Privacy Policy
Draft for legal review. This page is a starting draft, not legal advice. Have counsel check it and fill in the bracketed details before it is relied on.
This policy explains how Steerline [legal entity type], [registered address] ("we") handles personal information on the steerline.co website and in the Steerline service.
1. Two roles
- Website, sign-up, billing and our customer relationship: we decide how this information is used. We are the controller.
- Records inside a customer's Steerline workspace: the customer decides what goes in and how it is used. We process it on their behalf under our Data Processing Agreement. Questions about that data should go to the customer's administrator first.
2. What we collect
| Information | Where it comes from | Why we use it | Legal basis (where GDPR or UK GDPR applies) |
|---|---|---|---|
| Name, work email, organization name and address chosen at sign-up | You | To create your workspace, sign you in and contact you about the Service | Contract |
| Billing contact, company, billing address and invoices | You and Stripe | To bill and keep financial records. Card details are held by Stripe, not by us | Contract; legal obligation |
| Sign-in and security events (time, IP address, browser) | The Service | To keep accounts secure, investigate misuse and keep the audit trail | Legitimate interests; contract |
| Messages you send us (demo requests, support, sales) | You | To answer and follow up | Legitimate interests |
| Basic website request logs | Your browser | To run and protect the website | Legitimate interests |
We do not use advertising cookies or third-party trackers on steerline.co. The website loads its fonts and images from steerline.co itself. The Service uses only the cookies it needs to sign you in and protect forms.
3. Who we share it with
We use the service providers listed in our sub-processors list, including Google Cloud for hosting, Google Workspace for email and Stripe for payments. We share information when the law requires it, or with a buyer of our business under the same protections. We do not sell personal information.
4. International transfers
Your workspace is hosted in the region shown at sign-up. Where information moves between countries, we rely on adequacy decisions or the EU Standard Contractual Clauses (and the UK addendum) with our providers.
5. How long we keep it
- Account and workspace data: for as long as the subscription or trial is active, then as set out in the Terms (export period, then deletion).
- Billing records: as long as tax and accounting law requires, typically [7] years.
- Security logs: [13] months.
- Unconfirmed sign-ups: deleted 7 days after the confirmation link expires.
6. Your rights
Depending on where you live, you may ask to access, correct, delete or export your personal information, object to or restrict some uses, or withdraw consent. Write to privacy@steerline.co. For data inside a customer's workspace, we will pass your request to that customer. You may also complain to your data protection authority.
California residents: we do not sell or share personal information for cross-context behavioral advertising.
7. Security
We protect information with the controls described on our Trust and security page, including row-level isolation between customers, encryption in transit and at rest, and a tamper-evident audit trail.
8. Children
Steerline is a business service and is not meant for anyone under 16.
9. Changes
We will post changes here and update the date below. For material changes we will also tell workspace administrators by email.
10. Contact
privacy@steerline.co · Steerline, [registered address] · Data protection contact: [name or role].