← Woven Saga

Privacy Policy

Effective date: July 3, 2026

1. Overview

Woven Saga is a service operated by Nimble CTO LLC (“we,” “our,” or “us”). We take the privacy of your family’s memories seriously. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data. By using the Service, you agree to the practices described here.

2. Information We Collect

Account information

When you register, we collect your name, email address, and password (stored as a secure hash). We also record the date and time you accepted these policies.

Family and content data

We store content you and your family members contribute to the Service, including text, photographs, audio, video, and other files you upload.

Usage and technical data

We collect standard server logs including IP addresses, browser user-agent strings, and timestamps of requests. This information is used for security, debugging, and service operation — not for advertising or profiling.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Service
  • Authenticate users and protect account security
  • Send transactional emails (account verification, password reset, invitations)
  • Respond to support requests
  • Meet legal and regulatory obligations

We do not use your family’s content to train AI models, and we do not sell your data to third parties for advertising purposes.

4. Data Sharing

We share your data only in the following limited circumstances:

  • Within your family: Content you contribute is shared with members of your family on the platform according to the privacy settings you configure.
  • Service providers: We use third-party infrastructure providers (cloud hosting, transactional email) that process data on our behalf under confidentiality agreements.
  • Legal requirements: We may disclose data if required to do so by law or in response to a valid legal process.

5. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (TLS), hashed passwords (bcrypt), and access controls limiting who can view your family’s content. No system is perfectly secure; we encourage you to use a strong, unique password and keep your login credentials private.

6. Data Retention

We retain your account data and family content for as long as your account is active. If you delete your account, we will remove your personal data from our active systems within 30 days. Some information may be retained in backups for a limited period thereafter.

7. Your Rights

Depending on your location, you may have rights to:

  • Access a copy of the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your account and associated data
  • Object to or restrict certain processing of your data
  • Export your data in a portable format

To exercise any of these rights, contact us at privacy@wovensaga.com.

8. Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will remove it.

9. Cookies and Tracking

Woven Saga uses session tokens stored in browser memory and HTTP-only cookies for authentication. We do not use third-party advertising cookies or cross-site tracking technologies.

10. SMS / Text Messaging

If you add and verify a mobile phone number, you may choose to opt in to receive text messages from Woven Saga. We use SMS only for purposes you enable, which are limited to: sign-in (two-factor authentication) codes and account notifications you have turned on. We do not send marketing or promotional text messages.

Consent to receive texts is not a condition of using the Service. You provide express consent by verifying your number and enabling text messages in your account settings, and we record the date and time of that consent. Message frequency varies based on your activity and settings. Message and data rates may apply. Reply STOP to any message to opt out at any time, or reply HELP for help. Carriers are not liable for delayed or undelivered messages.

Your mobile phone number and your SMS opt-in and consent information are not shared or sold to third parties or affiliates for their marketing purposes. We share your number only with the messaging provider that delivers texts on our behalf, solely to send the messages you requested.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and notify registered users by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

Privacy questions or requests? Contact us at privacy@wovensaga.com.