Privacy

Steed builds and runs websites for small businesses. It is operated by Cavin Capital Group, LLC. Questions about your data: support@steed.biz.

• Your account: your email address, and your Google sign-in if you use it.
• What you tell us: your conversation with Wren, your plan, your site's words, and the photos and logo you add. We use them to plan, design, build and run your site. We also learn from them, and from how you use Steed (what you ask for, and where something goes wrong), to make Steed better: see How Steed gets better. Your conversation with Wren is kept for 12 months. After that we keep only the messages where you made a decision (a price, your plan, a color), as the record of what you agreed, and totals drawn from the rest, never your words.
• Your customers' details: what they give your site (orders, bookings, memberships, messages, email sign-ups). We keep them for you, to run your site and your Customers page. They're yours. When you email your customers from Steed, we record which links in your email they click, so you can see it on their record. We never track whether an email was opened, and receipts aren't tracked. We never use your customers' details to make Steed better, except as anonymous totals across all Steed sites that can't be traced back to you or to them.
• Your story, if you send one: the video or words you send from Settings › Share your story. Only Steed sees it, unless we pick it for Steed's ads or steed.biz, as the box you ticked says. You can stop us at any time in Settings (Stop using my story). That stops any future use; an ad that has already run can't be taken back.

We make Steed better by changing what we give the AI: its instructions, what it's told about your business, and the steps it takes. We never train an AI on your data, and your own words are never copied into its instructions or examples.

A health business's data is never used to make Steed better.

Stripe handles every card payment, yours and your customers'. Steed never sees or stores a card number.

Steed never shares or sells your data or your customers' data.

Steed runs on trusted third-party services for payments, data storage, hosting, email delivery, AI (including its web search and its reading of public pages), image creation, fonts, bot protection, build computers and the software they install, shipping labels, sign-in, error reporting and product analytics. We connect to each one securely, share only what it needs to do its part, and none of them may use your data for anything else.

Because Steed relies on these services, an outage or issue on their side can sometimes affect Steed; when it does, we work to restore service quickly. A current list of the services we use is available on request at support@steed.biz.

Services you connect to your site on your own account, such as texts through Twilio, get what your site sends them, under your agreement with them. You manage that account and its billing with the provider; Steed does the wiring and the screens on our side.

When you talk instead of typing (the mic in a Steed chat), your browser turns your voice into words with its own service: Google in Chrome, Apple in Safari, Microsoft in Edge. Steed gets only the words you then send, never the recording, and your browser's own privacy terms cover your voice.

We back up everything every day and keep each backup for seven days, so a mistake can be undone.

Steed uses no analytics or advertising cookies. On steed.biz, a product analytics service counts the pages people visit and what they click, without a cookie and with nothing kept in their browser. In Steed itself, that service records how its screens are used, including recordings of each visit, with everything you type masked and your Customers and Orders screens blanked. It knows you only by your Steed account number, never your name or email, and keeps that in your browser’s storage, not a cookie. On Steed itself we set only our own cookies:

• one that keeps you signed in;
• one that holds your plan until you make an account;
• one that remembers you've been here before;
• one for the "are you human" check.

On pages where you pay by card, Stripe sets its own cookies to prevent fraud. On your site, a visitor's browser keeps only the sign-in for your members, when you have members, what's in their cart while they shop, which of the site's pop-ups and notices they closed, so they stay closed, and Stripe's cookies at checkout. Code you have built for your site may keep its own; your site's privacy page lists them. Where a visitor came from (for example Instagram or a search) is known only for the visit they're on: it goes with a form, booking or order they make on that visit, so you can see which channels bring you customers, and none of it is kept in their browser. Steed counts visits to your site itself, without a cookie: a visitor's address is scrambled with a key that's thrown away every day, so no one can be followed from one day to the next. steed.biz counts its own visitors the same way: no cookie and nothing kept in the browser, each visitor counted by a code that changes every day and can't be traced back to them.

• A site: you can delete a site yourself (Your sites → Delete). That ends its plan, takes it down, and deletes the site and everything it collected, including your customers' details. The amounts of its payments are kept, with no customer named, for your records and ours.
• Your whole account: you can delete it yourself, at the foot of Your sites (Delete my Steed account). Each of your sites goes as above, then the rest of your Steed data. Steed's own charges to you are kept as billing records. Or write to support@steed.biz and we'll do it and confirm when it's done.
• Deleted data leaves our backups within seven days.
• Stripe keeps its own payment records under Stripe's rules.

If this page changes, we'll email you before the change takes effect.