Privacy

Last updated October 30, 2026

This page explains what Steward collects on stewardstudio.io and in the hosted app at app.stewardstudio.io, why, and what you can do about it. Questions go to hello@stewardstudio.io.

This website

If you request access, we keep the email address you give us, and the role and the note about what you run if you add them. We use them to decide who to let in next and to email you when there's room. We don't send a newsletter, and we don't sell or rent the list to anyone.

This site sets no tracking cookies and loads no analytics or advertising scripts. Our host keeps standard server logs (the address a request came from, the page and the browser) for security, for a short time.

If you are signed in to the app, the site may read a cookie that says only that you are signed in, so it can show "Open the app" instead of "Sign in". It holds no account details.

The hosted app

When you use a studio we host, we store what's needed to run it:

• Your account: your handle, your name, and a scrambled (hashed) version of your passcode. We never store the passcode itself.
• What you and your agents create: chats, tasks, decision cards, business records, numbers and the ledger of what happened.
• Sign-in sessions, as a cookie in your browser and a hashed token on our side.
• Settings for the services you connect, such as a repository name or a sender address. Secret keys stay in the server's settings, not in the database.

We use this only to run Steward for you. We don't use your studio's contents to advertise to you, and we don't sell them.

Who else handles it

• Our hosting provider stores the app and its database.
• The AI model you pick processes the work you send it, under that provider's own terms. If your agents run on your own computer through the connector, that work stays between your computer and your AI provider.
• Services you connect to a business, such as email, payments or social accounts, receive what you ask Steward to send them.
• If you turn on revenue reporting for billing, we receive one number a month: your studio's total tracked revenue. Nothing else.

Running your own studio

If you run Steward on your own server, your studio's data stays there. We don't receive a copy.

Your choices

• Download everything in your studio from Settings, as a database file or as JSON.
• Ask us to show, correct or delete what we hold about you by writing to hello@stewardstudio.io.
• Ask to be taken off the access list at any time, and we'll delete your entry.

How long we keep it

Access requests stay until you ask us to remove them or we close the list. Studio data stays while your studio is open, and is deleted after you close it, apart from backups, which roll off on their own schedule.

Children

Steward is for adults running businesses. It isn't meant for anyone under 18.

Changes

If we change this policy, we'll update this page and the date at the top. If a change matters, we'll tell people with an account by email or in the app.