Last updated August 14, 2026
Information we collect
When you request early access, we collect the information you choose to provide, including your work email, company, role, and optional description of the work you want Steel to handle.
We also collect technical, usage, and campaign information, such as pages viewed, links selected, referral source, campaign parameters, approximate device and browser characteristics, general location derived from network information, website performance and diagnostic information, and randomly generated session identifiers. When session replay is active, we also collect page content and layout as displayed during a visit and interactions such as navigation, clicks, pointer movement, and scrolling. Our intake service uses an irreversible network-address digest for abuse prevention; it does not store the raw address in the marketing database.
How we use information
- Respond to early-access requests and evaluate fit.
- Understand which pages, workflows, and campaigns are useful.
- Operate, protect, troubleshoot, and improve the website and intake process.
- Prevent spam, fraud, and misuse.
- Meet legal obligations and enforce our terms.
Analytics and session recording
We use our first-party measurement service and PostHog, a service provider, to understand website usage, evaluate campaigns, diagnose technical and usability problems, and improve the site and intake process. PostHog uses session-only browser storage on this website and discards raw client IP addresses. Interaction autocapture is limited to clicks on selected CTA links and buttons.
PostHog session replay reconstructs a visitor's experience from captured page structure and interaction data; it is not a camera or screen-video recording. We configure PostHog to mask all form-input values in replays and do not intentionally send lead fields such as work email, company, role, or message text to PostHog as analytics event properties. Network request and response bodies and headers are not captured. Replays may include surrounding page content, navigation, clicks, pointer movement, scrolling, performance information, and browser-console diagnostics. PostHog session recordings are retained for 30 days, and analytics events may be retained for up to 12 months.
How we share information
We may share information with service providers that help us host the site, operate secure data infrastructure, process intake requests, measure site performance, and protect against abuse. They may use information only to provide services to Steel or as required by law.
We do not sell personal information. We may disclose information when required by law, to protect rights and safety, or as part of a merger, financing, acquisition, or transfer of the business, subject to appropriate safeguards.
Retention and security
We retain information only as long as reasonably needed for the purposes described here, including responding to requests, maintaining business records, security, and legal compliance. We use administrative and technical safeguards designed to protect information, but no system can guarantee absolute security.
Your choices
You may ask us to correct or delete information you submitted or associated with your visit, or ask us not to contact you. You may also use browser privacy controls or content-blocking tools to limit analytics requests, although those controls may affect website functionality. Privacy rights vary by location and may be subject to legal exceptions. Send your request through our early-access form and state that it is a privacy request in the optional message.
Children and international visitors
This business website is not directed to children, and we do not knowingly collect personal information from children. If you visit from outside the United States, your information may be processed in the United States or other locations where our service providers operate.
Changes and contact
We may update this policy as the website and product evolve. We will post the revised policy here and update the date above. For questions or requests, use the early-access form and identify your message as a privacy question.