Privacy Policy
Last updated: October 24, 2026
ShowStep (showstep.ai) is operated by HIKO Software, a company registered in Taiwan (“we”, “us”). This policy explains what personal data we collect when you use ShowStep, why, who processes it on our behalf, and the choices you have. We wrote it to match what the service actually does today; when that changes, this page changes first.
What we collect
| Data | When | Why |
|---|---|---|
| Email address and the display name you choose | When you create an account or sign in | To identify your account and send sign-in codes |
| Recordings you make or upload (video and audio), and what we produce from them: transcripts, still frames and step documents | When you record or upload | This is the service: turning a recording into a shareable video and a written procedure |
| Name and text of comments left on a shared page, plus a salted hash of the commenter’s IP address | When someone comments on a shared page | To show the comment to the owner and to limit spam; we never store the raw IP address for comments |
| Email address, the campaign or referring page you came from, and your country | If you joined our waitlist | To tell you when the product is ready and to learn which channels work |
| Counts of failed sign-in and email-code attempts, keyed by email address and IP address | When you sign in or request a code | To protect accounts from guessing and abuse |
We do not ask for payment details today. If we introduce paid plans, payments will be handled by a payment processor and this policy will be updated before any charge is possible.
Cookies
Cookies the site needs to work (no consent needed):
- Session — keeps you signed in.
- Preview access — remembers that you entered the preview password while the site is not yet public.
- Shared-page unlock — remembers that you entered the password for a password-protected shared page.
- Cookie settings — remembers your choices about the two items below.
Only with your consent: remembering the language you picked for longer (without it, only until you close the browser), and loading the landing page fonts from Google Fonts (which sends your IP address to Google). We ask on your first visit, and you can change it any time in Cookie settings.
We do not use analytics, advertising or cross-site tracking cookies, and we do not sell or share your personal data for advertising.
Who processes your data
We use the following service providers to run ShowStep. Each receives only what it needs for its task:
- Cloudflare, Inc. (United States) — hosting, database, file storage for recordings and frames, email delivery and PDF rendering. Privacy policy
- BunnyWay d.o.o. / Bunny.net (Slovenia) — video transcoding and playback, including the video player embedded in your pages. Privacy policy
- Groq, Inc. (United States) — converting the audio of a recording into a transcript. Privacy policy
- Anthropic, PBC (United States) — writing the step document from the transcript and still frames. Privacy policy
- Google LLC (USA) — only if you choose “Sign in with Google”: Google tells us your email address, name and profile photo (used only to fill in what your profile is missing; we keep our own copy of the photo). If you allow Google One Tap, pages also load Google's one-tap sign-in script while you are signed out. We never see your Google password. Privacy policy
- Meta Platforms, Inc. (USA) — only if you choose “Continue with Facebook”: Facebook tells us your email address, name and profile photo (used only to fill in what your profile is missing; we keep our own copy of the photo). We never see your Facebook password and never post to Facebook. Privacy policy
How each provider handles data, including whether it may be used to improve its own services, is governed by its own terms; please review the links above. Because these providers operate outside Taiwan, your data may be processed in the United States, the European Union and other countries where they run infrastructure.
Who can see your recordings
Your recordings and step documents are private to your account until you create a share link. Anyone who has a share link can view that page, unless you protect it with a password. You can disable a share link or generate a new one at any time, after which the old link stops working.
How long we keep data
- Account data and recordings are kept while your account is active.
- When you ask us to delete a recording or your account (email us at the address below), we delete the related data from our active systems within 30 days.
- Waitlist entries are kept until the product launches publicly or until you ask us to remove yours.
- Sign-in attempt counters are short-lived and cleared automatically.
Your rights
Under Taiwan’s Personal Data Protection Act you may ask us to let you review your data, give you a copy, correct it, stop collecting, processing or using it, or delete it. If you are in the European Economic Area, the United Kingdom or California, you also have the rights your local law provides, such as data portability, objecting to processing, and lodging a complaint with your data protection authority.
To exercise any of these rights, email support@showstep.ai from the address on your account. We will reply within 30 days. Providing your email address is necessary to create an account; without it we cannot provide the service.
Children
ShowStep is not intended for anyone under 16, and we do not knowingly collect their data.
Changes to this policy
If we make material changes, we will update the date above and, where appropriate, tell you by email or on the site before the change takes effect.
Contact
HIKO Software, Taiwan — support@showstep.ai