Privacy Policy

Who we are

Infinity Loom Ltd, registered in England and Wales, company number 15581022, with registered office at 69 Torrington Road, Ashford, England, TN23 7TG ("we", "us", "our"), operates the Fateweaver application and website (the "Service"). Infinity Loom Ltd is the data controller for personal data processed through the Service. This policy explains how we collect, use, and protect your information when you use the Service.

Information we collect

• Account information: name, email address, authentication identifiers.
• Usage data: pages viewed, features used, approximate region, device/browser metadata (IP address is processed transiently for routing and security).
• Content you provide: relationship maps, entities, collections, tags, and any files or metadata you upload or create within the app.
• Support communications: messages sent via contact forms or email.

How we use information

• Provide, maintain, and secure the Service.
• Improve features, performance, and user experience.
• Communicate updates, respond to support, and provide notices.
• Comply with legal obligations and enforce terms.

Cookies

We use only essential cookies: cookies that keep you signed in, maintain your session, and protect the sign-in process against attacks. These are required for the Service to function. We do not use advertising cookies or third-party tracking cookies.

Content you share with others

Some features let you share content. Content in a map or collection you share with collaborators is visible to those collaborators. Content you choose to publish publicly (for example, a public pack or a map listed on our discovery pages) is visible to anyone who can access the Service, along with your display name. You can unpublish public content at any time, though copies others have already viewed or followed may persist in their accounts.

Legal bases for processing

Where required under UK GDPR and EU GDPR, we rely on one or more of the following:

• Performance of a contract (to provide the Service).
• Legitimate interests (e.g., product improvement, security).
• Consent (where requested and obtained).
• Compliance with legal obligations.

Data retention

We retain personal data only as long as necessary for the purposes described in this policy. As a guide:

• Account information and content: kept while your account is active, and deleted when your account is deleted (residual copies in encrypted backups are removed as backups rotate).
• Support communications: kept for up to two years after the request is resolved.
• Records we must keep for legal, tax, or dispute-resolution reasons: kept for the period required by law.

You may request deletion of your account data at any time (see Your rights).

Sharing and processors

We do not sell your personal data. We share it only with service providers who help us operate the Service, and only on our instructions and under appropriate safeguards:

• OVHcloud - cloud infrastructure that hosts our application, database, and transactional email. Your data is hosted within OVH's infrastructure.
• Stripe - payment processing, if you purchase a subscription. Stripe handles payment details under its own security and privacy standards; we never see your full card details.

International transfers

If we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses or similar mechanisms, as required by law.

Security

We implement administrative, technical, and physical safeguards designed to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, object to or restrict certain processing, or withdraw consent where applicable. To exercise these rights, contact us at scott@fate-weaver.com.

If you are in the UK, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you can complain to your local data protection authority. We would appreciate the chance to address your concerns first.

Children's privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. We will post the updated version and revise the "Effective date" above. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.