Privacy Policy

Scope and operator

This policy applies to weverlabs.com and the public Wever Pay testnet interfaces linked from it. Wever Labs is the publisher and operator for these surfaces.

Wever Pay currently operates on Base Sepolia testnet. Mainnet and real-money activity are not active.

Website data

The public website does not provide user accounts, advertising trackers, payment forms, or an embedded analytics product. Its host may process ordinary request information needed to deliver and secure the site, such as IP address, request time, requested URL, user agent, referrer, TLS and network information, and error or abuse signals.

If you email Wever Labs, we process your address, message, attachments, and related correspondence to respond and maintain a support record.

Data processed by Wever Pay

Anonymous discovery and verification requests may include protocol and client information, requested tools or resources, service inputs, request identifiers, timing, availability results, and public compatibility status.

Protected economic operations may process bearer authentication information, owner-signed standing mandates, agent and provider identifiers, public wallet addresses, network and asset identifiers, service inputs and results, payment authorization payloads, fulfillment evidence, receipt records, ledger entries, replay-protection identifiers, recovery records, and verification outcomes.

Compatibility reports store the named client, connection stage, success state, optional bounded notes, and a one-way digest of any reporter value. External activity remains unclassified unless independent evidence supports another classification. Synthetic activity is never counted as organic use.

Public blockchain data

Base Sepolia settlement data is public. Transaction hashes, public addresses, token transfers, block numbers, timestamps, network identifiers, and contract events may be visible to anyone and copied by blockchain nodes, explorers, and other services.

Public blockchain data is not controlled by Wever Labs and generally cannot be changed or deleted. Testnet assets have no intended monetary value.

How data is used

• Provide discovery, connection, standing-mandate, settlement, fulfillment, verification, receipt, Commerce Index, and recovery functions.
• Authenticate protected requests and enforce owner-defined authority.
• Prevent replay, duplicate economic effects, fraud, abuse, and unauthorized access.
• Reconcile ledger, settlement, fulfillment, evidence, and receipt records.
• Maintain availability, measure compatibility, investigate failures, and improve protocol support.
• Respond to support, security, legal, and operational requests.

Retention

Wever Pay does not currently apply one fixed deletion period to every testnet record. Durable transaction, ledger, mandate, fulfillment, evidence, receipt, reconciliation, and replay-protection records are retained for the operating life of the testnet service and longer when needed to preserve audit integrity, resolve disputes, investigate security events, or meet legal obligations.

Operational telemetry and compatibility records are retained while useful for service operation, reliability, security, and protocol support. Hosting and infrastructure logs follow the applicable provider configuration. Support correspondence is retained as needed to resolve the request and maintain appropriate business records.

Public blockchain data may remain available indefinitely, regardless of Wever Labs retention choices.

Service providers and public systems

Wever Labs uses Netlify to host weverlabs.com and Cloudflare Workers and D1 to operate the current Wever Pay testnet service and data store. Base Sepolia processes public blockchain transactions. The current x402 flow may use Coinbase Developer Platform services as a testnet facilitator. Blockscout provides the linked independent explorer. Email and security providers may process support correspondence and protective signals.

Following an external link, including an explorer or registry listing, subjects your request to that service's own practices.

Security practices

Wever Pay separates public discovery from protected economic tools, requires bearer access plus owner-signed authority for protected actions, signs discovery and receipt artifacts, validates payment and mandate scope, applies replay and duplicate-effect controls, reconciles double-entry records, and keeps signing material and infrastructure secrets out of public website responses.

No internet system is perfectly secure. Report a suspected vulnerability to hello@weverlabs.com. Do not include private keys, seed phrases, or live credentials in email.

Requests and choices

You may ask about access, correction, or deletion of information associated with you by contacting hello@weverlabs.com. We may need to verify the request and may retain records where integrity, security, legal obligations, or public blockchain limits prevent deletion.

Because this is a developer-facing testnet, do not submit sensitive personal information, real-money payment details, private keys, seed phrases, or production credentials.

Changes and contact

We may update this policy as the website, testnet service, processors, or legal requirements change. The updated date identifies the current version.

Privacy, general questions, and security reports: hello@weverlabs.com
Support: weverlabs.com/support