# Privacy notice

> What Weald holds and what it cannot hold. The encrypted content we have no key for, the operational metadata we do keep, and how long each is kept.

Source: https://getweald.com/privacy
Last modified: 2026-08-20

---

## What we hold

## What we cannot hold

Weald Protocol, a Delaware limited liability company, operates Weald.

Workspace content is encrypted on member devices under keys we never receive.

Version 2, published August 10, 2026. These terms govern the hosted service from the day it opens for purchase.

## What we do hold

We hold billing and instance data, connection metadata, storage totals, and access-set data needed to operate the relay.

Access sets do not identify workspace members.

## Why we hold it

We use this data to operate, secure, bill, and support the service. We do not sell or advertise with it.

## How long

*Control-plane retention*

| Data | Kept for |
| --- | --- |
| Request and application logs | 30 days |
| Verified webhook payloads | 30 days |
| Hourly usage samples | 35 days |
| Daily usage and rating receipts | 15 months |
| Account audit events | 2 years |
| Support requests | 180 days after closure |

Deletion follows this schedule unless a documented legal hold applies.

## Who else sees it

Providers run hosting, storage, authentication, payments, and aggregate public-page measurement. None can read workspace content.

## Your rights

Request account-data access, correction, or deletion. We respond within 30 days.

Privacy requests go to hunter@getweald.com.

Report a vulnerability to hunter@getweald.com.

## Cookies

The dashboard uses essential sign-in and request-protection cookies. Stripe has its own notice. Public-page measurement does not set analytics or advertising cookies.