Privacy policy

Introduction

weldable, Inc. ("weldable", "we", "us", or "our") operates the weldable workflow orchestration platform. This privacy policy explains what information we collect, how we use it, and the choices you have about that information.

By using our services, you agree to the collection and use of information described in this policy. If you do not agree, please do not use our services.

Information we collect

We collect information in the following categories:

• Account information. When you register, we collect your email address and a hashed version of your password. We never store your password in plain text.
• Workflow data. We store the workflow definitions, run history, inputs, outputs, and metadata you create while using the platform. This is the core content of the service.
• Usage and device data. We collect information about how you use the service, including pages visited, features used, timestamps, IP address, browser type, and operating system.
• Cookies and similar technologies. We use session cookies required for authentication. See the Cookies section below for details.

How we use your information

We use the information we collect to:

• Provide, operate, and improve the weldable service
• Authenticate you and keep your account secure
• Send transactional emails such as account confirmations and password resets
• Communicate product updates to users who have opted in
• Diagnose bugs and improve reliability
• Comply with legal obligations

We do not use your workflow data to train machine learning models or share it with third parties for advertising purposes.

How we share your information

We share your information only with the infrastructure providers required to operate the service. These include Vercel (hosting), Supabase (database), and AWS (worker compute). Each provider processes data only as necessary to deliver their service to us and is bound by their own privacy commitments.

We do not sell your personal information. We do not share it with advertising networks or data brokers.

We may disclose information if required by law, court order, or to protect the rights, property, or safety of weldable, our users, or the public.

Data storage and security

Your data is stored in the United States using Vercel, Supabase, and AWS infrastructure. We use encryption in transit (TLS) and at rest for all personal data. Account passwords are managed by our authentication provider and are never stored in plaintext.

No method of transmission over the internet or electronic storage is 100% secure. We take reasonable precautions to protect your data, but we cannot guarantee absolute security.

Data retention

We retain your account information and workflow data for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law.

Your rights

Depending on your location, you may have rights under applicable privacy law, including the GDPR (for users in the European Economic Area) and the CCPA (for California residents). These rights may include:

• The right to access the personal information we hold about you
• The right to correct inaccurate information
• The right to request deletion of your personal information
• The right to object to or restrict certain processing
• The right to data portability
• The right to opt out of the sale of personal information (we do not sell personal information)

To exercise any of these rights, contact us at privacy@weldable.ai.

Cookies

We use strictly necessary session cookies to keep you signed in. We do not use tracking cookies or third-party advertising cookies. You can configure your browser to refuse cookies, but doing so will prevent you from signing in to the service.

International transfers

Our infrastructure is based in the United States. If you access the service from outside the US, your information will be transferred to and processed in the US. By using the service, you consent to this transfer. Where required by law (such as for EEA users), we rely on appropriate transfer mechanisms to ensure your data is protected.

Children's privacy

The weldable service is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe we have collected information from a minor, please contact us and we will delete it promptly.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. For material changes, we will notify registered users by email before the change takes effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

Contact us

Questions or concerns about this privacy policy? Contact us at privacy@weldable.ai.