Weft ("we") provides a support inbox that brings customer conversations from channels such as Slack, email, Microsoft Teams and Discord into one place. This policy explains what we collect, why, and the choices you have.
What we collect
- Account data: your name, email address, and, if you sign in with Google, your Google account's basic profile (name, email, profile picture). We never receive your Google password.
- Workspace content: the conversations, customers, notes and settings your team adds to Weft or connects through integrations.
- Usage and technical data: request logs, error reports and device information needed to run, secure and debug the service.
How we use it
We use this data only to provide, secure and improve Weft: to sign you in, deliver and sync your team's conversations, send service emails (such as verification and invitations), and diagnose problems. We do not sell personal data and do not use workspace content to train AI models shared with other customers.
Google user data
If you sign in with Google, we request only your basic profile and email address to create and identify your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Product analytics
Inside the Weft app we record which screens are opened and which actions are used (for example "reply sent" or "label created"), so we can see which features help and where setup gets stuck. These records hold your user and workspace identifiers, the action's name, the campaign that brought you to sign up, and an approximate location derived by Cloudflare. They never contain message text, customer details or IP addresses, and we delete them after 180 days.
Website analytics
On weft.day we measure which pages are read and which buttons are clicked, without cookies. Each browser tab gets a random identifier that lives only in that tab's session storage, and we record the page, the event, the campaign or referring site that brought you, and an approximate location (country, region and city) derived by Cloudflare. We do not store IP addresses or browser fingerprints, and we delete these records after 30 days. We also use Cloudflare Web Analytics, which is cookieless. Tracking is skipped when your browser sends Do Not Track or Global Privacy Control.
Where data is processed
Weft runs on Cloudflare and stores data in Neon (Postgres) in the United States. Error reports are processed by Sentry. These providers act on our behalf under contracts that protect your data.
Security and retention
Data is encrypted in transit and at rest, each workspace's data is isolated at the database level, and secrets such as integration tokens are encrypted with per-workspace keys. We keep data while your account is active and delete it when you ask us to or close your workspace, except where the law requires us to keep it.
Your choices
You can access, correct, export or delete your data, and you can revoke Google access at any time from your Google account settings. To make a request, email hello@weft.day.
Changes
We will post updates here and, for significant changes, tell workspace owners by email.