Privacy Policy

1. Introduction

This policy explains how Steepworks collects, uses, and protects information.

2. Information We Collect

• Personal information: account and contact details you provide.
• Website usage: the pages you view on steepworks.com, the site that referred you, campaign tags in the link you followed, and a visitor identifier derived from your network address and browser that changes every day. We collect this ourselves without cookies or third-party trackers; it cannot identify you or follow you across days.
• Usage information: workflow activity, logs, uploads, and operational metadata.
• Technical information: device, browser, IP address, and security events.

3. How We Use Information

• Operate, secure, and improve the service.
• Provide support and service communications.
• Measure reliability, quality, and cost behavior.

4. Cookies and Similar Technology

We use essential session and security cookies to sign users in, maintain account state, prevent abuse, and support product functions. A persistent sign-in cookie is set only when a user chooses to stay logged in.

5. Data Sharing and Processors

We do not sell personal information. We use service providers for infrastructure, email delivery, payments, monitoring, and other functions needed to operate Steepworks. Customer content is sent to an AI provider only when an authorized product or engagement workflow invokes that provider. We may also disclose information when required by law or to protect the service, our customers, or others.

5a. Connected Services and Agents

An account administrator chooses which services to connect. Each connection is limited to the access you grant and can be removed at any time:

• GitHub: the Steepworks GitHub App reads commits, pull requests and checks on the repositories you choose. Writes (issues, checks, branches) happen only for the coding lanes you turn on. Steepworks stores references and summaries, not your source code.
• Linear, Notion and Jira: Steepworks reads only the items you place in a milestone and posts comments on them as work runs and is accepted. It never changes their status or fields.
• Coding agents and AI apps: when you connect Codex, Claude Code, ChatGPT, Claude or another agent, it acts with the scopes you approve and only on accounts you can access. Those agents run under your own accounts and keys, which Steepworks never receives.

Connection tokens are encrypted and kept server-side. Disconnecting removes the stored token; you can also revoke access in the connected service.

6. Retention and Security

We retain information while it is needed to provide the service, meet contractual or legal obligations, resolve disputes, and maintain security records. We use administrative and technical safeguards; integration credentials stay server-side, and application data is scoped to the relevant customer account and authorized processors.

7. Your Requests

You may ask to access, correct, or delete personal information associated with you. Some records may need to be retained for security, contractual, or legal reasons.

8. Contact Us

The data controller for information described in this policy is Steepworks LLC, doing business as Steepworks.

Privacy and legal requests: [email protected] · Product support: [email protected]