Privacy Policy

SOPStream (“we”, “us”) is training software for small businesses. This policy explains what information we collect, how we use it, and the choices you have. We wrote it in plain language on purpose.

What we collect

• Account details: your name, email address, company name, and password (stored hashed - we never see it).
• Content you add: videos, photos, written steps, transcripts, quiz answers, sign-offs, forms, documents, and messages you send to the built-in assistant.
• Usage records: who watched, completed, or signed which procedure and when. This is the training record your company relies on.
• Payment details: handled entirely by Stripe. We never store card numbers; we keep only Stripe’s customer and subscription identifiers.
• Technical basics: a login cookie so you stay signed in, and standard server logs (IP address, browser type, time of request).

How we use it

• To run the service: store your procedures, play videos, grade quizzes, keep records, and bill your subscription.
• To generate transcripts, draft steps, quizzes, translations, and answers to questions. Your content is sent to our AI provider (Anthropic) only for that purpose and is not used to train their models.
• To send service emails - password resets, credit requests, expiring-document notices, and billing notices. We do not send marketing email to your team members.
• To support you when your admin explicitly opens a support-access window from Settings. Outside that window, SOPStream staff cannot browse your workspace.

Who can see your data

Your workspace is private to your company. Other companies using SOPStream cannot see it. We use a small number of service providers to operate: Railway (hosting), Stripe (payments), Resend (email delivery), Anthropic (AI features), and Google (optional sign-in). Each receives only what it needs to do its job. We do not sell your data. The only thing we show publicly is your company’s name and logo as a SOPStream customer, as described in the Terms; never your content.

Keeping and deleting data

We keep your data while your account is active. Nightly backups are kept for 14 days. To delete your company’s workspace and everything in it, email support@sopstream.ai from an admin address and we will remove it within 30 days. Individual team members can ask their admin to remove their account at any time.

Security

Connections are encrypted (HTTPS). Passwords are hashed. Sessions expire. Repeated failed logins are locked out. No system is perfect; if we learn of a breach affecting your data we will notify your admin without undue delay.

Cookies

We use one cookie to keep you signed in and, during a support session, one to let the support view exit cleanly. No advertising or tracking cookies are set by the app itself.

Children

SOPStream is for businesses and is not directed at children under 16.

Changes and contact

If this policy changes materially we will note the date above and tell admins by email. Questions: support@sopstream.ai.