Privacy Policy

We may collect information that you choose to provide, including:

• your email address;
• an optional phone number;
• your role or organization type;
• the subject and content of your message;
• early-access preferences or use case; and
• the time and source page associated with a submission.

Do not submit passwords, payment information, private customer records, VINs, diagnostic case data, or other sensitive information through the public early-access or contact forms.

When you use the site, we and our analytics providers may collect limited technical and usage data, such as:

• pages viewed and interactions with page sections or calls to action;
• referral source and landing page;
• approximate location derived from network information;
• browser, operating system, and device type;
• event timestamps; and
• cookie, session, or similar identifiers used for analytics.

Our hosting and web-server infrastructure may also process an IP address, requested URL, request time, user-agent information, and related request or security logs needed to deliver and protect the site.

STEP's custom GA4 events are designed not to include form contents, email addresses, phone numbers, or other direct contact information. The site may use browser session storage to remember the landing-page context for the current session.

We use information to:

• respond to early-access, contact, shop, fleet, enterprise, product-feedback, and privacy requests;
• understand which user groups and use cases are interested in STEP;
• operate, secure, troubleshoot, and improve the website;
• measure aggregate traffic, content use, and conversion paths;
• prevent abuse and maintain records of requests; and
• comply with applicable legal obligations.

We will not use an early-access request to send unrelated marketing messages unless you separately ask to receive them or otherwise consent where required.

Where the laws of the European Economic Area, United Kingdom, or another jurisdiction require a legal basis, the basis depends on the activity:

• we process early-access and contact information to respond to your request and, where applicable, to take steps at your request before entering into an agreement;
• we may rely on legitimate interests to operate, secure, troubleshoot, and improve the site, provided those interests are not overridden by your rights;
• we rely on consent for non-essential analytics where consent is required; and
• we process information when necessary to comply with a legal obligation or establish, exercise, or defend legal claims.

You may withdraw consent at any time without affecting processing that occurred before withdrawal.

We use Google Analytics 4 to understand website use and conversion paths. Google Analytics may use first-party cookies and collect device, browser, approximate-location, and on-site activity data. We do not intentionally send form contents or direct contact information to Google Analytics.

We also include Vercel Web Analytics, which is designed to provide aggregated website statistics without third-party cookies. It may process page URL, referrer, approximate location, device, browser, and event information.

We ask all visitors to choose whether to allow non-essential analytics. Google Analytics remains disabled until you accept analytics, and you can change that choice later.

We may disclose information to service providers that help us operate the site and process requests, including providers of:

• website hosting and infrastructure;
• analytics;
• form delivery, automation, and spreadsheet storage;
• security, maintenance, and technical support; and
• professional services such as legal or accounting support when needed.

The current site uses Google services for analytics and form processing or storage and includes Vercel Web Analytics. These providers process information under their own terms and privacy commitments.

We may also disclose information when required by law, to protect rights or safety, to investigate abuse, or as part of a future business reorganization or transfer, subject to applicable safeguards.

STEP Diagnostics does not sell personal information. STEP Diagnostics does not use personal information for cross-context behavioral advertising.

Early-access and contact records are kept for up to 24 months after the last meaningful interaction, unless a shorter period is appropriate or a longer period is needed for a legal, security, fraud-prevention, or dispute-resolution reason.

Analytics information is retained according to the configuration and retention periods of the applicable analytics service. Aggregated or de-identified statistics may be retained longer when they no longer identify an individual.

We delete or de-identify information when it is no longer reasonably needed for the purposes described in this policy.

STEP Diagnostics is based in the United States. Information may be processed in the United States and other countries where our service providers operate. Those countries may have different data-protection rules from your country. Where required, appropriate safeguards for international transfers will be used.

Depending on where you live, you may have rights to:

• request access to personal information about you;
• request correction or deletion;
• object to or restrict certain processing;
• request a portable copy of information you provided;
• withdraw consent where processing is based on consent; and
• complain to your local data-protection authority.

To make a request, email alex@stepdiagnostics.com. We may need to verify your identity before completing a request. Some information may be retained when permitted or required by law.

You can also control cookies through the site's consent controls and through your browser settings. Blocking analytics may affect measurement but should not prevent access to public content.

The site and product are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information, contact us so we can review and delete it where appropriate.

We use reasonable administrative and technical measures intended to protect information. No online service or transmission method can guarantee absolute security. Do not send sensitive diagnostic, customer, payment, or credential information through public forms.

We may update this Privacy Policy as the product, legal business structure, or service providers change. We will post the revised policy with an updated date and provide additional notice when required.

Privacy questions and requests: alex@stepdiagnostics.com

STEP Diagnostics
North Carolina, USA