Privacy Policy

Data we process

• Account and profile: name, email, verified phone number (if provided), avatar, bio, location, website, and identifiers for linked Google or Telegram accounts.
• User content: prompts, responses, chat history, feedback, agent memory, uploaded files, photos, videos, and audio that you explicitly submit or record.
• Workspace connection data: selected servers, workspace files, and agent action parameters and results. Connection secrets are used for the selected connection and requested actions.
• Purchases: plan, term, coupons, amount, currency, status, and order identifier. The current one-time checkout does not save a card. If the user separately consents to saving a payment method in the future, we may receive its provider identifier, type, and mask; we do not receive the full number, expiry date, or CVC.
• Technical and security data: IP address, User-Agent, sign-in time, hashed device identifier, security logs, errors, and AI usage duration and volume.

Why we use data

We use data to:

• create and protect accounts, maintain sign-in, and sync across devices;
• fulfil AI requests and process files, voice, and actions on resources selected by the user;
• show history, limits, plan and purchase status, and provide support;
• prevent abuse, investigate failures, and secure the service;
• meet legal and accounting obligations.

Service providers and data transfers

To operate the service, data may be transferred to hosting and database providers, AI model and speech-recognition providers, email services, Google and Telegram for sign-in, and the payment provider identified directly at checkout. Robokassa will receive order and payment data only after it is connected and the user selects the corresponding payment method. Only data needed for the specific function is transferred. An AI request and the necessary context may be processed by the selected or automatically assigned model provider, including Anthropic or models available through OpenRouter.

A provider may process data in another country under its terms and privacy policy. We do not sell personal data or use it for third-party targeted advertising.

Retention and security

Account data is retained while the account is active. Chat retention depends on the plan and is shown in the product; temporary codes and working data are kept only as long as needed for the operation. Technical, security, and payment records are retained as needed for security, dispute resolution, and legal requirements.

We use encryption in transit, password hashing, access controls, and protected local token storage with Android Keystore. Android system backup for app data is disabled. No security measure eliminates all risk.

Your rights and deletion

You can view and change your profile, privacy settings, and linked sign-in methods, and request access, correction, or deletion of your data. Account deletion is available in the app and on the website.

Children

SteelRework is not directed to children under 13. Where local law requires a higher age or parental consent to use the service, the user must meet that requirement. If you believe a child submitted data without the required consent, contact support.

Changes to this policy

We update this page when the product or its data practices change. The latest revision date appears at the top; material changes may also be announced in the app or on the website.

Contact