LEGAL
Privacy Policy
Last updated October 2026
This policy explains what information steer.agent collects, how we use it, and the choices you have. It applies to the steer.agent website and application (the “Service”).
1. Information we collect
- Account data — name, email address, a salted password hash (for email sign-in) or the identifier returned by your OAuth provider (Google or GitHub).
- Content — the objectives, messages and files you submit, plans and agent outputs generated for you, run traces, annotations and memory items derived from your sessions.
- Usage data — session, agent-run, message and tool-call events used to enforce plan limits and to show you usage on the dashboard.
- Billing data — your plan, billing interval, subscription status and Razorpay customer/subscription identifiers. Card, UPI and netbanking details are handled by Razorpay and never touch our servers.
- Technical data — IP address, browser and device information, and server logs needed to operate and secure the Service.
2. How we use information
- to provide the Service: planning, running agents, storing sessions and files you upload;
- to send your prompts, files and context to the model providers that generate outputs;
- to enforce plan limits, detect abuse and keep the Service secure;
- to process payments and manage subscriptions;
- to communicate with you about your account, security and material changes to the Service.
We do not sell personal data and we do not use your content to train foundation models.
3. Model providers and sub-processors
To generate outputs we transmit relevant content to large-language-model providers (which may include Anthropic and Groq, or a self-hosted Ollama instance when configured by the operator). Agent tools may fetch public web pages you or an agent request. Other sub-processors include our hosting provider, our managed PostgreSQL database and Razorpay for billing. Each is bound by contractual confidentiality and security obligations.
4. Cookies
We use strictly necessary cookies to keep you signed in (an HTTP-only session token), to protect sign-in and connector flows against cross-site request forgery, and to remember UI preferences in your browser’s local storage. We do not use advertising cookies.
5. Retention
Sessions and their messages are retained for the history period of your plan and can be deleted by you at any time from the sidebar. Account data is retained while your account is active. When you delete your account, we delete or anonymise personal data within 30 days, except where retention is required for legal, billing or security purposes.
6. Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. To exercise these rights, email hello@steer.agent from the address on your account.
7. Security
Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Passwords are hashed with bcrypt. Agent tools run with repository and network containment, and sensitive tool categories can require human approval. No system is perfectly secure; please report concerns to the address above.
8. International transfers
Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.
9. Changes
We will post any changes to this policy here and, for material changes, notify you in-app or by email.
10. Contact
hello@steer.agent · See also our Terms of Service.