Privacy policy
This policy covers this website and the ShipWoven service operated by Acto AI. Last updated 2026-10-02.
This website
The website sets no tracking cookies and loads no third-party analytics. When you send the contact form we receive what you typed, the time, your IP address and country (from the network request), and the page you came from. We use this only to reply to you and keep it for as long as the conversation is useful. You can ask us to delete it at hello@shipwoven.com.
The ShipWoven service
When your company uses ShipWoven, your company is the controller of the data in its workspace and Acto AI processes it on the company's instructions. The workspace holds the data the company puts in: people's names, emails and roles; reports, comments and issues; roadmap items; Jira data the company chose to sync; days off and schedules; sign-in activity; and the encrypted contents of the vault, finance and legal sections.
Credentials, payments and legal documents are encrypted in the browser under keys Acto AI does not hold. We cannot read them, and we do not try.
Where data is stored
On Cloudflare's network, in a database dedicated to your company, with attachments in Cloudflare storage. Transactional email, when your company sets it up, is sent through the mail provider your company configures. Jira data stays in your Jira account and is read through the token your company provides.
What we do not do
- We do not sell data or share it with advertisers.
- We do not use your workspace's data to train models.
- We do not access a workspace without the company's request and knowledge.
Your rights
You can ask for a copy of the personal data we hold about you, ask to correct it, or ask to delete it. For data in a company workspace, ask the company's super admin; for data on this website or from our conversations, write to hello@shipwoven.com.
Changes
When this policy changes, the date at the top changes with it.