1. Data protection at a glance
General notes
This section provides an overview of how personal data is handled when you visit this website. More detailed information appears in the rest of this declaration.
Data collection on our website
As a service provider, Weavy collects only the information necessary to deliver our services and process payments.
Information collected includes:
- Account holder name
- Account holder company name
- Email address
- Address
- Telephone number
- Internet Protocol (IP) address(es) for on-premise servers
- VAT ID for EU clients
- FEIN for USA clients
- National tax identifier information for other countries
Collection methods:
- Account creation or service purchase
- Customer support requests
- Contact form completion or newsletter requests
- Webinar or training participation
We do not collect information about your use of our services, but may know IP addresses for on-premise servers.
How data is collected
Data collection happens in two ways: information you provide directly (for example, through a contact form) and information collected automatically by our IT systems when you visit the site (such as browser type, operating system, and the time of page access).
How data is used
Data supports website functionality and analysis of user behavior. We minimize collection and limit use to: (1) purposes for which we have been given permission, (2) what is necessary to deliver the services you purchase or interact with, or (3) what we are required and permitted to do for legal compliance.
Uses include:
- Service improvement and optimization
- Problem diagnosis and identification of security risks
- Fraud and abuse prevention
- Usage analysis (only when requested for professional services or technical troubleshooting)
Third-party sharing: We never share your personal data with third-party entities.
Payment processing
Credit card payments: Stripe handles processing. Weavy collects only the email address; the card information remains with Stripe.
Invoice payments: We collect contact name, company name, billing address, email, and telephone.
Communication
Weavy may contact users regarding transactional communications, technical updates, and new features. With your consent, we may contact you about related services via email, SMS, or telephone.
You may request removal at any time by contacting info@weavy.com.
Your rights regarding your data
You have the right to receive free information about the origin, recipients, and purposes of the data we process about you; to request correction, blocking, or deletion; and to file a complaint with a supervisory authority. You may also restrict processing under certain circumstances.
Analysis tools and third-party tools
Your surfing behavior may be evaluated statistically through cookies and analysis programs. This analysis is typically anonymous and not traceable to an individual user. You may object to or prevent this analysis — see the details later in this declaration.
2. General notes and mandatory information
Data protection
We take personal data seriously and treat it confidentially in accordance with statutory regulations and this policy. Data transmission over the internet may contain security gaps, and complete protection of data against access by third parties is not possible.
Consent revocation
Any data processing that requires your consent may be revoked at any time via informal email notification. The lawfulness of any processing that occurred before revocation is not affected.
Right to object to data collection (Art. 21 DSGVO)
You may object to processing based on Art. 6(1)(e) or (f) DSGVO where "particular situation" circumstances apply. Processing then continues only if there are compelling, protective reasons that outweigh your interests, or if the processing serves legal claims. Objections to direct marketing prevent any subsequent marketing use.
Right of appeal
DSGVO infringements may be appealed to a supervisory authority, particularly in your state of residence, work, or the place of the alleged infringement.
Right to data portability
You may receive automatically-processed data in common, machine-readable formats based on consent or contract fulfillment. Direct transfer to third parties depends on technical feasibility.
SSL / TLS encryption
This site uses SSL or TLS encryption. The https:// protocol prefix and the browser lock icon indicate that encryption is active and preventing third-party data reading.
Information, blocking, deletion, and correction
You may obtain free information about your stored personal data, its origin, recipients, and the purpose of processing, with rights to correct, block, or delete. For assistance, contact the address in the imprint.
Right to processing limitation
You may request restriction of processing in the following cases:
- You dispute the accuracy of personal data during verification
- Processing is unlawful and you request restriction rather than deletion
- Data is no longer needed for our purposes, but you require it for legal claims
- You have lodged an objection pending the balance of interests determination
Restricted data may only be processed with your consent, for legal claim assertion, or for public interest protection.
Objection to marketing emails
The use of contact data published in the imprint for unsolicited advertising or information is hereby contradicted. We reserve the right to take legal action in the event of unsolicited transmission of advertising information, such as spam emails.
3. Data collection on our website
Cookies
Cookies are small text files that make our site user-friendly, effective, and secure. Session cookies are automatically deleted at the end of your visit; others persist until you delete them, enabling browser recognition on subsequent visits.
You may configure your browser to notify you about cookies, selectively accept them, or automatically delete them on close. Disabling cookies may limit site functionality.
Cookies required for electronic communication or for requested functions are stored under Art. 6(1)(f) DSGVO, reflecting our legitimate operator interests. Other cookies (such as those used for behavioral analysis) are covered separately below.
Server log files
Our providers automatically collect the following browser-transmitted information in server log files:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address
This data is not merged with other sources and is recorded under Art. 6(1)(f) DSGVO for technically error-free presentation and website optimization.
Contact form
Inquiries via our contact form, including your contact details, are stored for processing and follow-up. Data is not shared without your consent, based on your consent under Art. 6(1)(a) DSGVO. Revocation can be made via informal email notification. Data remains until you request deletion, revoke consent, or the purpose for storage ceases. Legal retention requirements are unaffected.
Inquiry by email or telephone
Email or telephone inquiries and all personal data they contain are stored for the purpose of processing the request, without third-party sharing. Processing occurs under Art. 6(1)(b) DSGVO (contract-related) or Art. 6(1)(a)/(f) DSGVO (consent / legitimate interests). Data persists until you request deletion, revoke consent, or the purpose ceases. Statutory retention requirements remain unaffected.
Registration on this website
Registration enables additional site features using the data you provide exclusively for the respective offer or service. Mandatory registration data must be complete; otherwise registration is refused.
Important changes are communicated via the email provided at registration. Processing is based on your consent (Art. 6(1)(a) DSGVO); revocation can be made via informal email notification. Legality of prior processing is unaffected. Registration data persists while your registration is active and is then deleted. Legal retention requirements remain unaffected.
Comment function on this website
Storage includes: the comment content, creation time, email address, and username (if you are not commenting anonymously).
IP address storage: IP addresses are stored in order to take action against the author in the event of legal violations such as slander or propaganda.
Storage period: Comments and associated data persist until the commented content is completely deleted or a legal requirement necessitates removal.
Legal basis: Storage is based on your consent (Art. 6(1)(a) DSGVO); revocation can be made via informal email notification. Prior processing legality is unaffected by revocation.
Processing of customer and contract data
Personal data is collected, processed, and used only to the extent necessary for the establishment, content, or modification of the legal relationship (inventory data) under Art. 6(1)(b) DSGVO. Usage data processing is limited to enabling the service or billing the user. Customer data is deleted upon order completion or termination of the business relationship. Legal retention requirements remain unaffected.
Data transmission upon service conclusion
Personal data transfers to third parties only when necessary (for example, to a payment institution), based on Art. 6(1)(b) DSGVO. Further transmission requires your express agreement. Data is not transferred to third parties for purposes such as advertising without your express consent.
4. Analysis tools and advertising
Google Analytics
This website uses Google Analytics, which employs cookies (text files enabling website usage analysis). Generated information typically transfers to Google servers in the USA for storage.
Legal basis: Art. 6(1)(f) DSGVO reflects our legitimate operator interests in analyzing user behavior to optimize our website and advertising.
IP anonymization: This website activates IP anonymization. Your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Full IP transfer to USA servers occurs only exceptionally and is shortened there. Google compiles website activity reports and provides related services on our behalf. IP addresses are not combined with other Google data.
Browser plugin: You may refuse cookies via your browser settings, but acknowledge potential functionality limitations. To prevent data collection and Google processing, download the browser plugin at tools.google.com/dlpage/gaoptout.
Google Analytics privacy: Additional information is available in the Google Privacy Policy.
Order processing: Weavy has concluded a Google contract implementing strict Swiss data protection authority requirements.
Demographic characteristics: This website uses Google Analytics demographic features, which generate age, gender, and interest reports derived from Google's interest-based advertising and third-party visitor data. This data cannot be assigned to specific persons. You may disable this feature via your Google Account ad settings or prevent all Google Analytics collection per the objection procedures above.
Return of personal information: Upon request and absent active contracts, Weavy returns all personal information and certifies its removal from electronic and paper records, except as required by Sarbanes-Oxley Act Section 802 retention requirements. Weavy specifies any required retention information.
5. Newsletter
Newsletter data
Newsletter subscription requires an email address and verification of ownership and consent. Any additional data is voluntary. Data exclusively supports the requested information transmission and is not shared with third parties.
Processing is based on your consent (Art. 6(1)(a) DSGVO). You may revoke consent via the unsubscribe link in any email or by informal email notification at any time. Prior processing legality is unaffected. Subscription data persists until you cancel the newsletter, at which point it is deleted. Other data remains unaffected.
6. Online marketing and partner programs
HubSpot
Weavy uses HubSpot for integrated online marketing covering:
- Content management (website and blog)
- Email marketing (newsletters and automated mailings)
- Reports and analytics
- Contact management (CRM)
- Landing pages and contact forms
Website visitors may learn about the company, download content, and provide contact and demographic information, which is stored on HubSpot servers. We may use this information to contact visitors and determine service interests.
All collected information remains subject to this Privacy Policy and supports marketing improvement exclusively. HubSpot, a USA-based software company, details its privacy at legal.hubspot.com/privacy-policy.
International data transfer: Services used outside server locations may result in international personal data transfer. Global support location calls may involve non-origin-country support. Personal data is handled per this Privacy Policy.
Legal and law enforcement compliance: Weavy cooperates with government and law enforcement for law enforcement and compliance. We will disclose any information in our possession to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate for legal process response, property and rights protection, public safety, or illegal / unethical activity prevention. Reasonable notification steps occur where legally permitted.
Third-party websites: Weavy bears no responsibility for third-party site privacy practices or content. You should review third-party privacy policies.
7. Integrations
The Weavy product integrates with external service providers and APIs requiring your consent, collecting only the minimum necessary information. The collected data is never shared with any third party, including AI models.
Google API
Weavy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
For any privacy-related questions, contact info@weavy.com. Our Data Protection Officer is reachable via the same address.