Last updated: June 6, 2026
This Privacy Policy explains how FullStep ("FullStep," "we," "us," or "our") collects, uses, and protects information about you when you use fullstep.ai and fullstep.polsia.app. We take your privacy seriously and keep data collection to what's actually necessary to run the service.
Account information. When you sign up or log in, we collect your email address. We use it to send magic-link login emails and service communications.
Video URLs you submit. When you paste a video link to generate a guide, we store that URL and the guide we generate from it. This is core to the service — saved guides require storing the source URL.
Generated guides. The full content of each guide you generate is stored and associated with your account.
Stripe customer ID. If you purchase a plan, Stripe provides us with a customer ID we store to manage your subscription status. We do not store your payment card number, CVV, or full card details — Stripe handles all payment processing.
IP address and user agent. Logged for security purposes (fraud prevention, abuse detection). Not used for advertising or sold to third parties.
We do not sell your personal data. We do not use your data to train AI models without your explicit consent.
We share limited data with trusted service providers who help us operate FullStep:
Each processor is contractually bound to use your data only to provide services to us and not for their own marketing.
We keep your guides and account data for as long as your account is active. If you delete your account, we delete your personal data and saved guides within 30 days, except where retention is required by law (e.g., billing records).
Log data (IP, UA) is retained for up to 90 days for security purposes, then deleted.
You have the right to:
To exercise any of these rights, email privacy@fullstep.ai. We'll respond within 30 days.
Session cookies. We use a single session cookie to keep you logged in. It expires after 7 days of inactivity.
Analytics. We use a lightweight first-party analytics beacon (Polsia Analytics) to count page visits. No third-party tracking pixels or behavioral ad networks are used, except where you explicitly consent (e.g., the Meta Pixel on the public landing page, used only for measuring the effectiveness of our own ads).
No persistent tracking cookies are set inside the /app authenticated area.
FullStep is not directed to children under 13. We do not knowingly collect data from anyone under 13. If you believe we have inadvertently collected a child's data, contact us at privacy@fullstep.ai.
We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, single-use login tokens, and server-side session management. No system is 100% secure. If you discover a security vulnerability, please report it to security@fullstep.ai.
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top. Material changes will also be communicated by email to active users.
Privacy questions or requests? Email privacy@fullstep.ai.
← Back to FullStep