Privacy, explained.

1. Who is responsible

Delta4 Infotech Private Limited, India, operates Steerable and is responsible for the personal data described here. This policy covers our website, account service and apps. For privacy requests or concerns, email [email protected].

2. What we process and why

Account and sign-in details

Your email, name if provided, password hash, account identifier and sign-in records support registration and authentication. Account passwords are stored as hashes, not as the original text.

Devices and connections

Device names and identifiers, public keys, approvals, session times, permitted capabilities and security events help connect your devices and protect access. Network services process IP addresses and other technical connection data to route traffic.

Remote-session content

Screen images and control input travel between approved devices. Clipboard content and audio are processed when you use those features. Your screen and apps may contain personal information belonging to you or others.

Enquiries and waitlist signups

We use the name, email, topic, message and submission time you provide to respond to enquiries. Waitlist records contain an email, signup time and consent version for launch updates. Contacting support does not subscribe you to marketing. You can ask us to stop launch updates at any time.

Subscriptions

A trial or purchase involves account, plan, billing and transaction information needed to manage your subscription. The payment service identified during checkout processes payment details under its own disclosures.

Where a legal basis is required, we process data to provide the service you request, meet legal obligations, protect the service against abuse, and respond to enquiries. We rely on consent where required, including optional marketing. Required account and connection details are needed to provide remote access.

3. Remote access and permissions

Screen and control traffic uses encrypted WebRTC between your devices. A relay may forward that encrypted traffic if a direct connection is unavailable. Steerable’s account and connection services process identity and authorization records separately. Local mode still requires account sign-in and authorization.

The Mac needs screen-capture and input-control permissions. On supported clients, camera access scans pairing invitations and microphone access records dictation you choose to send. Permissions depend on the app and feature; change them in device settings to stop that access.

4. AI providers and your content

Steerable does not use your chats or other user content to train AI. Copilot can send instructions, relevant screen images, app text and tool results to the provider you connect, including fallback providers you enable. This is separate from remote-session encryption. The provider’s own retention and training policies and your account settings apply to its processing.

Saved Copilot API keys are held in macOS Keychain. Provider runtimes may keep local account and conversation records. Clearing a chat or deleting your Steerable account does not necessarily erase those records or a provider’s copy. Other agents on your Mac follow their own permissions and policies.

5. Providers and international processing

We use AWS, Vercel and Cloudflare for cloud infrastructure, website delivery and network services. Website form submissions go to a private team channel on Discord. Email services handle correspondence, payment services handle checkout, and your chosen AI providers handle the task data described above. Do not send passwords, recovery codes or API keys in support messages.

Steerable serves users worldwide. These services may process data outside your country, including through their international infrastructure. Contact us for information about processing locations and safeguards relevant to your data. We may also disclose information where required by law or necessary to investigate abuse and protect legal rights.

6. Cookies and device storage

The public website’s application code does not add advertising trackers or analytics cookies. Product sign-in uses authentication sessions. Controllers also store device identity, trusted-host information and preferences to support secure connections. Clearing this data may require signing in and approving the device again.

7. How long data is kept

We retain personal data while needed to provide your account and service, resolve your enquiry, or meet legal, billing and security obligations. Retention depends on the purpose and applicable requirements. Records that are no longer needed are deleted or anonymized; a deletion request may leave limited records that must be retained for those obligations, including copies awaiting backup expiry. We will explain applicable exceptions when handling a request.

Use the account deletion page to request removal of your account and associated personal data. This does not erase files on your devices or close a separate AI-provider account. Website enquiries and earlier waitlist details can also be requested for deletion.

8. Age and parental permission

Account holders must be 18 or older. Someone under 18 may use Steerable only with a parent or legal guardian’s permission and supervision, where permitted by law. The adult must hold the account and accept responsibility for its use. Parental permission does not replace any consent or age checks required by local law. Contact us if you believe a child has provided data without the required permission.

9. Your rights and questions

Email [email protected] to request access, correction or deletion, or raise a privacy concern. Depending on applicable law, you may also request a portable copy, restrict or object to processing, withdraw consent, or complain to your local data-protection authority. Withdrawal does not affect processing already carried out lawfully.

We may need limited information to verify your request. We respond within the period required by applicable law. Material changes to this policy will be communicated as required, and the date above will be updated.