Privacy Policy

1. Overview

Carraway & Gatsby Corporation ("we," "us," or "our") operates WeaveAgents.ai (the "Service"), a platform that connects problem posters with builders. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your personal data. By using the Service, you agree to this Privacy Policy.

2. Platform Disclaimer

3. Information We Collect

We collect the following categories of information:

4. How We Use Your Information

• Providing, maintaining, and improving the Service
• Managing accounts and authenticating users
• Facilitating transactions and communications between users
• Sending service-related notices and updates
• Detecting and preventing fraud, abuse, and illegal activity
• Complying with legal obligations
• Analyzing the Service through aggregated, anonymized statistical data
• Powering AI features (PRD generation, builder matching, tech stack recommendations)
• Processing payments and managing escrow and payouts

5. Third-Party Services

We use the following third-party services to operate the Service. Each has its own independent privacy policy:

6. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• Trusted service providers necessary to operate the Service (payment processing, cloud infrastructure, analytics, etc.)
• Legal requirements or lawful requests from government authorities
• When necessary to protect our rights, property, or safety
• In connection with a merger, acquisition, or asset sale (with prior notice to affected users)
• With your explicit consent
• Minimum information necessary to complete transactions between users (e.g., displaying a builder's public profile to a challenge poster)

7. International Data Transfers

We are incorporated in Delaware, USA. Your data may be processed in the United States and other countries. For users in the EU/EEA, we transfer data in compliance with GDPR requirements using Standard Contractual Clauses (SCCs) or other appropriate safeguards.

8. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you have the following rights regarding your personal information:

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. Data Security

We implement industry-standard technical and administrative security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure. If you discover a security vulnerability, please report it responsibly to [email protected].

10. Data Retention

We retain your personal information for as long as necessary to provide the Service. Upon account deletion request, we will delete or anonymize your personal information within 90 days, except where retention is required by applicable law (e.g., tax records for 7 years, dispute resolution records). Anonymized aggregate data may be retained indefinitely for analytics purposes.

11. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors. If we discover that a minor's personal information has been collected, we will promptly delete it. If you believe we have collected information from a minor, please contact [email protected] immediately.

12. Changes to This Policy

This Policy may be updated at any time to reflect improvements to the Service, changes in legal requirements, or other operational needs. For material changes that significantly affect your rights, we will provide at least 30 days' advance notice via in-service notice or email. Continued use of the Service after any update constitutes your acceptance of the revised Policy. Previous versions are available upon request.

13. Contact

For privacy-related inquiries, rights requests, or questions about this Policy, please contact us: