Privacy policy

• Account data: name, email, organization, and billing details.
• Usage data: session counts, minutes, API calls, IP addresses and device information for security and billing.
• Customer Data: profiles, cookies, recordings, credentials and outputs you or your agents create. We process this only on your instructions.

We use account and usage data to run, secure and bill the Service, to support you, and to improve reliability. We do not sell personal data and we do not use Customer Data to train models.

Sessions are recorded so you can replay and audit them. Recordings are kept for your plan's retention period and then deleted. You can delete any recording earlier from the dashboard or API.

Passwords and TOTP seeds are encrypted at rest with per-organization keys. They are decrypted only inside the browser node at the moment they are filled, and are never returned through the API or shown to agents.

We share data with subprocessors that help us provide the Service, such as cloud hosting, email delivery and payment processing, under contracts that require equivalent protection. A current list is available on request.

We keep account data while your account is active. When you close your account, we delete Customer Data within 30 days and remove backups on their normal rotation cycle.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Contact us to exercise these rights.

When you self-host Steerpane, your data stays on your infrastructure and you are the controller of it. We receive only the license and optional telemetry data you choose to send.