Privacy Policy

Last updated: January 2026

1. Introduction

Steer (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI advisory platform.

2. Information We Collect

Account Information

• Email address
• Name
• Company details (if provided)
• Billing information (processed by Stripe)

Usage Data

• Conversations with AI board members
• Documents you upload for analysis
• Company profile information you provide
• Feature usage and interaction patterns

Technical Data

• IP address
• Browser type and version
• Device information
• Cookies and similar technologies

3. How We Use Your Information

We use your information to:

• Provide and improve our AI advisory services
• Personalize your board member interactions
• Process payments and manage your subscription
• Send important service updates
• Analyze usage to improve our platform
• Comply with legal obligations

4. AI Processing

Our platform uses AI models from Anthropic (Claude), OpenAI (GPT-4), and Google (Gemini) to provide advisory services. Your conversations may be processed by these providers according to their respective privacy policies and data processing agreements.

We do not use your conversations to train AI models. Your data is used solely to provide you with the service.

5. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS). We implement industry-standard security measures including:

• Encryption in transit (TLS) and at rest
• Row-level security on database tables
• Regular security audits
• Access controls and authentication

6. Data Sharing

We do not sell your personal data. We may share data with:

• AI Providers: Anthropic, OpenAI, Google for processing your queries
• Payment Processor: Stripe for billing
• Infrastructure: Vercel, Supabase for hosting
• Analytics: Aggregated, anonymized usage data

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (“right to be forgotten”)
• Export your data (portability)
• Object to processing
• Withdraw consent

To exercise these rights, contact us at privacy@steerai.uk.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• Conversations are deleted within 30 days
• Documents are deleted immediately
• Account data is retained for 90 days for legal compliance

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies for advertising.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notification.

11. Contact Us

For privacy-related inquiries:
Email: privacy@steerai.uk
Address: Steer, United Kingdom