Privacy Notice

Who this notice is for

This Privacy Notice applies when you use the Layoutweaver website, request an assisted pilot, contact Layoutweaver, register for the guided demo sandbox, use a Layoutweaver SaaS account, or import prepared demo content into the managed Drupal target.

Controller and contact

The controller for this information is Layoutweaver. For privacy questions, access, correction, restriction, objection, portability, or deletion requests, use the privacy contact form. Account holders may also start deletion of their managed demo account from their Account page.

Information we collect

• Account and contact details, including name, email address, password hash, account status, roles, and verification timestamps.
• Demo registration and consent evidence, including invitation attribution, consent version, source policy, and keyed email or network-address hashes used for rate limiting and abuse prevention.
• Workspace, workflow, run, mapping, analysis, import-plan, target identifier, diagnostic, support, and cleanup evidence produced while operating the service.
• Source URLs and content submitted to a run, plus temporary files and Drupal entities created in the managed demo target.
• Assisted-pilot and contact-form information, including project context and messages you choose to submit.
• Technical security information such as timestamps, session records, request logs, CAPTCHA results, and bounded backend authentication or replay-prevention evidence.

Why we use it

We use this information to verify accounts, provide the guided demo and assisted services, execute prepared imports, show each user their own results, provide support, enforce quotas and acceptable-use rules, prevent abuse, diagnose failures, clean up temporary data, evaluate service fit, and protect the service and its users.

Legal basis

Depending on the interaction, processing is necessary to provide requested account, demo, assessment, or pilot functionality; to take steps before or perform a contract; to pursue legitimate interests in operating, securing, improving, and supporting the service; to record consent where consent is requested; or to comply with a legal obligation. Rate limits or technical policy checks do not make decisions producing legal or similarly significant effects.

Managed demo target

The demo uses a separately deployed shared Drupal target. Layoutweaver maps the SaaS account to a restricted target account and scopes imported entities and files to the user's workspace and run. Other demo users must not be able to view those account-scoped listings. Platform administrators may access them for security, support, cleanup, and service operation.

Service providers and transfers

Trusted providers may process limited information for website and cloud hosting, database and file storage, email delivery, security, backups, and technical operations. Processing may occur outside your country. Where required, Layoutweaver will use an appropriate transfer mechanism and provider safeguards. We do not sell account, demo, apply-form, or contact-form information.

Retention

Managed demo runs and target content are temporary. Under the current controlled policy, a run normally expires after approximately 7 days and a demo enrollment after approximately 30 days; administrators may apply a shorter policy. Expired target entities, files, jobs, and ledger evidence are removed by the managed cleanup process. SaaS account and workflow data remains until account deletion, expiry handling, or another applicable retention rule removes it.

Assisted-pilot submissions are normally retained for up to 12 months unless a service relationship, legal obligation, dispute, or earlier valid deletion request requires a different period. Security logs and backups expire under their operational rotation schedules. Data in a backup is not returned to ordinary use and deletion is reapplied if restoration is necessary.

Account deletion

A managed demo participant can request deletion from the Account page. The request requires the current password and a single-use email confirmation. Access and API tokens are then revoked. Layoutweaver first verifies deletion of managed target entities, files, ledger rows, handoffs, and the restricted target account, and then deletes the user's SaaS workflows, runs, analysis data, demo registration, personal workspace, and SaaS account.

While cleanup is pending or failed, the account identity may remain available to authorized administrators so the request can be completed. After successful cleanup, the deletion audit retains only a random request identifier, timestamps, outcome, non-identifying deletion counts, and the administrator who processed the request. Separate assisted-pilot or privacy-contact submissions are not automatically removed by the account button because they may have a separate purpose; they can be included in a broader privacy request.

Your rights

Depending on where you are located, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal data, and to complain to a competent data-protection authority. Use the privacy contact form to exercise those rights. A deletion request may be limited only where continued retention is required by law or is necessary for another applicable legal exception.

Cookies and local extension data

The website uses session and security cookies needed for sign-in and account operation. The Chrome extension may keep workflow or runtime state in browser storage under its defined product contract. Deleting a SaaS account revokes server access but does not erase unrelated browser data; the extension can be removed or its storage cleared separately.

Changes

This notice may be updated as Layoutweaver's demo, assisted services, providers, or retention practices evolve. Current version: 2026-07-15.