This policy explains how PlotWeaver Limited (“PlotWeaver”, “we”, “us”), a company registered in the United Kingdom with company number 16189457, collects and uses personal data when you visit our website, use the PlotWeaver dashboard, or call the PlotWeaver API. We are the controller of the personal data described here, except where we process data on behalf of a customer, as explained below.
What we collect
Account information
When we create an account for your organisation we collect the name and email address of each user, the organisation name, and the services enabled for it. Passwords are stored only as salted hashes.
Content you send to the API
To provide the service we process the text, audio and voice samples you submit, and the audio, transcripts and translations we return. This includes reference recordings uploaded to create a cloned voice.
Usage and technical data
For every request we record the time, the service and model used, the language, the amount processed (characters or seconds of audio), the response status, the API key used and the IP address. We use this for billing, usage reports, security and support.
Contact requests
If you email us, for example through the request access page, we keep your message and contact details to respond and to set up your account.
How we use it
- To provide, secure and support the PlotWeaver services under our agreement with your organisation.
- To measure usage, produce usage reports and invoices, and prevent abuse.
- To send service emails such as account set-up, password resets and important changes.
- To meet legal, accounting and regulatory obligations.
We do not sell personal data, and we do not use the content you send through the API to train our models unless your organisation has agreed to this in writing.
Legal bases
Under the UK GDPR and, where it applies, the Nigeria Data Protection Act 2023, we rely on: performance of a contract (providing the service to your organisation), legitimate interests (security, fraud prevention and improving reliability), and legal obligation (keeping financial records). Where we process content on a customer’s behalf, the customer is the controller and we act as its processor under our agreement.
Voice cloning
Cloned voices are created only from recordings the customer uploads. Customers must have the speaker’s permission to clone and use their voice. Reference recordings are stored privately, served only through short-lived signed links, and deleted when the cloned voice is deleted.
Who we share data with
We use carefully selected service providers to run PlotWeaver, including cloud hosting and storage (Amazon Web Services) and email delivery. They process data only on our instructions. We may disclose information where required by law or to protect our rights, users or the public.
International transfers
Our infrastructure is hosted in the United States, and our team works in the United Kingdom and Nigeria. Where personal data moves between countries we use appropriate safeguards, such as the UK International Data Transfer Agreement or standard contractual clauses.
How long we keep it
Account data is kept while your organisation’s account is active. API content is kept only as long as needed to process the request, except cloned-voice recordings and items you choose to keep, which stay until you delete them. Usage records are kept for as long as needed for billing and audit, including up to six years where accounting law requires it.
Security
We use encryption in transit, hashed passwords, scoped API keys that can be rotated and revoked, private storage with signed access links, and access controls on our systems.
Cookies and local storage
The website does not use advertising or analytics cookies. The dashboard stores your sign-in session and theme choice in your browser’s local storage so you stay signed in. You can clear these at any time in your browser settings.
Your rights
You can ask to access, correct, delete or export your personal data, object to or restrict certain processing, and withdraw consent where we rely on it. If your data was provided by your organisation, we may refer your request to it. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or the Nigeria Data Protection Commission.
Contact
For privacy questions or requests, email info@plotweaver.app or write to PlotWeaver Limited, London, United Kingdom.
We may update this policy from time to time. We will post the new version here and, for significant changes, tell account holders by email.