Privacy Policy
Last updated: 3 November 2026
1. Who We Are
Woven is operated by Polyverse Ventures ("we", "us", "our"). We provide a customer engagement platform for small businesses, delivered via WhatsApp. For privacy-related questions, contact us at privacy@thankswoven.com.
2. What Data We Collect
Data you provide directly:
- Account information: your name, email address, and business details when you register.
- Business configuration: message templates, scheduling preferences, and settings you create in the platform.
Data about your customers (processed on your behalf):
When you use Woven to communicate with your customers, we process:
- Customer names and WhatsApp phone numbers
- WhatsApp message content sent and received through the platform
- Appointment and booking information
Automatically collected data:
- Usage data: how you interact with the platform (pages visited, features used)
- Technical data: IP address, browser type, and device type
3. How We Use Your Data
We use your data to:
- Provide and operate the Woven platform
- Send appointment reminders and business communications on your behalf via WhatsApp
- Process bookings and manage your customer relationships
- Improve and develop the platform
- Comply with legal obligations
When we process your customers' data, we act as a data processor on your behalf. You remain the data controller and are responsible for ensuring you have a lawful basis for processing your customers' data.
4. WhatsApp and Meta
Woven uses the Meta WhatsApp Business Cloud API to deliver messages. Meta is a third-party service provider and processes message data in accordance with Meta's Privacy Policy and Terms of Service. By using Woven, you acknowledge that messages sent via the platform are routed through Meta's infrastructure.
Meta may process data outside the UK and European Economic Area. We rely on Meta's Standard Contractual Clauses for such international transfers.
5. Data Retention
We retain your account data for as long as your account is active, and for up to 12 months after account closure for legal and accounting purposes.
Message and communication data is retained for up to 90 days to support platform functionality, after which it is deleted. You may request earlier deletion at any time (see Your Rights below).
6. Your Rights Under UK GDPR
If you are based in the UK or European Economic Area, you have the following rights:
- Right of access: you can request a copy of the personal data we hold about you.
- Right to rectification: you can ask us to correct inaccurate data.
- Right to erasure: you can ask us to delete your personal data, subject to legal obligations.
- Right to portability: you can request your data in a machine-readable format.
- Right to restrict processing: you can ask us to limit how we use your data.
- Right to object: you can object to processing based on our legitimate interests.
To exercise any of these rights, email privacy@thankswoven.com. We will respond within 30 days.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies and Analytics
Woven uses Umami for website analytics. Umami is a privacy-focused, cookie-free analytics tool — it does not use cookies and does not collect personally identifiable information. No cookie consent banner is required for our analytics.
We do not use advertising cookies or tracking cookies.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. The "Last updated" date above reflects the most recent revision.
9. Contact
For privacy-related questions or to exercise your rights, contact us at privacy@thankswoven.com.
Polyverse Ventures
thankswoven.com
