1. Data We Collect
Last updated: October 8, 2026
This policy explains what data StepRec (operated by [To be confirmed], an independent developer, "we") collects, why, and your choices. StepRec is an AI screen-recording tool that turns recordings into step-by-step guides and SOP documents. If the Chinese translation of this policy differs from the English version, the English version prevails.
- Account data: email address and account settings.
- Content data: screen recordings, audio, screenshots, transcripts, and generated documents that you create or upload, and the metadata needed to organize them (titles, timestamps, durations).
- Usage data: feature usage, quota consumption, device and browser type, and diagnostic logs used to operate and secure the service.
- Payment data: billing is handled by our merchant-of-record partners, who process your payment details under their own privacy policies. We receive limited billing records (plan, status, transaction identifiers) but not your full card number.
2. How We Use Data
We use your data to: provide the service (storage, playback, transcription, AI document generation, export); manage your plan and quotas; provide support; secure and improve the service. When you request AI generation, your recording's audio and relevant frames are processed by AI service providers acting on our instructions, solely to produce your requested output. We do not sell your personal data, and we do not use your recordings or documents to train models for other customers.
3. Sharing and Subprocessors
We share data only with service providers necessary to operate StepRec, under contract, including: cloud storage and hosting providers, AI transcription and generation providers, payment processors (merchant of record), and email delivery services. We may disclose data where required by law.
4. Storage and Security
Content is stored in cloud infrastructure located in the Asia-Pacific region (Singapore) and transmitted over encrypted connections. Access is controlled by authentication and account-level permissions. No method of storage is completely secure, but we apply administrative and technical safeguards proportionate to the data we hold.
5. Retention and Deletion
Your Content is retained while your account is active or as needed to provide the service. You may delete recordings and documents at any time from within the product; deleted content is removed from active storage within 30 days, except where retention is required by law or for legitimate security and billing records.
6. Your Rights
Subject to applicable law, you may request access to, correction of, export of, or deletion of your personal data, and may object to or restrict certain processing. Contact us at support@xeyond.com; we respond within 30 days.
7. Cookies
We use only cookies and similar technologies that are strictly necessary for sign-in, security, and core functionality, plus privacy-respecting product analytics where applicable.
8. Children
The service is not directed to children under 16, and we do not knowingly collect their data.
9. Changes
We will post updates to this policy on this page and, for material changes, notify you by email or in-product notice before they take effect.
Contact: support@xeyond.com
Questions? Contact support@xeyond.com