the operator of Steer (company registration in progress) operates Steer and is the controller of the personal data described here. Registered address to be confirmed on incorporation.
Steer turns your profile into a page people can talk to. That means we handle a few sensitive things — most notably a recording of your voice — so this page explains exactly what we collect, where it goes, and what stays yours.
Two things worth knowing up front. When a visitor speaks to your page, their speech is turned into text by their own browser — that audio never reaches our servers. And we measure visits without cookies or cross-site tracking.
Your email address and a password that is stored only as a salted scrypt hash — we never store or can see your actual password. If you subscribe, we store your Stripe customer and subscription identifiers.
Whatever you put on it: your name, role, location, bio, questions and answers, links, photo, colours and voice choice. Once you publish, this is public by design — anyone with your link can read it, and search engines may index it. Don't put anything on your page you wouldn't put on a public website.
If you use voice cloning or the "just talk" setup, your recording is sent to our processors to be transcribed and turned into a voice model. We do not keep the raw audio on our servers — it passes through memory to the processor and is discarded. The resulting voice model is stored by our voice provider under an identifier attached to your page, and is created as private, never listed in any public voice marketplace.
Questions visitors type or speak to your page are sent to our AI provider to generate an answer, and recent questions and answers are shown to you in your dashboard so you can see what people ask. Don't invite visitors to share sensitive personal information through your page.
We count page views and approximate unique visitors. To do that without cookies, we create a short irreversible hash of the visitor's IP address and browser type, scoped to your page and to that day. We store only the resulting counter — not the IP address, and the hash cannot be reversed or used to follow anyone across sites or days.
We don't sell your data or use it for advertising. We use these processors purely to run the service:
| Processor | What they receive |
|---|---|
| OpenAI | Voice recordings for transcription; page content and visitor questions to generate answers and speech |
| Fish Audio | Voice recordings to create your voice model; text to speak in your voice |
| ElevenLabs | Same as above, only if that provider is enabled for your account |
| Stripe | Payment details, entered directly with them — we never see or store your card number |
| Resend | Your email address, to send verification, password resets and (if enabled) your weekly digest |
| Fly.io | Hosting and database infrastructure |
We may also disclose information if we're legally required to, or where it's necessary to investigate abuse or protect people from harm.
We operate from the United Arab Emirates, and the processors listed above operate internationally — so your information, including any voice recording and the resulting voice model, is transferred to and processed in other countries, including the United States.
Where the law requires a basis for that transfer, we rely on your explicit consent — given when you create an account and again each time you clone a voice — and on the contractual protections in our agreements with each processor. You can withdraw that consent by deleting your account, which also instructs our voice provider to delete any model created for you.
| What | Kept for |
|---|---|
| Account and page content | While your account is open |
| Raw voice recordings | Not stored — discarded once processed |
| Your cloned voice model | Until you replace it or delete your account |
| Conversation log (visitor questions) | Most recent conversations, shown in your dashboard |
| Visit counters | Aggregate only, kept for historical reporting |
| Billing records | As long as tax and accounting law requires |
You can delete your account yourself, at any time, from Settings in the studio. That erases your pages, your conversation history and your cloned voice model at our provider, and cancels any subscription. It cannot be undone.
You can access, correct, export or delete your information — most of it directly in the studio, and the rest by emailing us. Depending on where you live you may also have the right to object to or restrict certain processing, and to complain to your local data protection authority. Voice recordings may be treated as biometric information in some places; we handle them as sensitive data and only ever process a voice you have told us is yours.
Traffic is encrypted in transit. Passwords are hashed, and any provider API keys you store are encrypted at rest. Access to production systems is limited. No service can promise perfect security, but we treat voice data with particular care.
Steer isn't intended for anyone under 16, and we don't knowingly collect their information.
If we make a material change we'll update the date at the top of this page and, where it matters, tell you by email.
Questions, requests or concerns: privacy@steer.social.