1. Who is responsible

EdgeWeave Ltd (company number 17491262, registered office 66 Paul Street, London, England, United Kingdom, EC2A 4NA) is the controller of your personal data. Contact us about anything in this notice at [email protected].

2. The short version

• The EdgeWeave app runs on your computer. Your workflows, files and data stay there.
• We do not use advertising or analytics trackers on the website or in the app.
• We collect personal data when you buy something, publish on the marketplace, or contact us.
• We do not sell your data.

3. What we collect and why

• Buying a module or licence. Your email address, the identifier of the EdgeWeave install you bought it for, the Stripe payment reference and the licence we issue. We use this to take payment, issue and check your licence, send your receipt and key, stop you paying twice, handle refunds and give support. Basis: contract. We also keep records of sales for tax and accounting, which is a legal obligation.
• Shop orders. Your name, delivery address, phone number, email address and what you ordered, as collected at checkout. We use it to fulfil, deliver, and handle returns for the order. Basis: contract.
• Publishing as a creator. Your email address, your Stripe Connect account reference, and the modules you publish. Stripe collects your identity and bank details for payouts itself; we do not receive them. Basis: contract.
• Verification codes. Creator sign-up and key recovery send a short-lived code to your email. We keep the code in hashed form, briefly. Basis: contract and our legitimate interest in keeping accounts secure.
• Licence checks in the app. When you activate or use a paid licence, the app sends your licence key and an install identifier to our server so we can confirm it is valid and how many installs it is on. Basis: contract.
• Using the marketplace and downloading. Our servers and our hosting providers see your IP address and basic request details when you browse the marketplace, check for app updates or download the installer. We use them to deliver the service, prevent abuse and limit request rates. Basis: legitimate interests.
• Contacting us. Your email address and what you write to us, so we can reply. Basis: legitimate interests (and contract if it relates to an order).

The app's AI features send what you choose to the AI provider you set up (such as OpenAI, Anthropic, Google or a model on your own machine), using your own key. That goes directly from your computer to the provider. We do not receive it. Their privacy terms apply.

4. Cookies and local storage

This website sets no advertising or tracking cookies. Your browser may store your light or dark theme choice on your device so the site remembers it. That is needed for the site to work as you expect and is not shared with anyone.

5. Who we share it with

We use these companies to run the service. They act on our instructions, except where stated.

• Stripe processes payments and creator payouts, and is a controller of its own for fraud and regulatory purposes.
• Cloudflare hosts this website, protects it from abuse, and stores the installer and module downloads.
• Render hosts the marketplace service and its database.
• Our email provider sends receipts, keys and verification codes.
• A print and delivery partner receives your name, address and order details to make and post shop orders.
• Professional advisers and authorities where the law requires, or to protect our legal rights.

We do not give creators whose modules you buy your personal data. Books sold through other retailers are sold under those retailers' own privacy terms.

6. Transfers outside the UK

Some of these providers are in, or use servers in, the United States and other countries. Where that happens we rely on an approved safeguard such as the UK's international data transfer agreement or addendum, or an adequacy decision such as the UK extension to the EU-US Data Privacy Framework.

7. How long we keep it

• Sales and order records: 6 years after the end of the tax year, for tax and accounting.
• Licences: for as long as the licence is valid, then as part of the sales record.
• Verification codes: deleted after use or a few minutes after they expire.
• Support emails: up to 2 years after the matter is closed.
• Server and hosting logs: kept briefly by the hosting provider, normally days to a few weeks.

8. Your rights

You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Deletion is limited where we must keep a record, such as a sale. Email [email protected] and we will reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would like the chance to put it right first.

9. Children

Our services are not aimed at children under 13 and we do not knowingly collect data from them.

10. Changes

If we change this notice we will update the date above and, for important changes, tell you by email or on the marketplace. See also our terms of service.