Your data
What we hide, what we ask and what we keep
StepLoom records screens of your app. This page says in plain words what happens to the details on them, and what happens to the people who open your demos.
The EU's GDPR says a breach must be reported to the regulator not later than 72 hours after you become aware of it, where that is possible.”
Nigeria's data protection law is another example: consent must be provable, and a breach that puts people at risk must be reported within 72 hours.”
Nigeria Data Protection Act 2023
A law-firm guide's plain summary of the consent and breach rules.
Read the sourceHidden before saving
The StepLoom Recorder covers private details on your computer, before a screen is saved. Card numbers, emails, phone numbers, bank account numbers, national ID numbers (such as Social Security, Aadhaar, BVN and NIN), names, passwords and balances are covered.
StepLoom AI reads every screen again for what was missed and draws a box on each one. You review the boxes, turn off any you do not want and add your own.
When you publish, the covers are drawn into the picture. The original stays private in your workspace.
What your viewers are asked
A demo can carry a short form for name, phone, email and company. It is off until you turn it on.
The consent box starts unticked, the reason for asking is written beside it, and you can let people skip the form. A WhatsApp opt-in is a separate box.
Each saved contact keeps the words the person agreed to.
What we record about viewers
For each viewer we keep the steps they reached, the time spent on each step, the language, how they arrived (a chat, a website, a QR code or a personal link), the kind of device and the country or time zone.
A random number kept in the viewer's own browser tells us it is the same person coming back. We set no tracking cookies and show no adverts.
Where it lives
Your demos, pictures and viewer records are stored on our servers.
The work of writing, hiding, translating and speaking runs in the European Union.
Rules that apply
Privacy laws differ by country. The EU's GDPR and Nigeria's Data Protection Act (NDPA) are two examples, and both ask for plain things such as a clear reason for asking, consent you can show, and a report when something goes wrong.
StepLoom is built so you can meet them. The contact form asks for consent and keeps the words the person agreed to. Private details are covered before a screen is saved. You decide who sees what.
This page is a plain summary, not legal advice. Check the rules that apply to your business.
Keep and delete
You can delete a demo from your workspace.
To remove everything we hold for you, ask through the Talk to us page and we will do it.
Questions? Talk to us.