Privacy policy
This policy explains how Woven Worx Solutions (Pty) Ltd ("Woven Worx", "we") handles personal information when you use Spider, our morning briefing assistant, and the pages hosted on spider.wovenworxsolutions.co.za. We process personal information in line with the Protection of Personal Information Act, 2013 (POPIA).
Who we are
Woven Worx Solutions (Pty) Ltd, registration number 2026/400699/07, Pretoria, South Africa. Our Information Officer is Keanan Fourie, reachable at wovenworxsolutions@gmail.com.
What information Spider accesses
Spider only accesses accounts that the account owner explicitly connects and authorises. Depending on what is connected, this may include:
- Gmail (read-only): sender, subject, date and content of messages received in the last 24 hours.
- Google Calendar (read-only): titles, times, locations and attendees of events for the current day.
- Website leads: names, contact details and messages submitted through the account owner's website forms.
- Meta advertising data: campaign names, spend and performance results. This does not include personal information about people who saw the ads.
- Contact details for delivery: the WhatsApp number or phone number the briefing is sent to.
- Call transcripts: if the phone-call briefing is enabled, the conversation may be transcribed so Spider can respond during the call.
How we use it
We use this information only to create and deliver the account owner's briefing and to carry out actions the account owner requests during a briefing. We do not sell personal information, use it for advertising, or use it to build profiles of anyone.
Google user data
Spider's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Google data is used only to provide the briefing features the user can see and has authorised.
- We do not use Google data for advertising, and we do not sell it.
- No person at Woven Worx reads Google data unless the user asks us to for support, it is needed for security or to investigate abuse, or the law requires it.
- Google data is not used to train general-purpose AI models.
Service providers we use
To run Spider, information is processed by the following providers, under their own security and privacy commitments:
- Supabase: database and scheduled functions that store briefings.
- Anthropic: the AI model that writes the briefing. Data sent through its commercial API is not used to train its models.
- Meta (WhatsApp Business Platform): delivery of text briefings.
- Voice and telephony providers: placing phone-call briefings, where enabled.
- Netlify: hosting of this website.
Some of these providers store or process information outside South Africa. Where that happens, we rely on providers bound by data protection obligations offering protection comparable to POPIA, as section 72 of POPIA requires.
How long we keep it
Raw data pulled from connected accounts is used to generate the briefing and is kept no longer than 30 days. Generated briefings are kept for up to 90 days so the account owner can look back on them, unless they ask us to delete them sooner. When a connection is removed, we delete its access tokens.
How we protect it
Access tokens and keys are stored as encrypted secrets, database access is restricted to the service itself, and connections use encryption in transit. Spider requests read-only access wherever read-only access is available.
Your rights
Under POPIA you may ask to see the personal information we hold about you, ask us to correct or delete it, object to its processing, and withdraw your consent at any time. You can revoke Spider's access to your Google account at any time from your Google account permissions. To make a request, email wovenworxsolutions@gmail.com.
If you are unhappy with how we handle your information, you may complain to the Information Regulator of South Africa at inforegulator.org.za.
Changes to this policy
If we change this policy, we will update the effective date above. Material changes will be communicated to account owners before they take effect.