Privacy Policy
Updated
1. What we collect
Account details (name, email, company), API usage logs, and transaction metadata (routes, amounts, timestamps) needed to operate the Services. Weir does not collect private keys or seed phrases.
2. How we use data
To provide the Services, monitor for fraud and abuse, calculate fees, and improve routing and settlement performance.
3. Data sharing
Weir does not sell personal data. Data may be shared with infrastructure providers strictly to operate the Services, and with auditors under confidentiality obligations during a security review.
4. Data retention
Transaction and billing data is retained for 7 years to meet financial record-keeping obligations. Account data is deleted within 90 days of account closure on request.
5. Security
Weir is SOC 2 Type II certified and has completed 3 independent security audits. Reports are available on request under NDA or on the security page where public.
6. Your rights
Depending on your jurisdiction, you may request access to, correction of, or deletion of your personal data by emailing privacy@weir.dev.
7. International transfers
Data may be processed in the United States and the European Union. Weir uses standard contractual clauses where required for cross-border transfers.
8. Changes to this policy
Weir will post the updated date at the top of this page when this policy changes materially.
9. Contact
Questions about this policy can be sent to privacy@weir.dev.