Privacy Policy

Who we are

SteadyLink is operated by Nolan Taft, an individual doing business as SteadyLink in Florida, United States, who is responsible for the personal information described here. Questions and privacy requests can be sent to [email protected].

What we process

SteadyLink processes account information such as your email address, account and session security records, workspace membership, billing status, support requests, and workspace activity. We also process the files, names, paths, technical metadata, revisions, and access settings you put in a workspace.

Service requests create operational records such as timestamps, request IDs, error details, IP address and user-agent information where needed for security, rate limiting, fraud prevention, and troubleshooting.

During signup, you may optionally share your name, occupation, and how you heard about SteadyLink. We may also record campaign parameters, the signup landing page, and the referring site when available.

Why we process it

We use this information to provide the service you ask for, authenticate accounts, deliver files, prevent abuse, operate billing, respond to support requests, diagnose reliability or security problems, understand how people discover SteadyLink, and improve our marketing. We do not sell uploaded content or use it to train advertising systems.

If you are in the European Economic Area or the United Kingdom, we rely on performing our contract with you for the service itself, on our legitimate interests for security, abuse prevention, and understanding how the service is used, on your consent for optional analytics and advertising measurement, and on legal obligations where they apply.

Files and delivery

Your files are processed by storage, malware-scanning, conversion, transformation, and delivery systems only to provide the features you use. Public files can be requested by anyone with their URL. Private files require the access controls you configure. Do not upload highly sensitive information unless your workspace configuration and plan are appropriate for that use.

Cookies and optional analytics

Essential cookies support sign-in, fraud prevention, session security, and your privacy choices. They are necessary for the service to work.

We use PostHog to count page visits and a short list of product actions, such as finishing an upload or copying a link. Until you allow analytics, PostHog sets no cookies, keeps no record between visits, does not record sessions, and does not know who you are. Events never include file names, file contents, asset URLs, access tokens, or workspace names, and we strip tokens and signatures from page addresses before they are sent.

Optional analytics cookies stay off until you allow them. When you allow them, PostHog stores a cookie so visits can be connected, Google Analytics and DataFast receive page visits and product events, DataFast links a purchase to the visit that led to it, OpenAI's advertising measurement tag records whether a visit from an OpenAI ad led to a signup or purchase, and PostHog links activity to your account (your user ID, email address, and name) and may record your session with every form field hidden. You can change this choice with Cookie settings in the footer. If your browser sends a Global Privacy Control signal, all of this stays off, including the cookieless PostHog counts.

Who helps us run the service

We share information only with providers that process it for us to run SteadyLink:

• Railway, for application hosting and databases
• Cloudflare, for file storage, content delivery, and network security
• Amazon Web Services and Resend, for sending and receiving email
• Polar, our payment processor and merchant of record
• Google and GitHub, when you choose to sign in with them
• GlitchTip and PostHog, for error reports and product analytics
• Google Analytics, DataFast, and OpenAI, only after you allow optional analytics

We may also disclose information when the law requires it, to respond to valid legal process, to protect people or the service from harm or abuse, or as part of a sale or reorganization of SteadyLink.

We do not sell personal information. Sharing visit data with advertising measurement providers happens only after you allow optional analytics, and you can withdraw that choice at any time with Cookie settings or a Global Privacy Control signal.

Where data is processed

SteadyLink is run from the United States and our providers may process data in the United States and other countries. When we transfer personal information out of the European Economic Area or the United Kingdom, we rely on the safeguards our providers offer, such as standard contractual clauses.

Retention and deletion

Files and retained revisions stay in a workspace until you delete them or the workspace is closed, subject to limited backup and legal-retention periods. Temporary conversion results expire according to the active plan. Account, security, billing, and audit records are retained only as long as needed for the purposes above, including fraud prevention and legal obligations.

Your choices and rights

You can update account details, manage sessions, remove content, change optional analytics choices, and cancel a paid plan through the product. Depending on where you live, you can also ask to access, correct, delete, or receive a copy of your personal information, object to or restrict some processing, or withdraw consent. Send requests to [email protected] from the email address on your account and we will respond within 30 days. We may need to confirm your identity first, and we may retain limited records when required for security, billing, dispute handling, or law. You also have the right to complain to your local data protection authority.

Children

SteadyLink is not directed to children under 13, or under 16 in the European Economic Area and the United Kingdom, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

If this policy changes materially, we will update the version date here and ask signed-in users to acknowledge the current version before continuing to use their workspace.