Privacy Policy

1. Who we are

StepBob ("StepBob", "we", "us", "our") operates this website and the StepBob waitlist. For personal data covered by the EU/UK General Data Protection Regulation (GDPR), StepBob is the data controller. You can reach us at privacy@stepbob.com.

2. Information we collect

• Email address — collected when you join the waitlist. Our form is voluntary and collects only what you type in it.
• Messages you send — if you contact us (support, questions, or data requests), we keep what you write so we can reply.
• Technical data — basic log information such as IP address, browser and device type, and pages visited, collected automatically to keep the site secure and reliable.
• Cookies — strictly necessary cookies only, as described in section 6.

3. How we use your information

• Operate the waitlist and let you know when your spot is ready;
• Send waitlist and launch updates you asked for;
• Answer your requests and communicate with you;
• Protect the site against spam, fraud, abuse, and security threats;
• Understand aggregated usage so we can improve the site;
• Comply with legal obligations.

4. Legal bases for processing (GDPR)

• Consent — you opt in when you join the waitlist. You can withdraw consent at any time (see section 7).
• Legitimate interests — securing the service, preventing fraud, and improving the site, balanced against your rights and expectations.
• Legal obligation — when the law requires us to keep or disclose certain information.

5. Email communications

Waitlist sign-ups are opt-in. We use your email only to notify you about your waitlist spot and the StepBob launch, and we never send spam. Every email includes an unsubscribe link, and you can also ask us to remove you at any time by writing to privacy@stepbob.com. Withdrawing consent does not affect the lawfulness of processing that happened before.

6. Cookies and similar technologies

The site is designed to work without advertising or cross-site tracking. We may use strictly necessary cookies (for example, to remember security and preference settings). You can control or delete cookies in your browser settings; blocking essential cookies may affect how the site works.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data (right to erasure or "right to be forgotten");
• Restrict or object to certain processing;
• Receive your data in a portable, machine-readable format;
• Withdraw consent at any time;
• Opt out of any sale or sharing of your data — we do not sell or share personal information (CCPA/CPRA);
• Non-discrimination for exercising your rights (CCPA/CPRA).

Residents of the EU/EEA and the UK also have the right to lodge a complaint with their data protection supervisory authority. To exercise any right, email privacy@stepbob.com. We answer free of charge within 30 days (45 days for CCPA/CPRA requests) after verifying your identity. If we decline your request, you may appeal that decision by replying to our message, and you can always complain to your local regulator.

8. Sharing of information

• Service providers — hosting, email delivery, and analytics processors that work only on our instructions and under a data processing agreement (GDPR Article 28).
• Legal requirements — when we are required by law, court order, or to protect the rights, safety, and property of StepBob and others.
• Business transfers — if StepBob is involved in a merger, acquisition, or asset sale, subject to this policy.

We do not sell your personal information for money, and we do not allow third parties to use it for their own advertising — this would count as a "sale" or "sharing" under the California Consumer Privacy Act (CCPA/CPRA), and we do not do it.

9. Where your data is stored

Your information is stored and processed in the United States. If you live outside the US, be aware that US law may differ from the law of your country. Where the GDPR applies, transfers of your personal data to the United States are protected by appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision, and we can provide a copy of those safeguards on request.

10. Retention

• Waitlist data — kept until you unsubscribe or ask us to delete it, then removed within 30 days;
• Messages you send — kept as long as needed to resolve your request;
• Technical logs — kept for a short period (up to 12 months) for security and troubleshooting, then deleted or anonymized.

We may keep information longer where required by law; when no longer needed, it is deleted or anonymized.

11. Children

The site and the waitlist are not directed to children below the age of digital consent in their country, and never below 13. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows the latest revision, and for material changes we will announce the update on the site or by email.

13. Contact us

For questions or to exercise your rights, email privacy@stepbob.com. StepBob