Privacy policy

What we collect from account holders

• Account details: your name, email address and password. Passwords are stored only as a one-way hash. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Sign-in records: for each signed-in session, the IP address and browser description, so you and we can spot unfamiliar sign-ins.
• Your content: the screenshots, screen recordings, images, text and settings you add to walks, your brand kit, and the email addresses of people you invite to your workspace.
• Billing: if you subscribe, Stripe processes your payment. We store your Stripe customer and subscription IDs, plan, seat count and billing status. We never see or store your full card number.

The iWalk Capture extension

The extension does nothing until you start a recording. While a recording is running, in the tab where you started it, it collects:

• a screenshot of the visible page each time you click;
• where you clicked, and a short description of the element you clicked (its visible label, type and accessibility role), used to write the step’s caption;
• the page address and title, and the window size;
• if video is on, a recording of the tab, used for the short clips between steps.

It does not collect what you type. Password, payment card and one-time-code fields are covered with opaque boxes before any screenshot or video frame is taken, and you can choose to cover every form field. The extension does not read your browsing history and does not run on pages where you have not started a recording.

Captures are held in the extension’s local storage only until they are uploaded to your iWalk account, then cleared. The extension also stores its connection to your account and your capture settings in Chrome’s extension storage.

The iWalk desktop app

The desktop app records only while a recording is running, and only the screen you choose. While it runs, it collects:

• a screenshot of that screen each time you click;
• where you clicked on that screen;
• if video is on, a recording of that screen, used for the short clips between steps.

On a Mac, the app asks for Screen Recording and Accessibility permission. Accessibility lets it see mouse clicks; it does not collect what you type. Unlike the extension, the desktop app cannot recognize password or payment fields, so anything visible on the screen, including notifications, appears in screenshots and video. Close private windows before recording, and use the Studio’s blur and redaction tools before you publish.

Recordings are saved in the app’s folder on your computer until they upload, then deleted. The app stores its connection to your account encrypted with your operating system’s keychain. It checks files.iwalk.space for updates; like any download, those requests reveal your IP address, but they carry no account information.

People who view a walk

When someone views a walk you publish, we record how it was used so you can see your analytics:

• a random viewer ID stored in the viewer’s browser, so repeat visits count as one viewer;
• which steps were viewed, clicks on hotspots, whether the walk was finished, and how long it took;
• the referring website, device type (desktop, tablet or phone), and how the walk was opened (link, embed or export);
• anything the viewer types into a form shown in the walk, such as their name, email address or company.

We do not store viewers’ IP addresses in our database. For this information, the iWalk customer who published the walk decides what to collect and how to use it, and we process it on their behalf. Viewers with questions about a particular walk should contact its publisher; we will help where we can.

How we use information

• to provide iWalk: storing, processing, publishing and showing your walks;
• to show you analytics about your walks;
• to secure the service, prevent abuse, and enforce our terms;
• to manage subscriptions and billing;
• to answer support requests, and to tell you about changes to the service.

We do not sell personal information, use it for advertising, or use your content to train AI models.

AI captions

AI captions are off unless an administrator of your workspace turns them on. When you ask for captions, we send a reduced-size copy of the step’s screenshot and its existing text to Anthropic, which generates the suggested wording. Anthropic does not use this data to train its models.

Service providers

We share information only with providers that help us run iWalk:

• Vercel, which hosts the website and application and keeps short-lived request logs that include IP addresses, for security and troubleshooting;
• Neon, which hosts our database;
• Cloudflare, which provides our domain’s DNS and stores uploaded files;
• Stripe, which processes payments;
• Anthropic, for AI captions when a workspace has turned them on;
• Google, if you choose to sign in with Google.

These providers may store and process information outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also disclose information if required by law, or as part of a merger or sale of our business, in which case this policy continues to apply.

Cookies and local storage

iwalk.space uses a sign-in cookie to keep you signed in and a cookie that remembers which workspace you last used. Published walks store a random viewer ID in the browser, as described above. We do not use advertising or third-party tracking cookies.

How long we keep information

• Account information is kept while your account exists.
• When you delete a walk or a workspace, its content and stored files are removed, normally within a day. Unpublished version history is kept for 30 days.
• Analytics for a walk are kept until the walk or its workspace is deleted.
• Deleted data can remain in database backups for a short time, currently up to one day, before it is overwritten.

Your choices and rights

You can view and edit most of your information in the app, and delete walks and workspaces yourself. You can also ask us to give you a copy of your personal information, correct it, or delete your account, by emailing privacy@iwalk.space. We will respond within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Security

Information is encrypted in transit, passwords are hashed, files that are not published are available only through short-lived signed links, and access to customer data inside our team is limited to people who need it, with administrative actions logged. No system is perfectly secure; if a breach affects your personal information in a way that creates a real risk of significant harm, we will tell you and the Privacy Commissioner as the law requires.

Children

iWalk is a business tool and is not intended for anyone under 16. We do not knowingly collect information from children.

Changes to this policy

If we change this policy, we will update the effective date above. If a change is significant, we will tell account holders by email or in the app before it takes effect. See also our terms of service.

Contact

Our privacy contact handles questions and requests about this policy: privacy@iwalk.space, or by mail to OneGryd Services Limited, 4024 Waterer Street, Regina, Saskatchewan S4W 0N3, Canada.