Privacy Policy
Everything you write here, your journal, what you brought to the fire, what you kept, the words from Alba you chose not to let go of, is locked before it is stored. Locked in a way that means even we cannot read it as a matter of course. It belongs to you and it stays that way. The only exception is set out in Moderation and safety review below.
What Alba remembers of you is held the same way. Locked. Private. Used only to let her know you when you return, except as set out in Moderation and safety review below.
Your name, your date of birth, the place you live, are kept safely and cannot be seen by anyone other than you.
Your email is held only to let you in and to reach you when you have asked us to.
Nothing you share with Alba trains any system. Nothing leaves this village for any commercial purpose. Nothing is sold.
You can download everything we hold about you at any time from your account page. You can delete your account and all the data held against it at any time from the same place. When you leave, what is yours comes with you.
Weavermere is operated by Alcestra, trading as Weavermere, registered in France. [ADDRESS TO BE ADDED ON REGISTRATION]
Weavermere is the data controller for all personal data processed through this platform.
For all matters relating to this policy, your data, or your rights, contact us at contact@weavermere.com. We aim to respond within 72 hours.
In using Weavermere, the following information is processed to provide the service:
- Email address: required to create and maintain your account. Legal basis: performance of a contract.
- Display name, date of birth, country of residence: used to personalise your experience and, where relevant, to provide localised information. Legal basis: your consent.
- Conversations with Alba: on paid tiers, a summary of your conversations is retained so that Alba can remember you across sessions. This is stored in encrypted form. Free tier conversations are not retained after the session ends. Legal basis: performance of a contract.
- Journal entries, satchel contents, and Brightening records: what you write in your journal, the words you choose to keep, and your Brightening fire and keep entries are stored in encrypted form and are accessible only to you. Legal basis: performance of a contract.
- Moderation flags: where a message you send raises a safety concern (for example, language suggesting risk of harm to yourself or someone else) or breaches basic standards of conduct (threats, harassment, hate speech, or requests for information intended to harm another person), that message is logged so it can be reviewed. See Moderation and safety review below. Legal basis: legitimate interests, in keeping the platform and its users safe.
- Subscription status: whether you hold a paid subscription, and which tier. Payment card details are never processed or stored by Weavermere. Legal basis: performance of a contract.
- Usage data: pages visited, frequency, and session duration, used in aggregate to understand and improve the platform. Legal basis: legitimate interests.
No information is processed for advertising purposes. No information is sold or shared with third parties for commercial gain.
Your personal data is stored on servers located within the European Union. Weavermere uses third-party services to operate the platform, including infrastructure providers, an authentication service, and a payment processor. Where any of these services process data outside the EEA, appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
Payment processing is handled entirely by a third-party payment provider. Weavermere never receives or stores your card details.
Account data is kept for as long as your account is open. You may close your account and delete all data held against it at any time from your account page. Deletion is immediate from the live platform. Residual copies in encrypted backups are purged within 30 days as part of our normal backup cycle.
Flagged content is retained for 30 days from the date of the flag, then deleted, except where retention is required to respond to an ongoing safety or legal matter.
Conversation summaries, journal entries, satchel contents, and Brightening records are retained for as long as your subscription is active. Following cancellation or downgrade, this data is retained for 90 days before deletion.
Usage data is held in aggregated, anonymised form and is not linked to individual accounts once those accounts are closed.
Weavermere uses browser local storage to maintain your login session. This is strictly necessary for the platform to function.
We use Google Analytics to understand how the platform is used in aggregate. This places cookies on your device. No personally identifiable information is sent to Google Analytics. You can manage your cookie preferences through the cookie banner on this site or through your browser settings.
We do not use advertising cookies or third-party tracking for commercial purposes.
Weavermere is designed for adults. Users under 16 are welcome with the supervision and consent of a parent or guardian. We do not knowingly hold personal data from children under 13. If you believe a child under 13 has registered without parental consent, contact us at contact@weavermere.com and we will act promptly.
All data is transmitted over HTTPS. Access to your data is protected by security policies that ensure each user can access only their own information. Passwords are never stored in plain text.
Your journal, satchel contents, Brightening records, and Alba's memory of you are encrypted at the application level before reaching the database, providing a further layer of protection beyond the database's own security.
If you discover a security vulnerability, please report it to contact@weavermere.com.
Conversations with Alba are encrypted and are not read by any person as a matter of course. Two specific exceptions exist, and only these two.
Safety concern. If a message contains language suggesting you may be in danger, including references to suicide or self-harm, the message is flagged so that crisis support resources can be shown to you, and the person responsible for platform safety is alerted so they can confirm the flag is genuine. This exists to get help to someone who may need it, not to monitor conversations generally.
Abuse or harmful conduct. If a message contains threats, sexual harassment directed at Alba or the people who built her, hate speech, or requests for information intended to harm another person, the message is logged and reviewed by the person responsible for platform safety. Repeated instances result in the account being blocked. Where conduct may be unlawful, it may be reported to the relevant authorities.
Outside these two circumstances, conversations, journal entries, and personalised pieces are not accessed by anyone at Weavermere. Where content is reviewed under either exception, only the flagged message and immediate surrounding context are seen, not your full history.
Flagged content is retained for 30 days from the date of the flag, then deleted, except where retention is required to respond to an ongoing safety or legal matter.
Under the GDPR, you have the following rights in relation to your personal data:
- Right of access: you may request a copy of the personal data we hold about you.
- Right to rectification: you may correct inaccurate data through your account settings at any time.
- Right to erasure: you may close your account and delete all your data at any time from your account page. This is immediate and cannot be undone.
- Right to data portability: you may download a copy of your data at any time from your account page.
- Right to object: you may object to processing based on legitimate interests. We will review and respond within 30 days.
- Right to restrict processing: in certain circumstances, you may request that we limit how we process your data.
- Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at contact@weavermere.com.
You also have the right to lodge a complaint with your national supervisory authority. In France, this is the CNIL. In the United Kingdom, it is the ICO.
We may update this policy from time to time. The date at the top of this page will reflect the most recent revision. For changes that materially affect how your data is used, we will notify you by email.