Policies

Who we are

Grief advocacy, inc. is the controller of account and service administration data. Your employer determines the purposes of employee workplace records; we process those records to provide Steady on its behalf. Contact Sarah@griefadvocacy.com for privacy requests.

Information entered in Steady

Steady uses account information, including email and sign-in identifiers. Leaves may contain employee names, relationship to the person who died, loss and leave dates, leave duration, return dates, status and notes. It also stores completed guidance steps, check-ins and Steady Plan answers.

Company policy uploads include original documents, file names, uploader identifiers, upload dates and AI-generated summaries. Provide only information necessary for workplace support; avoid unnecessary sensitive details.

How information is used

Information is used to provide account access, coordinate leave and return-to-work support, save plans and check-ins, store company policies and prepare message drafts. We process this information to perform our contract with your organization, for our legitimate interests in securing and supporting the service, and where required by law.

Who can access information

Signed-in members of your company can access its leaves, notes, check-ins and Steady Plan answers, and read its company policy summaries. Company HR admins can upload, process and remove original documents. Other companies cannot access your workspace.

Paddle processes purchases, subscription billing, taxes and invoices as our online reseller and Merchant of Record. Payment information is handled through Paddle checkout, not entered into Steady’s leaves.

We may also share information with professional advisers, such as legal and accounting advisers, and with authorities where required by law.

AI processing and service providers

When an HR admin requests a policy summary, document content is sent for AI processing. When a user requests a message written with company policy, employee name, relationship, leave dates and duration, the starting message and available policy summaries are sent for AI processing.

Lovable Cloud provides app authentication and storage; Lovable’s AI service is used for summaries and message drafting. These providers process information only to deliver the service.

Storage and security

Original company documents are stored in private app storage with HR-admin access controls. Leave information and summaries are protected by sign-in requirements, but shared with signed-in workspace members as described above.

Access controls do not guarantee absolute security. Your organization should protect accounts and avoid entering information that is not appropriate for the shared workspace.

Retention and deletion

The app stores leaves, plans, check-ins and company documents until they are removed through available controls or an agreed administrative process. Company records are retained for 90 days after paid access ends, then removed from active app storage. HR can export records during this period. Backup copies are removed on the providers’ standard schedules.

Removing a company document removes its stored file and summary through the app’s removal process.

Your choices and privacy requests

Ask your organization’s HR contact about information recorded about you and what may be shared with the team. Contact Sarah@griefadvocacy.com to request access, correction, export, deletion or to raise a privacy complaint. We respond as required by applicable law.

Sign-in storage and policy updates

Steady uses browser storage to maintain sign-in sessions. These are essential to sign-in; Steady does not use advertising cookies.

We will post any changes to this notice on this page.