Privacy Policy

Last updated: May 1, 2026

Synpro Media Ltd ("Synpro Media", "we", "us", or "our") operates the Steve AI Chief of Staff platform accessible at synpromedia.com (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use Steve.

1. Information We Collect

We collect the following information to provide and personalise the Service:

• Account information: Your name, email address, and billing details provided during onboarding.
• Profile information: Details you provide about yourself, your business, family context, location, and preferences — used to personalise Steve's responses and briefings.
• Conversation data: Messages you send to Steve and responses generated on your behalf, stored to maintain memory and continuity across sessions.
• Uploaded files: Documents, images, and files you share with Steve for analysis. These are stored securely and used only in your sessions.
• Integration data: If you connect third-party services (e.g. Google Calendar), we store the access credentials needed to retrieve data on your behalf. We only access what you explicitly authorise.
• Usage data: Technical logs including IP address, browser type, and feature usage, used for security and service improvement.

2. Your AI API Key (BYOK)

Steve uses a Bring Your Own Key (BYOK) model. You provide your own API key from Anthropic, OpenAI, or Google. Your API key is encrypted at rest using AES-256 encryption and is never stored in plaintext. We use it solely to process your requests to your chosen AI provider. We do not share your API key with any third party other than the provider you select.

3. How We Use Your Information

• To deliver and personalise the Steve experience
• To generate your daily briefings, respond in chat, and track tasks on your behalf
• To send you service communications (login links, product updates)
• To process payments via Stripe
• To improve the Service through aggregated, anonymised usage analysis

We do not sell your personal data to third parties. We do not use your conversation data to train AI models.

4. Google Calendar Integration

If you choose to connect Google Calendar, Steve will request read access to your calendar events to include them in your daily briefing. We:

• Store only the OAuth refresh token needed to maintain access
• Access calendar data only to generate your briefings and Steve responses
• Do not share calendar data with third parties
• Allow you to revoke access at any time via your profile settings or directly through your Google Account

Our use of Google user data is limited to the purposes described here and complies with Google API Services User Data Policy, including the Limited Use requirements.

5. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, we retain your data for 90 days before permanent deletion. You may request immediate deletion at any time by contacting us.

6. Data Security

We use industry-standard security measures including encryption at rest, HTTPS in transit, and access controls. No method of transmission over the internet is 100% secure, but we take reasonable precautions to protect your information.

7. Third-Party Services

We use the following third-party services:

• Stripe — payment processing. Stripe's privacy policy applies to payment data.
• Resend — transactional email delivery.
• Google APIs — calendar integration (optional, user-initiated).
• Anthropic / OpenAI / Google Gemini — AI providers using your own API keys.

8. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at the address below.

9. Children

The Service is not directed at children under 13. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes by email or via a notice in the Service. Continued use after changes constitutes acceptance.