Last updated: 12 May 2026.
This policy describes how Steelmoth — operated by Retasoh Pty Ltd, trading as Canary Builds — collects, uses, and protects information. We try to write it the way we'd want to read it.
What we collect
We collect only what we need to run Steelmoth and to talk to you about it. In practice, that means:
- Account information — name, work email, company, and the role you described when you requested an invite.
- Connected data — the content of the inboxes, calendars, and tools you choose to connect, used solely to do your work.
- Operational records — the audit trail of what Steelmoth did on your behalf, for your review.
- Technical telemetry — basic, anonymised diagnostics needed to keep the service running.
What we do with it
Your data is used to do your work. It is not used to train anyone's general-purpose models, and it is not pooled with other customers.
We will use your contact details to reply to you, send you onboarding information, and write to you about Steelmoth itself. We won't sell your details, and we won't hand them to third-party marketing services.
What you can do
- See, correct, and remove what Steelmoth remembers about your business.
- Revoke connected accounts at any time — Steelmoth stops immediately.
- Request a copy of your data, or its deletion, by writing to .
Where it lives
Customer data is processed in regions appropriate to the customer. Region-specific hosting details are provided in your data-processing agreement (DPA), which we'll send on request.
Security
Access to customer data is restricted to a small number of named engineers under formal access controls. We don't list security certifications we haven't actually earned — when we have them, they live on Security & trust.
Bot & abuse protection
The request-invite form is protected by Cloudflare Turnstile, which runs invisibly in your browser to confirm the submission is from a person rather than an automated script. To do this, Cloudflare may process technical signals from your browser and network — including your IP address, request headers, device characteristics, and in-page behavioural telemetry. Cloudflare's handling of this data is governed by the Cloudflare Turnstile Privacy Addendum.
Updates
When we materially change this policy, we'll notify active accounts by email and update the date above. Older versions are kept on request.
Contact
Questions, requests, or complaints: .
Postal address available on request from Canary Builds (Retasoh Pty Ltd), Australia.