Privacy Policy
How StepX AI collects, uses, and protects your information.
Effective date: May 6, 2026
StepX ("we", "our", "us") respects your privacy. This Privacy Policy explains what information we collect when you use StepX AI, how we use it, with whom we share it, and the choices you have. By using the Service you agree to the practices described below.
This Policy applies to information processed through our website, applications, APIs, agents, knowledge bases, and integrations.
1. Information We Collect
We collect only the information necessary to provide and improve the Service. Specifically:
- Account data: name, email address, password hash, profile picture, organization, role, billing contact, locale, time zone.
- Authentication data: OAuth identifiers (e.g., Google) and session tokens.
- Workspace content: agents, prompts, knowledge bases, files, embeddings, automation flows, channel configurations, and other materials you create or upload.
- Conversation data: messages exchanged with AI agents, including end-user inputs and AI-generated outputs, retained to operate sessions and analytics.
- Usage and telemetry: log data such as IP address, device, browser, operating system, request paths, response codes, latency, error stacks, and feature usage.
- Billing data: plan, invoices, payment status, and limited transaction metadata. Card numbers are processed by PCI-compliant payment providers; we do not store full card details.
- Support communications: emails, tickets, and chat messages you send to our support team.
- Cookies and similar technologies: strictly necessary cookies for authentication and security, plus optional analytics cookies described below.
2. How We Use Your Information
We use the information to:
- Provide, operate, secure, and maintain the Service, including authenticating you and routing requests to AI providers.
- Process payments, manage subscriptions, and prevent fraud or abuse.
- Communicate with you about service updates, security alerts, billing, and support.
- Improve the reliability, performance, and quality of the Service through aggregated analytics and bug investigations.
- Comply with legal obligations and enforce our Terms.
We will not sell your personal data, and we will not share or disclose your data to third parties for their own marketing or for training third-party foundation models without your explicit consent or unless required by law.
3. We Do Not Sell Your Data
StepX does not sell, rent, or trade your personal information or User Content to third parties. Workspace content (agents, prompts, knowledge, conversations) is used solely to operate the Service for you, perform support, and protect against abuse.
5. Use of AI Models and Training
Inputs you submit to AI features may be transmitted to third-party model providers strictly to generate the requested output. We do not use your User Content to train StepX's own foundation models, and we do not authorize providers to train their public models on your content unless you explicitly enable such an option.
Some providers may temporarily retain inputs and outputs for abuse monitoring as required by their policies. Please review their privacy notices for details.
6. Data Retention
We retain personal data for as long as your account is active and as long as needed to provide the Service. Logs and telemetry are typically retained for up to 12 months, billing records for as long as required by tax and accounting law (commonly 5–10 years), and backups for a limited rolling window.
When you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required by law or to resolve disputes and enforce our agreements.
7. Security
We implement industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS), encryption at rest for sensitive data, role-based access control, secret management, audit logging, and least-privilege access for personnel. No method of transmission or storage is 100% secure; you are responsible for keeping your credentials safe.
8. Your Rights
Depending on your jurisdiction (including under Vietnam's Decree 13/2023/NĐ-CP on Personal Data Protection and the GDPR where applicable), you may have rights to:
- Access, correct, or update your personal data.
- Request deletion or restriction of processing of your personal data.
- Object to certain processing or withdraw consent where processing is based on consent.
- Request a portable copy of data you have provided.
- Lodge a complaint with the competent data protection authority.
To exercise these rights, contact us at contact@stepx.vn. We may need to verify your identity before fulfilling the request.
9. International Data Transfers
The Service may store and process information in data centres located outside your country. When data is transferred internationally, we apply appropriate safeguards (such as standard contractual clauses or equivalent measures) and require sub-processors to maintain comparable protection.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact contact@stepx.vn so we can delete it.
12. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the app, email, or our website. The date of the most recent update is shown above.
13. Cooperation with Authorities
StepX reserves the right, and in certain cases is required, to disclose information to competent state authorities pursuant to Vietnamese law or other applicable law. This includes responding to requests from courts, prosecutors, police, cybersecurity agencies, and regulators in order to investigate, prevent, or address fraud, security issues, technical issues, or unlawful activities, and to protect the rights, property, or safety of StepX, our users, or the public.
Contact
For privacy questions or to exercise your rights, contact contact@stepx.vn. For general support, contact contact@stepx.vn.