Privacy Policy
Effective date: 26 August 2026 · Last updated: 26 August 2026
This policy explains what personal data Weftling ("Weftling", "we", "us") collects, why, and your rights over it. Weftling is a time-and-materials tracker for independent contractors and small shops. It is operated by Newbury Consulting LLC, the data controller responsible for your data. Questions or requests: support@fabbric.com.
1. Data we collect
| Category | What | Why |
|---|---|---|
| Account | Your email address and a password (stored hashed by our authentication provider — we never see it in plain text) | To create and secure your account and sign you in |
| Your business records | The clients, time entries, materials, invoice records, and settings you enter — including the names and email addresses of your customers | These are the core content of the app; we store them so the app can display and work with them for you |
| Accounting connections (optional) | If you connect Xero or QuickBooks: the identifier of that connection and your organisation/company name. The OAuth access tokens are held by our connection provider (Nango), not by us | To let you pull customers/items and create invoices in your accounting software, only when you choose to connect |
| Technical | Standard server request data (e.g. IP address, timestamps) processed transiently by our hosting provider | To operate and secure the service |
We do not use advertising, analytics, tracking, or third-party marketing SDKs. We do not collect location, contacts, photos, or device identifiers.
2. Payments
If Weftling is offered as a paid app or subscription, payments are processed by Google Play under Google's own terms and privacy policy. We do not receive or store your card or bank details — Google shares only limited transaction confirmation with us.
3. How we use your data
- To provide the app: store, display, and operate on the records you enter.
- To send data to Xero or QuickBooks only when you direct it (e.g. creating an invoice).
- To secure the service and prevent abuse.
We do not sell your personal data, share it for advertising, or use it to build profiles.
4. Legal bases (EU/UK users)
- Performance of a contract — to provide the app you signed up for.
- Consent — for optional features you enable, such as connecting Xero or QuickBooks (withdraw any time by disconnecting).
- Legitimate interests — to keep the service secure and working.
5. Who we share data with
We use a small number of service providers ("processors") who handle data only on our instructions:
- Supabase — database and authentication hosting (stores your account and records).
- Vercel — application hosting (serves the app; processes request logs).
- Nango — securely brokers your Xero/QuickBooks connection and holds the OAuth tokens.
- Google Play — payment processing (if the app is paid).
Xero and QuickBooks receive data only when you connect them and take an action that sends data (such as creating an invoice); their use of that data is governed by their own privacy policies.
6. International transfers
Our infrastructure providers process data in the United States. For users in the EU, UK, or other regions, this means your data may be transferred to and processed in the US. Where required, such transfers rely on appropriate safeguards (such as Standard Contractual Clauses provided by our processors).
7. Data retention
We keep your data for as long as your account exists. When you delete your account (Settings → Delete account, or see our account deletion page), your account and all associated records are deleted immediately, with no retention period. You can export a full backup of your data at any time from Settings before deleting.
8. Your rights
You can access, correct, export, and delete your data directly in the app at any time. Depending on where you live, you also have rights under laws such as the GDPR/UK GDPR and US state privacy laws (e.g. California's CCPA/CPRA), including:
- The right to access the personal data we hold about you.
- The right to correct or delete it.
- The right to a portable copy (the in-app export provides this).
- The right to restrict or object to certain processing.
- The right to withdraw consent (e.g. disconnect Xero/QuickBooks).
- The right to lodge a complaint with your data protection authority (EU/UK).
Because we do not sell personal data or use it for cross-context behavioural advertising, there is nothing to opt out of on those grounds. To exercise any right, email support@fabbric.com.
9. Security
Data is encrypted in transit (HTTPS/HSTS). Each user's records are isolated at the database level so one account cannot access another's. No system is perfectly secure, but we take reasonable measures to protect your data.
10. Children
Weftling is a business tool and is not directed to children. We do not knowingly collect data from anyone under 16.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above, and where appropriate we will notify you in the app.
12. Contact
Newbury Consulting LLC
Email: support@fabbric.com