Last updated: April 2, 2026

Privacy Policy

Afferte LLC, a Nevada limited liability company, doing business as WovenTribute (“WovenTribute,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our platform and services (the “Service”).

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, and password when you create an account
• Payment information: Billing details processed securely by Stripe (we do not store credit card numbers)
• User Content: Photos, videos, and text messages you upload to create tributes
• Contributor information: Name and optional message provided by contributors who do not create accounts
• Communications: Messages you send to us for support or feedback

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, and interactions with the Service
• Device information: Browser type, operating system, and device type
• Analytics data: We use Plausible Analytics (privacy-focused, no cookies, no personal data collection), Vercel Analytics (Web Vitals performance data), and Sentry (error tracking for reliability)

1.3 Information We Do NOT Collect

• We do not use tracking cookies for advertising
• We do not sell your personal information
• We do not use your photos or content to train AI models
• Plausible Analytics does not collect personal data or use cookies

2. How We Use Your Information

We use your information to: provide, operate, and improve the Service; process payments and manage subscriptions; send transactional emails (account confirmations, celebration reminders, password resets); respond to support requests; monitor for abuse and enforce our Terms of Service; and generate anonymized, aggregate analytics to improve the product.

We do NOT use your information to: serve advertisements; sell to third parties; train AI models on your personal content; or build advertising profiles.

3. AI Processing

Our AI technology processes your uploaded content (photos, videos, text) to assemble tributes. This processing includes analyzing sentiment, determining narrative ordering, and assigning visual layouts. AI processing occurs on our servers and through our AI service provider (OpenAI). Content sent to OpenAI for processing is subject to OpenAI’s data usage policies. We do not use your content for AI model training.

Photo analysis (face detection, focal point estimation, crop safety assessment) is performed via AI to improve how your photos are displayed. This analysis data is stored with your media records and is not shared externally.

4. How We Share Your Information

We share your information only in the following circumstances:

• Service providers: We use third-party services to operate the platform, including Supabase (database and authentication), Stripe (payments), Vercel (hosting), AWS (video processing), OpenAI (AI assembly), Resend (email), Plausible (analytics), and Sentry (error tracking). These providers access your data only as needed to perform their services.
• Tribute sharing: When you publish a tribute, it becomes accessible via its unique URL. Anyone with the URL can view the tribute content. PIN-protected tributes require additional authentication.
• Legal requirements: We may disclose information if required by law, legal process, or government request, or if necessary to protect the rights, property, or safety of WovenTribute, our users, or the public.

We do not sell, rent, or trade your personal information.

5. Data Storage and Security

Your data is stored on servers operated by Supabase (PostgreSQL database) and Supabase Storage (media files), hosted in the United States. We use industry-standard security measures including encrypted connections (HTTPS/TLS), row-level security policies, and secure authentication.

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your account information and User Content for as long as your account is active. If you delete your account, we will delete your personal information and User Content within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms).

Media files (photos and videos) are deleted from storage when the associated tribute or account is deleted.

Accounts inactive for 24 months may be deactivated and associated data deleted (see our Terms of Service, Section 3).

7. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal information we hold about you; correct inaccurate information; request deletion of your information; export your data; and opt out of certain processing.

To exercise any of these rights, contact us. We will respond within 30 days.

You can delete your account at any time through your account settings, which will initiate deletion of all associated data.

8. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete it promptly. If you believe we have inadvertently collected information from a child under 13, please contact us.

9. International Users

The Service is operated from the United States. If you are accessing the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service. The “Last updated” date at the top indicates when the policy was last revised.

11. Contact

If you have questions about this Privacy Policy, contact us