, lifecycle notices)

5. Storage, security, and isolation

• Each hosted instance has its own isolated database and file storage — your data is not commingled with other tenants'.
• Data is encrypted in transit and at rest; stored provider API keys are additionally encrypted per user.
• Data is stored on Cloudflare infrastructure, primarily in North American regions.
• Databases have 30-day point-in-time recovery.

6. Retention and deletion

Your data is retained while your subscription is active. After a subscription ends: 30 days of read-only access for export, then 60 further days of offline retention (restorable by resubscribing), then permanent deletion approximately 90 days after subscription end. We send reminder emails before deletion. You may request earlier deletion, or an export, at any time via support@weavehub.app.

7. Your rights

You can access and export your data in-app at any time, correct it in-app, and request deletion. Depending on your jurisdiction you may have additional statutory rights; contact us and we will honor applicable requests.

8. Children

The service is not directed to anyone under 18 and we do not knowingly collect their information.

9. Changes and contact

We will post any changes here and notify you of material changes by email. Contact: support@weavehub.app.