Privacy Policy
Last updated: October 17, 2026
CoWeave is built to help people understand one another at work while holding as little as possible about them. Your account is an email address and your name. Your answers are never shown to your organization, and your profile is seen by colleagues only when you choose to share it. This page explains exactly what is collected, why, who else is involved, and how to make it go away.
The short version. Your organization invites you, and your answers become a profile that is yours. No one at your organization sees it until you share it, and you can stop sharing at any time. Your birth details are used once to draw your charts, then deleted. If you leave, your profile goes with you. We never sell your data, never run advertising trackers, and never share your information except with the handful of services that actually run CoWeave: hosting, sign-in email, billing, and the birthplace lookup.
1. Who we are
CoWeave is operated by Relationship Yoga LLC ("CoWeave," "we," "us"). For any privacy request or question, contact cory@coweave.one.
Who decides what. Your organization decides to use CoWeave and invites you. For your organization's workspace (your role, your teams, and what you share with colleagues), we act on its behalf, as its processor. For your own account and your own profile, which stay yours if you leave, we are responsible to you directly, as controller.
2. What we collect, and why
| Data | Why we have it |
|---|---|
| Your name and email address, and an identifier from Google or Microsoft if you sign in with them | To create your account, send single-use sign-in links, and place you in your organization's workspace. We never receive a password. |
| Your answers to the assessment | Used only to work out your results. No one at your organization ever sees them. |
| Your birth details (optional) | Used once, in your browser and on our server, to draw your Human Design and astrology charts. Then the date, time and place are deleted. We keep the charts themselves: the signs, the positions of the planets, and your Human Design activations. A determined person could work back from the charts toward a birth date. If that matters to you, leave the birth details out, and those two lenses stay empty. |
| Your profile | The results drawn from your answers and charts, kept in your account so they are there whenever you return, and so you can share them if you choose. |
| Your sharing choices and the activity log | Whether you share your profile, and who viewed, compared or exported which profile, and when. The log is visible to your organization's Admins and never to colleagues. |
| Billing records | Your organization's subscription is processed by Stripe. We store a Stripe customer reference, the number of Seats and the renewal date. Stripe never receives anyone's answers or profile. |
| Technical and log data | Server logs and IP addresses, used to deliver the site, rate-limit sign-in requests, and keep the service secure. |
| One session cookie | A single secure, HTTP-only cookie that keeps you signed in. No advertising or cross-site tracking cookies are used. |
3. Who sees your profile
No one at your organization, until you choose to share it. Once you share it, your teammates can see it, and so can your organization's Managers and Admins. You can stop sharing at any time, and it takes effect at once. Copies already downloaded cannot be recalled. Comparisons are not notified: a colleague who compares their profile with yours doesn't tell you, and you don't tell them. Your organization has agreed not to use your answers or your profile in any decision about your employment.
If you leave, your organization loses access to your profile straight away. Your profile stays in your own account, and you can take it with you.
4. Research, only if you choose it
You can choose to let us use your answers, with your name and email removed, to improve the accuracy of our scoring. It is a separate choice at the start of the assessment, and saying no changes nothing.
5. The services that help us run CoWeave
We share the minimum necessary with a small set of trusted providers (sub-processors). Each handles only what its job requires:
- Render: cloud hosting for the application and its database, in the United States.
- Stripe: billing for your organization's subscription, under Stripe's own privacy policy. Stripe receives no answers or profiles.
- Resend: delivery of sign-in and invitation emails.
- Google or Microsoft: sign-in, only if you choose it.
- OpenStreetMap's Nominatim, with komoot's Photon as a fallback: finding your birthplace's coordinates from the town name you type, with no other detail attached.
We do not sell, rent, or trade your personal information, and we do not disclose it for anyone else's advertising. We may disclose information if required by law or to protect the rights and safety of people using the service.
6. How long we keep it
- Your account and profile: until you delete your account.
- Your organization's workspace data (teams, roles, invitations and the activity log): until 30 days after its subscription ends.
- Birth date, time and place: deleted as soon as your charts are drawn.
- Sign-in links and sessions: short-lived. Links expire in about fifteen minutes and are single-use; sessions expire and can be revoked.
- Billing records: as long as tax and accounting law requires.
7. Your rights and choices
Wherever you live, you can email cory@coweave.one to:
- Access the personal data we hold about you;
- Correct or update it;
- Delete your account and associated data;
- Export your data;
- Withdraw your research consent, at any time.
Where your request concerns your organization's workspace, we will work with your organization to answer it, and where the law makes your organization responsible, we may refer you to it. If you are in the EU or UK, you also have the right to object to or restrict processing, to data portability, and to lodge a complaint with your data-protection authority. If you are in California (CCPA/CPRA), you have the right to know, delete, and correct your information and to opt out of "sale" or "sharing," which we do not do. We will not discriminate against you for exercising any of these rights.
8. Lawful basis (EU and UK)
We do not rely on your consent for the workplace use, because consent is rarely free in employment. Your organization relies on its legitimate interest in team development, with the protections described on this page. Keeping your own account and profile for you is performance of our contract with you. The optional research use relies on your consent, which you can withdraw at any time.
9. Security
CoWeave is designed to hold as little as possible, which is itself the strongest protection. There are no passwords to steal: sign-in is by single-use email link, stored only as a one-way hash, or through Google or Microsoft. Every workspace is kept separate from every other, session cookies are HTTP-only and Secure, connections are encrypted in transit (HTTPS), and the database is encrypted at rest. No system is perfectly secure, but the surface here is deliberately small.
10. International users
CoWeave is operated from, and its data is stored in, the United States. If you access it from elsewhere, your information will be processed in the U.S., which may have different data-protection laws than your country. For organizations that need them, our Data Processing Agreement includes the EU Standard Contractual Clauses and the UK Addendum.
11. Children
CoWeave is intended for adults at work and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the service evolves. When we do, we will change the "last updated" date above, and for material changes we will make reasonable efforts to notify account holders by email.
13. Contact
Relationship Yoga LLC · cory@coweave.one