Privacy policy

Wvr Tech Sweden AB, org nr 559610-1443, Vanadisplan 8, 113 31 Stockholm, Sweden, is the controller for the personal data described in sections 2 and 3, and for the account and business data in section 4. Write to us about personal data at hello@wvr.tech.

For data in an app your organisation runs on Weaver, your organisation is the controller and we are its processor. Our data processing terms cover that. Ask your organisation first if your question is about one of its apps.

Our hosting provider, Cloudflare, handles your IP address, browser details and the pages you request in order to deliver the site and protect it from attacks. Our legal basis is our legitimate interest in running a secure website (GDPR Article 6(1)(f)). Cloudflare keeps firewall and analytics events for 31 days.

The site stores your light or dark theme choice in your browser, and it never leaves your device. When you log in from this site, we set one cookie that remembers which Weaver environment your company uses, so your next login goes straight there. It holds only that environment’s name and expires after a year. We do not keep the email address you type.

We use PostHog, hosted in the EU, to see which pages are visited and how visitors move through the site. PostHog receives your IP address, browser details and the pages you view. It sets no cookies and stores nothing on your device, and we do not identify you. Our legal basis is our legitimate interest in understanding how the site is used (Article 6(1)(f)).

When you email us or meet us, we process your name, contact details, employer and what you tell us, in order to answer you and to discuss working together. Our legal basis is our legitimate interest in communicating with people and companies who contact us (Article 6(1)(f)), or taking steps towards a contract (Article 6(1)(b)).

We keep this data for 24 months after our last contact, unless it becomes part of a customer relationship. Email to our address passes through Forward Email, which forwards it to our own mailboxes.

When your organisation gives you access to Weaver, we process:

• Account data: your name, email address, avatar, role and organisation, usually received from your organisation’s identity provider.
• Usage and audit data: sign-ins, changes you make, what you deploy and your AI usage and cost.
• Content you create: code, files, and the prompts and AI conversations in your work. This may include personal data if you enter it.
• Support messages you send us.

We process this to provide the platform under our agreement with your organisation, on its instructions as controller. Where we decide the purpose ourselves, namely to keep the platform secure, administer customer accounts, invoice and meet legal obligations such as bookkeeping, we rely on our legitimate interest (Article 6(1)(f)) and on legal obligation (Article 6(1)(c)).

AI conversations and AI usage records in the platform are kept as agreed with your organisation. Accounting records are kept for seven years, as Swedish law requires. We do not use your content to train AI models and we make no decisions about you by purely automated means.

We do not sell personal data. We share it only with suppliers who process it for us under contract, with your organisation where it is the controller, and with authorities where the law requires it.

Our suppliers for the platform are Hetzner Online GmbH, Cloudflare, Inc., AI model providers, Twilio Inc. (including SendGrid), Tailscale Inc.. The data processing terms list what each one does and where. If you build with an AI model, what you enter is sent to the provider of that model.

Apps and their data run on infrastructure in the EU by default. Some suppliers process data outside the EU/EEA, including in the United States. When they do, we rely on a European Commission adequacy decision, such as the EU–US Data Privacy Framework, or on its Standard Contractual Clauses. Write to us for a copy of the safeguards.

You have the right to:

• get a copy of your personal data and information about how we use it
• have incorrect data corrected
• have data erased, or its use restricted, in certain cases
• object to processing based on our legitimate interest
• receive data you gave us in a portable format, in certain cases

Write to hello@wvr.tech and we will answer within one month. We may need to confirm who you are. Some records, such as security audit logs and accounting records, may have to be kept even after a request to erase them, and we will tell you if so. If your request concerns an app your organisation runs, we will pass it on to your organisation.

You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), or the supervisory authority where you live.

We update this policy when our processing changes, and we show the date of the latest version here. Last updated: 11 November 2026.