Privacy Policy

2. Your manuscripts and research

Your research stays yours. Weave AI reads your manuscript and learns your research to do the work you asked for. That is the only thing that happens to either.

• Never trained on. Your papers are not training data. We do not use the content you upload to train or improve AI models, and we do not let our service providers do so.
• Never sold or shared. We do not sell your manuscripts or pass them to advertisers, data brokers or anyone else for their own purposes. Service providers that host or process data for us handle it only on our instructions.
• Never read by us. No one at Weave opens, reviews or samples your manuscript. A human expert reads it only when you ask one to. The only other exceptions are when you ask us to look, for example to fix a problem you have reported, or when the law requires it.
• Encrypted throughout. Your files are encrypted in transit and at rest, from the moment they reach us.
• Yours to take back. You can export your work, and you can delete a manuscript at any time. When you delete it, we delete it from our systems, and any remaining copies are removed as our backups cycle out.

What Weave AI learns about your research is used only to do work for you and the collaborators you choose. It does not train the model, and it is not used for anyone else.

The same commitments apply to the drafts, notes, references and other project material you keep in the Services.

3. Information we collect

Information you give us:

• Account details: your name, email address, sign-in credentials, and any profile details you add, such as your institution and field of study.
• Content: the manuscripts and project material you upload or create, and the searches and research interests you set up in Weave Stream.
• Collaboration details: the names and email addresses of co-authors you invite, and the comments and changes people make in shared projects.
• Messages: what you send when you contact us, register interest in a product, or give feedback.

Information collected automatically:

• Usage and device data: pages and features used, actions taken, dates and times, IP address, browser and device type, language, and error and performance logs.
• Cookies and similar technologies, described in section 8.

Information from others:

• If you choose to sign in with an account from another service, that service gives us your name and email address.
• If your institution sets up your access, or a colleague invites you to a project, they give us your name and email address.

If you pay for a plan in future, payments will be handled by a payment processor. We will receive billing details and a record of the payment, not your full card number.

4. How we use it

• To provide the Services: create and secure your account, store your projects, run the analyses you request, deliver the papers and recommendations you ask for, and let you work with co-authors.
• To support you and to send service messages about your account, security and changes to the Services.
• To keep the Services safe: prevent abuse, investigate incidents and fix faults.
• To understand how the Services are used and improve them, using usage data and aggregated statistics, never the content of your manuscripts.
• To send product news, where you have agreed or the law otherwise allows it. Every such email has an unsubscribe link.
• To meet our legal obligations and to establish, exercise or defend legal claims.

We do not make decisions about you that have legal or similarly significant effects by automated means alone.

5. Legal bases

In Canada, we rely on your consent, which you can withdraw at any time subject to legal and contractual limits, or on another ground the law allows.

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on: performance of our contract with you (providing the Services); our legitimate interests (securing and improving the Services, in ways that do not override your rights); your consent (marketing and any non-essential cookies); and compliance with legal obligations.

6. When we share information

We do not sell personal information, and we do not share it for targeted advertising. We share it only in these cases:

• Service providers that work for us, such as cloud hosting, AI infrastructure, email delivery, customer support tools, and sign-in and account management (Clerk). They are bound by contract to use the information only to provide their service to us and to protect it.
• Our affiliated companies, Scribendi and Edanz, whose teams help build and run Weave. Where their staff work on Weave, they handle personal information under this policy.
• Your collaborators and your institution, as you direct when you share a project or use an institutional plan.
• Human experts, when you ask one to review your work. They see only what you send them.
• Authorities or other parties, when the law requires it or when it is needed to protect the rights, safety or property of our users, the public or Weave.
• A successor, if Weave is involved in a merger, a financing or a sale of the business. The commitments in this policy continue to apply to your information, and we will tell you before it becomes subject to a different policy.

7. Where information is processed

We and our service providers may process personal information in Canada, the United States, Japan and other countries. While it is in another country it is subject to that country's laws, which may allow courts or authorities there to access it. When we transfer information out of the European Economic Area, the United Kingdom or Switzerland, we rely on adequacy decisions where they exist, such as the one for Canada, or on standard contractual clauses.

8. Cookies

We use cookies and similar technologies that are necessary to sign you in, keep your session secure and remember your preferences. We do not use advertising cookies. If we add analytics or other non-essential cookies, we will update this policy first and ask for your consent where the law requires it.

You can block or delete cookies in your browser settings. If you block the necessary ones, signing in will not work.

9. How long we keep it

We keep account information for as long as your account is open. We keep your content until you delete it or close your account. After that, we delete it or make it anonymous, and remaining copies are removed as our backups cycle out. We may keep limited records for longer where the law requires it, or where we need them to resolve a dispute or keep the Services secure.

10. Security

We protect personal information with safeguards suited to its sensitivity, including encryption in transit and at rest, access controls and monitoring. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the relevant regulators as the law requires.

11. Your choices and rights

Wherever you live, you can ask us for access to the personal information we hold about you, ask us to correct it, and withdraw your consent. You can update most account details and delete content yourself in the Services.

• Canada: you may also challenge our compliance with Canadian privacy law. If we cannot resolve your concern, you can complain to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.
• European Economic Area, United Kingdom and Switzerland: you also have the right to erasure, to restrict or object to processing, and to data portability, and the right to complain to your local data protection authority.
• United States: depending on your state, you may have the right to know, access, correct, delete and receive a copy of your personal information, and to appeal a decision we make about your request. We do not sell personal information or share it for cross-context behavioural advertising, and we will not treat you differently for using your rights.

To make a request, email us at the address below. We will need to confirm your identity, and we aim to reply within 30 days.

12. Children

The Services are for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the Services develop. We will post the new version here with a new date. If a change is material, we will also tell you by email or in the Services before it takes effect.