Your data, plainly.

Steggo (“we”, “us”) builds joint situational awareness software for emergency services. We are the controller of the personal data described here. Questions about this policy or your data go to ethan@steggo.ai.

The public site uses no analytics, advertising or tracking cookies. Our host keeps standard server logs, such as IP address, browser and pages requested, for security and to keep the site running. If you book a meeting, Calendly handles the booking under its own privacy policy.

Our investor updates at steggo.ai/investors are open only to people we invite. If you are invited, we hold:

• Your details: email address, and the name, firm and role you give when you join.
• Sign-in: if you sign in with Google, we receive only your email address and whether Google has verified it. We do not receive your password, contacts or any other Google data.
• Reading activity: when an update email is sent and opened, when you click through, and how long you spend reading each section of an update online. We use this to see which updates and sections are useful to investors, and to follow up personally.
• Responses:if you choose “Let's talk” or “I can help” on an update, we record that and any note you add, and the team is told so they can follow up.

We use this data to send you updates, let you read them, and manage our relationship with you as an investor or prospective investor. The legal basis is our legitimate interest in keeping investors informed. We never sell it or use it for advertising.

The investor updates set one cookie to keep you signed in for up to 90 days, and a short-lived cookie during Google sign-in to protect it. Both are strictly necessary. Update emails contain a small image that records when they are opened.

Vercel hosts the site, Supabase stores the data, Resend sends our emails and Google provides sign-in. Each acts on our instructions, and some may process data outside the UK under standard contractual protections.

We keep investor details and reading activity while you receive our updates, and delete them within 12 months of your access ending, or sooner if you ask. Server logs are kept for a short period by our host.

Under UK data protection law you can ask for a copy of your data, have it corrected or deleted, object to how we use it, or stop receiving emails (every update has a link to do this). Email ethan@steggo.ai and we will reply within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.

If we change this policy we will update the date below, and tell investors by email if the change is significant.