Privacy Policy
Last updated: January 2025
1. Introduction
Steppable Inc. ("we," "our," or "us") operates VES (Visual Evaluation System) and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
Account Information
When you sign up for VES, we collect:
- Name and email address (via Google authentication)
- Google account identifier
- Company/organization name
- Billing information (processed securely through our payment provider)
Integration Data
Through your connected services, we access:
- PostHog session replay data and metadata
- Linear workspace information for ticket creation
- Authentication tokens for these services (stored securely)
Usage Data
We automatically collect:
- Service usage patterns and feature interactions
- Analysis metrics and performance data
- Error logs and debugging information
3. How We Use Your Information
We use the collected information to:
- Provide and maintain the VES service
- Analyze session replays using AI to identify issues
- Create tickets in your Linear workspace
- Process payments and manage subscriptions
- Send service-related notifications
- Improve and optimize our service
- Provide customer support
- Comply with legal obligations
4. Data Processing and AI Analysis
Our AI system processes session replay data to:
- Identify bugs and technical issues
- Detect UX friction points
- Suggest product improvements
- Prioritize and deduplicate issues
AI analysis is performed on our secure servers. We do not use your data to train general AI models or share it with third-party AI services beyond what's necessary for providing VES functionality.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share your information only in these circumstances:
- With your consent
- To comply with legal obligations
- To protect our rights, privacy, safety, or property
- With service providers who assist in operating VES (under strict confidentiality agreements)
- In connection with a merger, acquisition, or sale of assets
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit (TLS/SSL) and at rest
- Regular security audits and vulnerability assessments
- Access controls and authentication requirements
- Secure data centers with physical security measures
- Regular backups and disaster recovery procedures
7. Data Retention
We retain your data for as long as necessary to provide our services:
- Account information: Duration of account plus 30 days
- Session analysis data: 90 days or your configured retention period
- Billing records: As required by tax and accounting regulations
- Aggregated analytics: Indefinitely (anonymized)
8. Your Rights and Choices
You have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Opt-out of marketing communications
- Withdraw consent for data processing
To exercise these rights, contact us at privacy@ves.ai.
9. Cookies and Tracking
We use cookies and similar technologies to:
- Maintain your session and authentication state
- Remember your preferences
- Analyze service usage (via privacy-focused analytics)
We do not use third-party tracking cookies or advertising cookies.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
11. Children's Privacy
VES is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware of such collection, we will delete that information immediately.
12. California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA), including:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising privacy rights
13. GDPR Compliance
For users in the European Economic Area (EEA), we process data under the following legal bases:
- Contract: To provide our services
- Consent: For optional features and marketing
- Legitimate interests: For service improvement and security
- Legal obligations: To comply with applicable laws
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of VES after changes constitutes acceptance of the updated policy.
15. Contact Information
For privacy-related questions or concerns, contact us at:
Steppable Inc.
Email: team@ves.ai
Website: https://ves.ai