Privacy Policy

This policy describes what Stedra collects, why, and what your choices are. The short version: we collect what's needed to run the service, we never store your account passwords, we don't sell data, and you can export or delete your data at any time by contacting us.

What we collect

• Account information. Your name, email address, company name, and a hash of your Stedra password (we can't see the password itself).
• Scan data. When you (or anyone) runs a scan on a domain, we read publicly available records — domain registration data (RDAP), DNS records, and the public homepage — and store the findings. This is public data; we don't access any account to obtain it.
• Register data you enter. Asset details, interview answers, people and their roles, renewal dates, notes. This is your business's information; you control it.
• Email addresses you give us. For example, when you ask us to email a scan report.
• Usage counts. Our analytics are first-party and cookieless: we count page views and events (a scan was run, a signup happened) without storing who you are, and we honor Do Not Track. The only cookie Stedra sets is the session cookie that keeps you signed in.

What we never collect

• Your passwords and credentials for other services. Stedra records who owns and can recover each asset — never the logins themselves. Don't paste credentials into notes fields.
• Advertising identifiers, tracking pixels, or third-party analytics cookies. There are none on this site.

How we use it

• To provide the service: scans, scores, reports, monitoring alerts, and the emails you've asked for.
• To send transactional email (password resets, invites, alerts, digests). You can adjust notification preferences in settings.
• To understand aggregate usage of the product and site (counts, not profiles).
• We do not sell personal data, and we don't share it with third parties except the service providers below.

Who else touches the data

We use a small number of service providers to run Stedra: hosting infrastructure and a transactional email provider (to deliver the emails described above). They process data on our instructions. If you're a client of one of our partner firms, that firm can see the register data for your business — that's the service — under their own engagement with you.

Retention, export, deletion

• Your register and account data are kept while your workspace is active.
• You can export your data (CSV of assets and people, PDF reports) from the product at any time.
• To delete your workspace and its data — or to ask what we hold about you — email hello@stedra.io. We'll confirm completion.
• Anonymous scan results from the public scan page are periodically purged.

During the beta

Stedra is in beta. The service is free, and we may contact beta users for feedback — that's the deal, and you can opt out of feedback emails without losing anything.

Changes and contact

If this policy changes materially, we'll note it here and email account holders. Questions, export requests, deletion requests: hello@stedra.io.