Title: Privacy policy · Steerbay URL: https://www.steerbay.com/en/legal/privacy/ Language: English (Česky: https://www.steerbay.comhttps://www.steerbay.com/cs/legal/privacy/; x-default: https://www.steerbay.comhttps://www.steerbay.com/cs/legal/privacy/) Summary: What Steerbay processes when you sign in, ask an agent to work, or contact us. --- # Privacy policy What Steerbay processes when you sign in, ask an agent to work, or contact us. Effective 11 October 2026 ## Who is responsible Steerbay is operated by Ladislav Hájek · IČO 74349155 · DIČ CZ8501231156 Zlatnická 247, 250 73 Jenštejn, Czech Republic. The operator is the controller for account, billing, support and service administration data. Contact us about privacy at [support@dezajn.com](mailto:support@dezajn.com). Where we process a business customer's personal data on its instructions, the respective data-processing agreement governs that work. ## The information used to provide the service We process your name, email address, sign-in provider identifier and account preferences; messages, uploaded files, generated results, schedules and workspace information you choose to provide; connected-service credentials needed for the tasks you authorize; and usage, device, network and error information needed to operate and protect the service. Browser tasks may process the content of websites you visit and maintain sign-in sessions. Do not submit information you are not entitled to share. Google and GitHub sign-in supply basic identity information, such as name, email address and avatar. Sign-in does not by itself grant Steerbay access to your Gmail, Google Drive or private GitHub repositories. Stripe handles payment-card entry; Steerbay receives payment and subscription identifiers, status and billing information, rather than your full card details. ## Why we use it We use account and task data to perform our contract with you, including authentication, running requested tasks, storing your work and administering subscriptions. We use billing records to meet legal obligations. Our legitimate interests in security, preventing abuse and maintaining a reliable service support necessary operational records. We answer pre-contract enquiries and support requests to help provide the service. Where processing depends on consent, you may withdraw it without affecting earlier lawful processing. Required account and payment information is necessary to create an account or provide a paid plan. Task content is your choice, but an agent cannot perform a task without the information and permissions it needs. We do not sell personal information. ## Service providers and your chosen destinations Steerbay uses WorkOS for authentication, Stripe for billing, Vercel for website and account hosting, Supabase for database and storage services, Hetzner for managed computing, Browserbase for agent browsers and Anthropic for Steerbay AI and website AI help. When you connect your own ChatGPT/Codex or Claude account, the relevant OpenAI or Anthropic service also processes the requests under its applicable terms and account settings. The websites and services you instruct an agent to use receive the information needed for those actions. Prompts, relevant conversation context, files and tool results may be sent to the selected AI provider. Browser activity can send information to third-party websites. Standard cloud service therefore does not mean all data stays on one server or in one country. Provider retention and model-training rules vary by product; this policy does not promise zero retention or exclusion from training for a personal subscription. ## International processing Our providers may process information outside the European Economic Area. Applicable transfers must be supported by an adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact us for information about the safeguards relevant to your use. A private company deployment's locations and permitted data flows must be agreed separately. ## Storage and deletion Account and workspace information is kept while needed to provide your account and retain your work. You can remove supported content in the app or request account deletion by email. We retain information that remains necessary for legal obligations, dispute handling or security, restrict its use to those purposes and delete it when no longer needed. Removing active data may not immediately remove backup copies; backup retention and provider retention also apply. Contact us for the retention applicable to a specific record. The public website's AI help keeps its conversation in your browser, rather than our conversation database. Use New conversation to clear it; it expires after 30 days without use. Questions and limited context still pass through our server to Anthropic. The website uses a temporary one-way network fingerprint for abuse limits, removed within a day. Call-request details are stored so we can respond. ## Cookies and browser storage Authentication cookies and local storage maintain sign-in, interface choices and website AI-help history. Connected websites may set their own cookies inside an agent's browser. Clearing your device's cookies does not necessarily clear a separate cloud browser session. You can disconnect services or contact us for help clearing that state. Any optional tracking requiring consent must be offered with a separate choice. ## Your choices and rights Subject to the applicable conditions, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. Send requests to [support@dezajn.com](mailto:support@dezajn.com); we may need to verify your identity. You may complain to the Czech data protection authority, [Úřad pro ochranu osobních údajů](https://uoou.gov.cz/), or your local supervisory authority. We do not use the service to make solely automated decisions about you that have legal or similarly significant effects. ## Changes We will publish updates here and give appropriate notice of material changes. This policy applies to Steerbay; external services have their own policies.