Privacy Policy

1. Information We Collect

1.1 Information you provide

• Account information: Name, email address, username, profile details, and credentials needed to create and manage your account.
• Authentication information: If you sign in with a third-party provider (such as Google or GitHub), we receive information permitted by that provider, such as your name, email address, and profile identifier.
• Content: Codelabs, courses, drafts, and other materials you create, publish, or store on Stepwik.
• Payment and subscription information: Billing details processed by secure third-party payment providers, subscription plan, and payment history.
• Communications: Information you send when you contact support or otherwise communicate with us.

1.2 Information collected automatically

• Log and usage data: IP address, browser type, operating system, device information, pages visited, features used, and timestamps.
• Analytics data: When you accept analytics cookies, we may use tools such as Google Analytics to understand how the Service is used.
• Cookies and similar technologies: See Section 11 and our Cookie Declaration.

1.3 Connected account and extension data

When you connect Google, GitHub, or use our Chrome extension, we may access additional data as described in Section 4.

2. How We Use Your Information

We use information to:

• Provide and operate the Service: Including hosting codelabs, collaboration, AI-assisted generation, and account management.
• Authenticate and secure accounts: Prevent fraud, abuse, and unauthorized access.
• Power AI features: When you use AI tools, your content and prompts may be processed by third-party AI providers to deliver requested functionality.
• Improve the Service: Including quality, accuracy, safety, and relevance of AI and platform features, as described in Section 4.
• Manage subscriptions and billing: Process payments and provide access to paid features.
• Communicate with you: Transactional messages, security notices, and marketing where permitted and with your consent.
• Comply with legal obligations: Respond to lawful requests and enforce our terms.

3. How We Share Your Information

We do not sell or rent your personal information. We may share information in these circumstances:

• Service providers: Cloud hosting, email, analytics, payment processing, AI processing, and security vendors bound by contractual confidentiality and data protection obligations.
• AI service providers: When you use AI features, content and prompts may be sent to providers such as OpenAI, Anthropic, or Google for processing.
• Public content: Information you publish may be visible to others according to your sharing settings.
• Legal requirements: When required by law or to protect rights, safety, and integrity of the Service.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice where required by law.

4. Connected Account and Extension Data Usage

Some Stepwik features allow you to connect third-party accounts or use browser extensions to create codelabs and other educational content. This section explains what data is accessed and how it is used.

Google Slides and Google Drive

• When you connect Google and select a presentation, we access presentation metadata and slide content (including text and speaker notes) needed to generate codelab drafts.
• We do not modify, delete, or change sharing permissions for your Google files as part of this feature.
• Access is tied to your account and can be removed any time by disconnecting Google from Stepwik or revoking access in your Google account settings.

GitHub Repository Access

• When you connect GitHub, we access repository information and files required to generate codelab content from the repository you provide or select.
• We do not push code, create commits, or modify repository settings unless a feature explicitly requests and discloses write access.
• You can disconnect GitHub at any time to stop future access from Stepwik.

Chrome Extension Data

• If you use our Chrome extension, it may access page content or metadata necessary to perform extension actions requested by you.
• Data collected by the extension is used only to provide the extension feature, improve reliability, and support the related Stepwik workflow.
• You can stop this collection by disabling or uninstalling the extension.

Policy Commitments

Our use of data from Google APIs and other connected services is limited to providing and improving user-facing features in Stepwik and is handled in accordance with applicable platform policies, including the Google API Services User Data Policy.

We may also use codelab inputs, generated outputs, and related interaction data to train, evaluate, and improve our AI systems, including quality, accuracy, safety, and content relevance improvements for Stepwik features.

5. Data Retention

We retain personal information while your account is active or as needed to provide the Service. If you delete your account, we remove your content from public view and delete account information, though some data may be retained for legal, compliance, fraud prevention, or legitimate business purposes.

• Account data: Retained while active and for a reasonable period after deletion where required.
• Subscription data: Billing records may be retained up to 7 years for tax and accounting compliance.
• Content data: Retained per your settings; backups may persist for a limited period after deletion.
• Usage data: Typically retained up to 2 years for service improvement, subject to anonymization where applicable.

6. Security Measures

We implement commercially reasonable technical and organizational measures to protect your information, including HTTPS encryption, secure session handling, and access controls. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can:

• Update account information in your settings.
• Disconnect Google, GitHub, or other integrations at any time.
• Manage cookie preferences via our banner or browser settings.
• Opt out of marketing emails using unsubscribe links.
• Request account deletion by contacting us.

To exercise your rights, contact policy@stepwik.com.

8. Data Deletion Policy

You may request deletion of your account and associated data by emailing policy@stepwik.com.

What gets deleted

• Account profile and personal information
• Published codelabs and courses (subject to org/workspace rules)
• Usage data and preferences tied to your account
• AI feature usage history linked to your account

What may be retained

• Payment and billing records required for tax and accounting (typically up to 7 years)
• Data in backups until routine rotation
• Anonymized analytics that cannot identify you

Deletion requests are typically processed within 30 days. Active subscriptions are cancelled as part of account deletion.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at policy@stepwik.com.

10. Data Breach Notification

If a breach compromises your personal information, we will investigate, contain, and remediate the incident; notify affected users and authorities where required; and describe the nature of the breach and steps you can take. We will notify you via email associated with your account.

11. Cookies and Tracking Technologies

We use essential cookies for authentication and preferences, and with your consent, analytics and marketing cookies. You can manage choices through our cookie banner or browser settings.

For a full list of cookies and how to control them, see our Cookie Declaration.

12. International Users

The Service may be operated from jurisdictions outside your country. By using Stepwik, you consent to the transfer and processing of your information in accordance with this Privacy Policy and applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy.