Data Processing & Subprocessors

You decide what to enter. Steady Ground acts as a processor on your behalf — storing, organizing, and returning the records you create so you can review or export them. We do not use your records for any purpose other than providing the service to you.

We collect only what is needed to run your account and your records: an email address to sign in, the records and files you add, and minimal account metadata. We do not build advertising profiles, and your records and files are never used to train any model.

To run the service we rely on a small set of subprocessors, each bound by a written agreement that limits their use of data to providing the service to us:

• Infrastructure & database hosting — stores your account, records, files, and entries; encrypted at rest and in transit. Data is scoped to your account and not accessible to other accounts.
• Payments — handles checkout and subscription billing. We never see or store your full card number; the processor holds payment details under its own security standards.
• Optional AI companion — if you use the Pause companion, only the messages you type in that conversation are sent, and only for that exchange. Your records and files are never sent to the AI provider. See the AI Disclosure page.
• Transactional email — delivers account-related messages (such as password resets or receipts) when configured. Email sending is off until a sender domain is verified.

We will update this list if a subprocessor category changes, and we will not transfer your data to a new category of processor without this disclosure.

None of your records, files, or kept Pause conversations are used to train any model, ours or a subprocessor’s. AI providers are used only to respond to a conversation you start, and are instructed not to retain or train on those inputs.

Data is stored with our infrastructure provider in the regions configured for the project. Uploaded evidence lives in private storage that requires your authenticated session to access; files are not reachable through public URLs.

Records and files stay until you delete them or close your account. A kept Pause conversation deletes itself 30 days after the last message. Closing your account removes your data from active systems; routine backups age out on their normal schedule.