Skip to content

Last updated October 12, 2026

Privacy Policy

How [Company legal name] (“Steerable”, “we”) handles your information: what we collect, why, who we share it with, and the choices you have.

This is a draft. It hasn't had its final legal review, and the details in brackets are still to be filled in.

The short version

  • We collect what we need to run Steerable: your email and name, your business details, and the work in your workspace.
  • Your business data lives in its own separate workspace. It doesn't mix with other customers' data.
  • We don't sell your data, show you ads, or use your data to train AI models.
  • We use only the cookies needed to keep you signed in. No tracking or advertising cookies.
  • You can see, export, correct or delete your data. Just ask.
  • For information about other people that your COO handles for you (your customers, contacts, what it collects from websites), you're in charge of it, and we handle it only on your instructions.

1.What we collect

Your account

Your email address and first name. If you sign in with Google, we also get the name and profile photo on your Google account.

Your workspace

Your business name, what you call your COO, and the work in your workspace: decisions, the timeline, routines, to-dos, goals, chat messages, and data from accounts you connect. This is your business data, and it stays in your own separate workspace.

Billing and AI use

Your plan, payment history, and how much AI your workspace uses each month, so we can keep within your plan's monthly limit and tell you when it's close. Payments go through our payment processor. We never see or store your full card number.

Technical information

When you use Steerable, our servers record basic information like your IP address, browser type and sign-in times. We use it to keep Steerable secure and to fix problems.

2.How we use it

  • To run Steerable for you: sign you in, run your COO and routines, and show you your workspace
  • To send you sign-in links and important messages about your account
  • To bill you and keep AI use within your plan
  • To keep Steerable secure and stop abuse
  • To help you when you contact us

We don't sell your information, use it for advertising, or use your business data to train AI models.

3.How your COO uses AI

Most routine work runs without AI. When your COO needs judgment, like writing a draft or answering a question, it sends the text it needs to our AI provider, Anthropic, and gets an answer back.

These requests go through our own gateway, which keeps the connection to the AI provider outside your workspace and tracks use against your monthly cap. Under our agreement with Anthropic, the text we send isn't used to train their models.

4.Information about other people

Your COO handles information about people other than you: your customers, suppliers and staff, people who email you, and anything it collects from websites or services for you. For that information, your business decides what is collected and why, so your business is the one in charge of it (the “controller” under laws like the GDPR), and we handle it only on your instructions, to run Steerable for you (as a “processor” or “service provider”).

That means it's up to your business to have a lawful reason to collect and use it, to tell those people what you do with it, and to answer their requests. If someone asks us about information your COO handles for a business, we'll pass the request to that business and help it respond. Businesses that need a data processing agreement can ask us at [email protected].

5.Who we share it with

We share information only with companies that help us run Steerable (our “subprocessors”), and only what each one needs:

CompanyWhat forWhat they see
AnthropicThe AI model your COO usesText your COO sends to the model, like a draft to write or a question to answer
[Cloud host]Runs the app, the database and your workspaceEverything in your account and workspace
[Email provider]Sends sign-in links and account emailsYour email address and the email itself
Lemon SqueezySells the plan as our reseller (merchant of record): takes payments, charges sales tax and VAT, keeps invoicesBilling name, email, address and card details (we never see your full card number)
Telegram (only if you link it)Sends your brief, alerts and decisions to your Telegram, and your messages to your COOThe messages in that chat: briefs, decisions, and what you and your COO write
Google (only if you use it to sign in)Sign in with GoogleYour name, email and profile photo from Google

We may also share information if the law requires it, to protect people from harm, or as part of a merger or sale of our business, in which case this policy keeps applying to your data.

6.Cookies

We use only the cookies Steerable needs to work. There are no analytics, tracking or advertising cookies, so there's nothing to opt out of.

CookieWhyHow long
authjs.session-tokenKeeps you signed in30 days, or until you sign out
authjs.csrf-tokenProtects sign-in forms from being misused by other sitesUntil you close your browser
authjs.callback-urlRemembers which page to open after you sign inUntil you close your browser
authjs.state, authjs.pkce.code_verifier, authjs.nonceOnly when you sign in with Google: makes sure the sign-in really came from you15 minutes

On secure connections, these names start with __Secure- or __Host-.

7.How long we keep it

  • Your account and workspace: for as long as your account is open
  • Sign-in links: one hour, or until you use them
  • Sign-in sessions: 30 days, or until you sign out
  • After you close your account: we delete your workspace within 30 days, and backups within 90 days
  • Billing records: as long as tax and accounting laws require

8.Keeping it safe

  • Each business runs in its own isolated workspace, with its own limits.
  • The key that connects to the AI provider never enters your workspace.
  • Information travels over encrypted connections.
  • Only the people who need access to run and support Steerable can reach customer data.

9.Your choices and rights

You can ask us to show you the information we have about you, correct it, export it, or delete it. You can also object to how we use it. Email [email protected] and we'll respond within 30 days.

Depending on where you live (for example, under the GDPR in the EU and UK, or state laws in the US), you may have more rights, including the right to complain to your local data protection authority.

10.Where your data is stored

Your data is stored in [region]. When information moves between countries, for example to our AI provider, we use legal safeguards such as standard contractual clauses.

11.Children

Steerable is for businesses and people 18 and older. We don't knowingly collect information from children.

12.Changes to this policy

If we make an important change, we'll email you before it takes effect. The date at the top shows when this policy last changed.

13.Contact

[Company legal name], [Registered address]. For privacy questions, email [email protected].