Privacy Policy

WeaveFeed is operated by Weaverse Technology JSC ("Weaverse", "we", "us", or "our"), located at 102 Tran Phu, Mo Lao, Ha Dong, Hanoi, Vietnam. WeaveFeed connects a Shopify merchant's professional Instagram account and provides storefront-ready feed content.

We collect only the information needed to provide the service:

• Shopify information, including the store domain, app session credentials, and identifiers for files managed by WeaveFeed.
• Instagram account information, including the Instagram user ID, username, granted permissions, connection status, and token expiry.
• An Instagram access token. It is encrypted at rest, used only on the server, and is never shown in the app or sent to a storefront.
• Public Instagram post data needed for a feed, such as captions, media URLs, post types, timestamps, and permalinks.
• Feed settings, hashed API keys, mirrored-media metadata, sync status, and limited operational error records.
• Information you choose to send when you contact support.

WeaveFeed does not request Shopify customer, order, or payment data. Its public feed endpoint does not place cookies on or track shoppers.

• Connect and maintain your authorized Instagram account.
• Fetch, normalize, sync, and deliver the feeds you configure.
• Copy selected Instagram media to your Shopify Files library and serve stable Shopify CDN URLs.
• Secure, operate, troubleshoot, and improve the service.
• Respond to support, legal, security, and data-rights requests.

We share information only where needed to provide the service, comply with law, or protect the service. This can include Shopify, Meta and Instagram, and infrastructure providers that host, secure, cache, or store service data on our behalf.

Shopify receives media URLs so it can copy selected files into the merchant's own Shopify Files library. We do not sell personal information and do not use service data for targeted advertising.

We use reasonable technical and organizational safeguards, including TLS in transit, access controls, and AES-256-GCM encryption for Instagram access tokens at rest. No method of storage or transfer is completely secure, so we cannot guarantee absolute security.

Service providers may process data outside your country. Where required, we use appropriate safeguards for international transfers.

We retain information while your connection is active and as needed to provide the service, meet legal duties, resolve disputes, and protect the service.

When you uninstall WeaveFeed, we revoke app access and remove the Instagram credential, pending connection attempts, feed access, and API keys. Shopify also sends a shop-redaction request after uninstall; we use it to erase remaining records linked to the shop. A valid Meta deletion request removes the related Instagram connection data.

Media copied to Shopify Files belongs to the merchant and is not automatically deleted when the app is removed. Merchants can delete those files in Shopify. We may retain a limited deletion confirmation record where needed to show that a request was completed.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. You may disconnect Instagram in WeaveFeed, revoke access in Instagram, uninstall the Shopify app, or contact us to make a request.

We may need to verify your identity and authority over the relevant Shopify store or Instagram account before completing a request.

WeaveFeed is a business service and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this policy when the service, our practices, or legal requirements change. We will post the revised policy here and update the date above. We will provide additional notice when required by law.

For privacy questions or requests, email support@weaverse.io or write to Weaverse Technology JSC, 102 Tran Phu, Mo Lao, Ha Dong, Hanoi, Vietnam.