COMBINED LEGAL
Privacy Policy
A clear explanation of the information we handle, why we handle it, and the choices available to you.
Steelworks Software LLC (“Combined,” “we,” “us,” or “our”) respects your privacy. This policy explains how we handle information when you visit trycombined.com, use the Combined platform, contact us, or interact with our events and communications (together, the “Services”).
1. Who we are and our role
Steelworks Software LLC is a Delaware limited liability company. Questions or requests about this policy can be sent to team@combined.sh.
For information we collect directly through the Services—such as website activity, account administration, billing, support, and marketing—Combined generally acts as the controller or business. When a customer uses Combined to connect a data source or provide data to the platform, that customer generally controls the Customer Data and Combined processes it on the customer’s documented instructions. If you need to exercise a privacy right about Customer Data, please contact the relevant customer first.
2. Information we handle
| Category | Examples | How we receive it |
|---|---|---|
| Account and contact information | Name, work email, company, role, authentication and account settings | You, your organization, or an identity provider |
| Commercial information | Plan, usage, invoices, payment status, and billing contact details | You, your organization, and payment providers |
| Communications and event information | Messages, support requests, meeting or booking details, and survey responses | You and scheduling or communications providers |
| Website and device information | IP address, browser, device type, pages viewed, referral source, approximate region, and cookie choices | Your browser and our analytics or hosting providers |
| Service, security, and audit information | Authentication events, configuration, logs, error reports, and activity needed to protect and operate the Services | Your use of the Services and our systems |
| Customer Data | Data a customer elects to connect, ingest, query, or make available through Combined | The customer, its authorized users, sources, and agents |
Please do not submit highly sensitive information through a website contact form. Do not use the Services for regulated health, payment-card, biometric, government-ID, authentication-secret, or similarly sensitive data unless we have expressly agreed to support that use in writing.
3. How we use information
We use information to:
- provide, secure, support, maintain, and improve the Services;
- create and administer accounts, process payments, and communicate about service or support;
- respond to a request, schedule a meeting, or send communications you have requested or permitted;
- measure and improve website performance and, where you opt in, understand marketing effectiveness;
- prevent fraud, abuse, unauthorized access, and other harmful activity; and
- comply with law, enforce our agreements, and protect our rights, users, and the public.
Where applicable law requires a legal basis, we process personal information to perform a contract or take requested pre-contract steps; with your consent; for our legitimate interests in operating, securing, and improving the Services; and to meet legal obligations. You may withdraw consent at any time, although this will not affect processing already carried out.
4. Customer Data and connected sources
Customer Data belongs to the customer or its licensors. The customer decides which sources, datasets, fields, users, and agents it authorizes. We process Customer Data only to provide, secure, and support the Services; comply with law; and as otherwise documented in a written agreement with the customer. We do not sell Customer Data or use it to train general-purpose AI models.
Combined is designed to apply permissions and governance at the account level. Customers are responsible for ensuring they have the rights and notices needed to connect a source, share Customer Data, and authorize an agent. For the desktop-capture functionality described in our current product documentation, raw desktop video, screenshots, and audio remain on the endpoint rather than being uploaded in normal operation; approved structured events may be processed to deliver the service.
7. Retention and security
We keep information only for as long as reasonably necessary for the purposes in this policy, including to provide the Services, meet legal and accounting obligations, resolve disputes, and maintain security. Customer Data retention and deletion depend on the applicable service configuration and customer agreement. After a source or account is deleted, we revoke access and schedule the associated Customer Data for deletion under our applicable retention process; limited content-free records or backups may remain for a limited time for security, legal, and operational reasons.
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your choices and privacy rights
Depending on where you live and the information involved, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information; withdraw consent; or appeal a decision about a request. To make a request, email team@combined.sh from the address associated with the information and tell us what you need. We may verify your identity and, where lawful, ask for more information before acting.
Residents of California and other U.S. states may have additional rights under applicable privacy laws. We will honor applicable requests without unlawful discrimination. Authorized agents may make requests where permitted by law, subject to verification of authority. If we deny a request, you may ask us to reconsider by replying to our decision.
For Customer Data, we will assist the customer in responding as required by our agreement and applicable law. We generally cannot respond directly to a request about Customer Data without the customer’s direction.
9. Children
The Services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can address it.
10. Changes to this policy
We may update this policy as the Services or law changes. For a material change, we will provide reasonable advance notice—normally at least 30 days—by posting the updated policy, email, or another appropriate method, unless a shorter period is needed for legal, security, or operational reasons. The effective date above shows when this version began to apply.
11. Contact us
For privacy questions or requests, contact Steelworks Software LLC at team@combined.sh.