Privacy Policy
Last Updated: August 3, 2026
At StepSync, a platform owned and operated by **Signetra Systems Private Limited** ("Signetra", "we", "us", or "our"), your privacy is our primary concern. This Privacy Policy details how we collect, process, transfer, and secure your organizational information during your usage of our automated video documentation services.
1. Data Collection Disclosures
StepSync is a SaaS application built to automate screen interactions. We collect three classes of data:
- Identity Data: Corporate emails, organization titles, and registration names provided during account setup.
- Script Configuration: Custom script coordinates, navigation paths, and DOM selectors used to run automation.
- Visual Footage: Recorded frames captured inside your staging or test software setups.
2. Data Scrubbing & Processing Pipelines
We process screenshot footage inside AWS cloud environments. Ephemeral capture tasks run within dedicated AWS Fargate containers. We apply a zero-retention security layer to all temporary media:
- Stitched raw recordings are scrubbed automatically immediately following production compilation.
- Before finalizing output mp4 files, our computer vision pipeline automatically checks and redacts sensitive PII (emails, cards, credentials) from every single image frame.
- We host raw assets on encrypted Amazon S3 buckets using customer-managed KMS keys.
3. Third-Party Services
We utilize the following subprocessors to execute our core SaaS services:
- Amazon Web Services (AWS): Hosting, fargate cluster rendering, S3 buckets, AWS Bedrock AI engines, and Polly voiceovers.
- Stripe: Corporate subscription payment gateway tokenization.
4. GDPR & HIPAA Disclosures
StepSync operates as a data processor for corporate users under GDPR regulations. We offer standard Data Processing Addendums (DPA) containing standard contractual clauses (SCC). For healthcare customers, we provide customized Business Associate Agreements (BAA) to support HIPAA compliance workflows.
5. Contact & Audits
For privacy inquiries, or to trigger a complete data scrubbing request, please contact our security team directly at connect@signetrasystemslalbs.com.