Privacy Policy

weave is a human capital management platform provided by EMOR(“EMOR”, “we”, “us”). This policy explains how we handle personal data in two different roles.

• As a controller for data about visitors to this website, people who contact us or request a demo, and the business contacts at our customers.
• As a processorfor the data our customers put into their weave workspace, such as employee, payroll and candidate records. Each customer company is the controller of that data and decides how it is used. If you use weave through your employer, your employer’s privacy notice applies to that data and questions about it are best sent to them first. We will help them answer you.

Website visitors and prospects

• What you send us, such as your name, work email, company and message when you request a demo.
• Technical data needed to run and protect the site: IP address, browser and device type, and request logs. We do not use advertising trackers or third-party analytics on this site.

Workspace data, processed for our customers

• Identity and employment details: name, contact details, job, department, manager, employment history.
• Attendance: check-in and check-out times and, where your employer enables geofenced attendance, your device location at the moment you check in or out. weave does not track location continuously.
• Leave, payroll, tax and bank details, expense claims and receipts.
• Documents, policies acknowledged, performance goals and reviews, learning records and assigned assets.
• Recruitment data about candidates: CVs, application history, interview notes and offers.
• Sign-in and security data: credentials (stored only as a salted hash), single sign-on identifiers, session tokens, device push tokens, and an audit log of significant actions.

Some of this can be sensitive, such as bank or health-related leave details. Customers decide which modules and fields they use, and access within a workspace is limited by role.

• To provide, maintain and support weave for our customers and their users.
• To keep the service secure: authenticating users, preventing abuse and fraud, and keeping audit records.
• To send service messages, such as sign-in, password reset and approval notifications.
• To respond to enquiries and demo requests, and to manage our customer relationships.
• To meet legal obligations and to establish or defend legal claims.

We do not sell personal data, and we do not use workspace data for advertising or to build marketing profiles.

Where data protection laws such as India’s Digital Personal Data Protection Act, 2023 or the EU and UK GDPR apply, we rely on: performance of our contract with the customer; our legitimate interests in running a secure, reliable service and in responding to enquiries; compliance with legal obligations; and consent where the law requires it, for example the location permission your device asks for before a geofenced check-in. You can withdraw consent at any time, without affecting processing that happened before.

For workspace data, the customer as controller is responsible for having a lawful basis for its processing.

Some features, such as Copilot and the AI Recruiter, use machine learning to summarise, rank or draft content. Every AI output in weave is labelled as AI-assisted and presented as a suggestion for a person to review and edit. weave does not make decisions with legal or similarly significant effects about anyone, such as hiring or dismissal, solely by automated means.

We do not use customer workspace data to train general-purpose AI models.

We share personal data only with service providers that help us run weave, under written terms that require them to protect it and use it only on our instructions:

The current list of named sub-processors is available to customers on request at contact@emor.tech. We may also disclose data where the law requires it, to protect the rights and safety of people or of the service, or as part of a merger or acquisition, in which case this policy will continue to protect it.

Our providers may process data outside the country where it was collected. Where that happens we use the safeguards the applicable law requires, such as contractual clauses approved for that purpose, and we honour any data-residency commitments made in a customer’s agreement.

Workspace data is kept for as long as the customer’s agreement is active and as the customer configures. When an agreement ends, the customer can export its data, after which we delete it from active systems within the period set out in the agreement, unless the law requires us to keep it longer.

Audit logs are append-only by design so that the record of who did what cannot be altered; they are kept for the period the customer’s agreement specifies. Enquiry and demo-request data is kept for as long as needed to respond and manage the relationship.

We protect data with tenant isolation enforced on the server, role-based access checks on every request, hashed credentials, short-lived session tokens in httpOnly cookies, encrypted connections and an append-only audit trail. No system is perfectly secure, and we tell affected customers without undue delay if a breach affects their data. Read more on our Security page.

Depending on where you are, you may have the right to:

• access the personal data held about you and get a copy of it;
• have inaccurate data corrected and incomplete data completed;
• have data erased, or its processing restricted;
• object to processing, and withdraw consent you have given;
• receive your data in a portable format;
• nominate someone to exercise your rights if you cannot; and
• complain to us, and then to your data protection authority, such as the Data Protection Board of India.

For workspace data, please contact your employer first, since they control it. For anything else, or if you need help, write to contact@emor.tech. We will respond within the time the law allows and may need to verify your identity first.

weave is a workplace service and is not directed to anyone under 18. We do not knowingly collect children’s data.

We will update this page when our practices change and revise the date at the top. If a change is material, we will tell customers in advance by email or in the product.

Questions, requests and complaints about privacy go to our grievance officer at contact@emor.tech, EMOR.