Your data and the editor
A practical explanation of what Weavour handles, what your application controls and what public asset hosting means for your content.
Hosting and stored content
Weavour runs on Cloudflare. The service stores dashboard account information, editor settings, templates, drafts and image metadata. Image files are hosted in Cloudflare R2.
Weavour creates email content and exports HTML. Your application supplies final recipient data, fills dynamic placeholders and sends through your email provider. Avoid putting recipient lists or secrets into templates or prompts.
Dashboard access
Dashboard administration requires a signed-in account and workspace permissions. Account sessions use HttpOnly cookies, with Secure cookies over HTTPS. Password reset revokes existing sessions.
Administrative credentials and customer-supplied AI provider keys stay on the server. They do not belong in the embedding configuration or exported emails.
Embedded access is declared by your application
A public editor key selects your customer workspace and editor configuration. Your application supplies organization and user IDs to scope content within that workspace.
These IDs are namespaces, not verified identities. Callers supplying the same IDs can share access, including modification. Permitted origins control where the editor can be embedded; they do not authenticate end users. Assess this access model before using it for sensitive content.
Hosted image URLs are public
Images used in email must be retrievable by email clients. Anyone with a hosted image URL can load that image. Do not use this library for confidential files.
Public URLs use opaque directory and asset IDs rather than internal customer, organization or user IDs. Archiving an image preserves its published URL and existing references; it does not make the image private.
AI and external content
When you request AI assistance, the prompt and content needed for that action are sent to OpenAI. Image actions can include the source image. Administrators can disable AI; ordinary editing, saving and export remain available.
Optional media search uses GIPHY and Pixabay. Loading external images or linked media can send ordinary network information, such as your IP address, to the relevant provider.
Content after cancellation
After a trial or paid access ends, your workspace returns to Free with one production editor. Additional production editors remain read-only and exportable for two years, with referenced images retained. Existing content and public image URLs are preserved even when the workspace exceeds Free limits.