Privacy Policy

showdo is run by WeMakeCode (OPC) Private Limited, Plot No 117, Saibhagwan Colony, Beeramguda, Ameenpur, Hyderabad, Telangana 502032, India (company number U62090TS2026OPC225103).

This policy explains how we handle personal information when you use the showdo website, showdo for Chrome, showdo for Mac and showdo for Android. The words "we", "us" and "showdo" mean the showdo service and WeMakeCode (OPC) Private Limited.

We have two roles, and it helps to know which one applies:

• Account information. This is your name, email address, sign-in details and how you use showdo. We decide how it is used, so we are the controller (the one responsible).
• Workspace content. This is the guides, screenshots, notes, narration text, videos and assistant chats inside a workspace. The workspace (usually your company or team) decides what goes in and who sees it. We handle it on the workspace's behalf, so we are the processor (the one who follows instructions). The Data Processing Addendum covers this role.

If you use showdo through your employer or team, ask your workspace admin first about guides and other workspace content. We will help them answer you.

How to reach us

• Privacy questions and requests: [email protected]
• Legal questions and notices: [email protected]
• Post: WeMakeCode (OPC) Private Limited, Plot No 117, Saibhagwan Colony, Beeramguda, Ameenpur, Hyderabad, Telangana 502032, India

Information you give us

• Account: your name, email address and password. Passwords are kept as a one-way scrambled value, so nobody can read them back. A profile picture if you add one.
• What you agreed to: when you make an account, we note which version of the Terms and this policy was in force, that you confirmed you are 18 or older, and whether you signed up with email, Google or GitHub. It is removed when your account is deleted.
• Sign-in with Google or GitHub: if you choose this, Google or GitHub tells us your name, email address, profile picture and your id with them. They also send back access codes. We do not store those. We use Google or GitHub only to check who you are when you sign in.
• Workspace: the workspace name, web address, logo, brand colour, and what you tell us about your team size and use.
• Invitations: the email address of anyone you invite, and the role you give them.
• Messages to us: privacy requests, support emails and security reports, and our replies.

Information created when you use showdo

• Guides. When you record a task, each step can hold the text and the address of the page, the page title, the window or app name, the label of what you clicked, a click position, the time, and a screenshot. In showdo for Chrome and showdo for Mac, what you typed is included only if you turn on typed text, and then after personal details are removed. In showdo for Android, what you type in fields is included in the step, after personal details are removed. A workspace admin can turn this off with "Allow typed text capture", and then typed values are dropped. Passwords are never read. In showdo for Android, password fields, phone-number fields and one-time-code fields are never captured as typed text, and are always blurred in the screenshot.
• Screenshots. showdo finds personal details on the screen (such as emails, phone numbers, card numbers, ID numbers, bank numbers, access keys, IP addresses and street addresses) and blurs them in the image on your device. Only the blurred picture is uploaded. People who can edit guides can add more blur later. Nobody can take blur off.
• Screenshots in showdo for Android. On your phone, showdo for Android reads the text that apps show on screen to find personal details and blurs them in the screenshot, and replaces them in the step text. The text it reads for this stays on the phone and is not uploaded. If blurring fails, the screenshot is not uploaded. showdo for Android cannot read text that is drawn inside a picture, so after a screenshot is uploaded, showdo's privacy check reads it again on our servers (see "AI and your information"). It does not detect names, and some apps do not allow screenshots, so a step from such an app has no picture. Please look over a guide before you share it.
• Permissions on your device. showdo for Chrome asks for permission to read and change data on all websites, because it has to work on whichever site you choose to record. It looks at a page only while you record, repeat a task or follow a guide. showdo for Mac asks for permission to see clicks, take screenshots, and use the microphone for narration. showdo for Android uses Android's Accessibility service. You switch it on yourself in Settings, after the app has explained it and you have agreed. While you are recording, the service lets showdo see what you tap, the text you type and what is on screen, and take a screenshot of each step. When you are not recording, showdo collects nothing. showdo does not use the service to tap, swipe, type or change anything on your phone, and does not use what it sees for anything except making your guide. It is not an accessibility tool for people with disabilities. You can switch it off at any time in Android Settings, under Accessibility.
• Notifications on your phone. showdo for Android shows notifications to let you pause and stop a recording and to tell you a guide is ready. These are made on the phone. They do not use a push service and nothing about them is sent to us.
• Saved chats in showdo for Chrome. Ask showdo keeps the words of your recent chats (up to 50) in Chrome on your computer so you can read them again. They are not sent to us, and you can delete one chat or all of them at any time.
• Narration. On a Mac you can speak while you record. The words are turned into text on your Mac and only the text is uploaded. The audio recording is not uploaded.
• Library in showdo for Android. The app shows the guides in your workspace. It fetches them and their screenshots over HTTPS, and sends the words you type into its search to find guides.
• Videos. If you make a video from a guide, we store the video project, the voiceover audio that a speech service makes from the narration text, and the exported file.
• Assistant chats. Your questions and the answers, with the guides used, and thumbs up or down if you give them.
• Activity. A workspace activity log records who did what and when: guides created, edited, shared or deleted, members and roles, invitations, rules, and access keys. It does not store IP addresses.
• Views. Which signed-in person opened a guide and when. People who are not signed in are counted without any identity.
• Guides shown on other websites. A company can show one of its guides inside its own web page. showdo's servers receive the visitor's internet address (IP address) and browser details, as they do for any shared link, and the view is counted without any identity. The guide sets no cookies and saves nothing on the visitor's device. The website around it may do both, under its own rules.
• Devices. When you connect showdo for Mac, showdo for Chrome, showdo for Android or another tool, we create an access key. We keep a scrambled copy of the key, its name and when it was last used. A key stops working if it is not used for 180 days, and each use starts the 180 days again. Someone can also turn it off at any time. showdo for Android connects with a short code that the app shows and that you approve on showdo.app, where you are already signed in. The phone sends its name, "showdo for Android", and the app version, and keeps its access key in the app's private storage until you sign out, which also switches the key off on our servers.
• Sign-in records. For each device you are signed in on we keep the time, your IP address and a description of your browser and device. You can see this list under Account.
• Safety limits. To slow down guessing and abuse we count requests by IP address.
• Cookies and saved settings. See the Cookie Policy.
• Usage statistics, only if you allow them. If you turn on "Usage statistics" in the cookie choices, the website sends PostHog which pages are opened (as the kind of page, without workspace names or guide ids in the address), which buttons and links are pressed (their label), and what was done, such as "guide published" or "video exported", with ids, counts and choices. It never receives the words, pictures or titles in your guides, what you type, or your chats. If you are signed in it also receives your account id, name and email address, and your workspace's id, name and your role, so the counts can be tied to accounts and teams. PostHog keeps a random number in your browser to count visits. Nothing is sent or saved until you turn it on, and turning it off stops it at once and removes what it saved in your browser. showdo for Chrome, showdo for Mac and showdo for Android do not send usage statistics. showdo for Android has no ads, no advertising ID and no analytics.

Information from other people

Workspace admins and members can add information about you. For example, someone can invite you by email or write your name in a guide.

What we do not collect

• The unblurred screenshots from your device.
• Audio recordings of you. showdo for Mac does speech to text on your Mac and sends only the words. Your Mac may ask Apple's speech service to help if it cannot do this on the device. That is between you and Apple.
• Passwords, card numbers or one-time codes typed into other websites or apps while you record. In showdo for Android, password fields, phone-number fields and one-time-code fields are never captured as typed text and are always blurred, and card numbers are found and blurred. If an app shows a one-time code in some other way, such as in plain text on screen, it is not always found, so do not record while you enter one.
• Advertising tracking. showdo does not load it.
• Usage statistics from anyone who has not turned them on.

We only use personal information for the reasons below. Where the law asks for a "legal basis" (a lawful reason), it is shown in brackets.

• To run showdo for you: create your account, let you sign in, store and show your guides, let your team share them, make exports and videos, and answer assistant questions. (Contract with you, or with your workspace.)
• To send service emails: a welcome message, password resets, email checks, invitations and notices about your account or workspace. We do not send marketing emails. (Contract, and our interest in keeping accounts safe.)
• To keep showdo safe: spot and stop abuse, limit sign-in guessing, investigate problems and fix bugs. (Our legitimate interest in a secure service.)
• To use AI features you ask for: write guide text, check for personal details, translate, make narration and answer questions. (Contract. A workspace admin can turn all AI features off.)
• To follow the law: keep records we must keep and answer lawful requests. (Legal obligation.)
• To remember your choices on this site: optional cookies and saved settings only with your consent where the law asks for it. (Consent.)
• To see which parts of showdo get used and improve them: usage statistics, only after you turn on "Usage statistics". (Consent. You can take it back at any time in the cookie choices.)
• To handle your requests: answer privacy and support messages. (Legal obligation and contract.)

We do not make decisions about people that have legal or similarly big effects using automated means. AI writes text. People decide what to publish.

showdo uses AI companies to write guide text, check screenshots for personal details that were missed, translate guides, write what videos say, make voiceovers, power the search behind the assistant and answer assistant questions. In Chrome, Ask showdo also sends page details so the AI can choose the next action.

Blurred screenshots are sent to an AI company. Unblurred screenshots are never uploaded, so they can never be sent.

The page How showdo uses AI lists every feature, exactly what is sent, who receives it and how to turn features off. One workspace switch, "Allow AI features", stops all of them: with it off, no guide text from that workspace is sent to an AI company. The AI companies are named on the sub-processors page.

We do not use your content to train AI models. What the AI companies themselves do with requests is set by their terms and by the settings on showdo's accounts with them. We tell you more on the AI page, and we do not promise anything on their behalf.

Connecting an AI assistant

A member of a workspace can connect an AI assistant, such as an AI chat app that supports MCP, to showdo. The connection is read-only. The assistant can search the guides that member can already see and read their steps and screenshots. It cannot create, change or delete anything.

When the member uses it, the search results, step text and blurred screenshots they ask for are sent to the company behind that app. The member chose to connect it, so that company is not a sub-processor of ours. It handles what it receives under its own terms and privacy policy. We do not receive the member's conversation with the assistant. We receive only what the assistant asks for, such as the search words, a guide and a step number.

A connection is for one workspace and lasts until it is revoked. The member who made it, and workspace admins, can revoke it under Connected apps in the workspace settings, and the assistant is refused from then on. An admin can also stop members connecting AI assistants with the "AI connectors" policy. Turning off "Allow AI features" blocks them too.

• People in your workspace. Members see what their role allows. Admins and owners also see the member list, the activity log and workspace rules.
• People you share with. A guide set to "Anyone with the link" can be opened by anyone who has the link. A guide set to "Public" can be opened by anyone and search engines may list it. Your workspace admin can switch these options off.
• Companies that help us run showdo (our "sub-processors"). They host the database and files, send email, let you sign in with Google or GitHub, provide AI, and (only if you allow it) count usage statistics. They may only use information to provide their service to us. The full list, with what each one receives, is on the sub-processors page.
• Authorities and advisers, when the law requires it, to protect people's safety, or to get legal advice. We tell you first when the law allows.
• A new owner, if showdo is sold or merged. We would tell you and the promises in this policy would continue to apply.

We do not sell personal information. We do not share it for advertising across other companies' sites, so we have nothing to opt you out of. showdo has no advertising trackers. PostHog counts usage statistics for us only, and only for people who turn them on.

showdo stores its data in the United States.

The companies we use, and the AI companies in particular, may handle information in other countries, including the United States. When personal information leaves the European Economic Area, the United Kingdom or Switzerland, we rely on the legal tools those places allow, such as the European Commission's Standard Contractual Clauses (with the UK addendum where needed) or an adequacy decision. You can ask us for a copy of the clauses we use at [email protected].

Personal information of people in India may be handled outside India, for example in the United States, as the Digital Personal Data Protection Act, 2023 allows. We will not send it to any country the Government of India restricts.

• Your account: until you delete it.
• Sign-in records: a session lasts 30 days and is renewed when you use showdo. Password reset links last 1 hour. Email check links last 24 hours. Invitations last 7 days. Access keys for devices stop working after 180 days without use. Links to pictures and videos last about an hour.
• Guides, screenshots, videos and assistant data: until you or a workspace admin deletes them. A workspace admin can also choose how long to keep guides (the "Keep guides for" setting). showdo checks once a day and deletes guides that have not been edited for longer than that, with their stored files. This deletes for good and does not use the Trash. Guides still being recorded are skipped, and the activity log records how many were deleted. A guide you delete yourself stays in the Trash for 45 days, and is then removed with its steps, its search entries and its stored files.
• Assistant chats: until you delete the chat, your account or the workspace.
• Activity log: for as long as the workspace exists.
• Usage statistics: PostHog keeps them for as long as showdo's PostHog project keeps events, and we delete a person's statistics when they ask us to delete their information. In your browser, they stay until you turn "Usage statistics" off or clear your browser.
• Backups: kept for 30 days.

When you delete things

• Deleting a guide moves it to the Trash. It disappears from the library, search, share links and assistant answers, but it can be restored for 45 days. After that showdo removes its records and all of its stored files (pictures, covers, videos, voiceover and uploads) shortly after. A file that another guide's video still uses is kept until that guide goes too.
• Delete forever removes a guide from the Trash at once, with its stored files. A privacy request to delete a guide is carried out the same way, without the wait.
• Deleting your account removes your profile, sign-in methods, device keys and assistant chats. showdo keeps no files of its own that belong only to you. Guides you wrote stay in your workspace and no longer show your name. A workspace where you are the only member is deleted too, with its stored files.
• In showdo for Android, "Discard" deletes a recording you are making, from the phone and from your workspace. "Sign out" forgets and switches off the phone's access key. To delete your account or your guides, use Account and the guide Trash on showdo.app, or send a privacy request.
• Deleting a workspace removes its records (guides, members, activity and assistant data) and everything stored for it: pictures, videos, voiceover, exports and the logo.

Records are deleted first. Stored files are deleted straight afterwards, and showdo tries again a few times if the file store is busy. If the file store stays unreachable for longer, a file can be left behind for a while. If you think that has happened, email [email protected] and we will remove it and tell you when it is done.

Information may also remain in copies you exported or shared, and in systems of the companies listed on the sub-processors page until they delete it under their own rules.

Depending on where you live, you may have the right to:

• Know what we hold about you and get a copy.
• Correct information that is wrong.
• Delete your information.
• Export your information in a usable form.
• Limit or object to some uses.
• Take back consent you gave, at any time.
• Complain to a data protection authority. In the European Union that is the authority in your country. In the United Kingdom it is the Information Commissioner's Office. In India it is the Data Protection Board of India, after you have first raised it with us (see "If you are in India").

If you are in California or another US state with a privacy law, you also have the right to know what we collect, to ask us to delete or correct it, and to not be treated worse for using these rights. We do not sell or share your information, so there is nothing to opt out of.

How to ask

Use the privacy request form or email [email protected]. We may ask you to confirm who you are, usually by writing to the email address on your account. You can also have someone ask for you. We will need proof that they may.

We answer within one month (45 days in some US states). If a request is complicated we may take longer and we will tell you why. It is free unless it is clearly unfounded or repeated.

Things you can do yourself

• Change your name, email, password and picture under Account.
• See and sign out your devices under Account.
• Delete your account under Account.
• Delete guides, or export them (Markdown, web page, PDF, video).
• Delete an assistant chat.

If we say no or you disagree

We will explain our reasons. You can ask us to look again by replying to our message or writing to [email protected]. You can always complain to your data protection authority or, in some US states, your state attorney general.

Workspace content

For guides and other workspace content we act for the workspace. If you ask us for something about that content, we will usually pass your request to the workspace admin, and we will tell you when we do.

This section is for people in India. It follows the Digital Personal Data Protection Act, 2023 (the "Act") and the Digital Personal Data Protection Rules, 2025, and, while they still apply, the Information Technology Act, 2000 and its rules on sensitive personal data. The rest of this policy also applies.

Our role

For your account information we are the Data Fiduciary (the one who decides why and how it is used). For workspace content, the workspace is the Data Fiduciary and we are its Data Processor, so ask your workspace admin first. We will help them.

What we collect and why

The list of what we collect is under "What we collect", and each purpose is under "Why we use it and our legal reasons". We use your information only for those purposes and keep only what they need.

Consent and how to take it back

• When we ask. Optional cookies, saved settings and usage statistics need your consent. We ask with a clear choice, nothing is switched on for you in advance, and saying no does not stop you using showdo.
• The rest. For everything else in this policy we rely on the information you give us to use showdo for the purposes listed, or on another legitimate use the Act allows, such as following the law.
• Taking it back is as easy as giving it. Use "Cookie settings" at the bottom of any page, delete your account under Account, or write to [email protected]. What we did before you took it back stays lawful. We then stop, and delete what we no longer need, unless a law says we must keep it.
• Consent Managers. You can also give, review and take back consent through a Consent Manager registered with the Data Protection Board of India, once such services are available.

Your rights

• Get a summary of the personal information we hold about you and what we do with it, and the names of the other Data Fiduciaries and Data Processors we have shared it with, with what we shared.
• Correct, complete or update information that is wrong or incomplete.
• Erase information we no longer need, or after you take back your consent, unless a law says we must keep it.
• Raise a grievance with us and get an answer.
• Name someone (a nominee) to use these rights for you if you die or cannot use them yourself because of illness or disability.

Use the privacy request form and choose what you want to do, or write to [email protected]. We may ask you to confirm who you are. It is free.

Grievance Officer

If you have a concern about how we handle your information, write to our Grievance Officer, Pavan Kotapally, Plot No 117, Saibhagwan Colony, Beeramguda, Ameenpur, Hyderabad, Telangana 502032, India, at [email protected]. We answer within one month.

Complaints to the Data Protection Board of India

If you are not happy with our answer, or we do not answer in time, you can complain to the Data Protection Board of India. The Act asks you to raise it with us first.

Children and people who need help to decide

Under the Act a child is anyone under 18. showdo is for people aged 18 or over, and we do not knowingly handle children's information. We do not track or watch the behaviour of children, and we do not show them advertising. If a lawful guardian acts for a person with a disability, we will ask for proof that they may.

Passwords and other sensitive information

Your password is sensitive personal information under Indian law. We keep it only as a one-way scrambled value that nobody can read back, and we never share it.

If something goes wrong

If a breach affects your information, we will tell you without delay what happened, what it may mean for you, what we are doing about it, what you can do, and who to contact. We will also tell the Data Protection Board of India as the Rules require, and report serious cyber security incidents to CERT-In (the Indian Computer Emergency Response Team) within 6 hours of noticing them, as its directions require.

This policy in your language

You can ask for this policy in English or in any language in the Eighth Schedule to the Constitution of India. Write to [email protected] and we will send it.

showdo is not for anyone under 18. We do not knowingly collect information from them. If you think a child has given us information, write to [email protected] and we will delete it.

We protect information with the measures listed on the Security page. No service is perfectly secure. If we learn of a personal data breach that affects you, we will tell you without undue delay, as the law requires.

showdo uses a small number of cookies and saved browser settings. The Cookie Policy lists each one and lets you change your choices.

We will update this page when our practices change and change the dates and the version history at the bottom. If a change matters to you, such as a new use of your information, we will tell you in showdo or by email before it starts.