DemiGuide Privacy Policy
Effective and last updated: November 2026
DemiGuide ("we", "us") is a product of My Record Locker, sold as "DemiGuide by My Record Locker" at demiguide.com. This policy explains what personal data we handle when you use DemiGuide, and why. Questions: hello@demiguide.com.
1. The short version
- We record your web app with a test account and invented data, not with real people's data.
- We mask email addresses, phone numbers, codes and tokens before anything is saved for you.
- We never ask for, read or store your password.
- Your recordings are never used to train AI models.
- We use a few providers (Stripe, Render, Anthropic, our email provider) and no advertising or analytics trackers.
- We do not sell personal data.
2. What we collect
When you order
- Your app's website address and the benefits you pick.
- Your work email, which we use to confirm you work at the app's company, to send your links and to sign you in.
- Payment: handled by Stripe. We receive the payment status and the details Stripe shares with sellers (for example name, billing country, card brand and last four digits). Card numbers never reach us.
- A signed cookie that ties your order to your browser (up to 30 days), and a second one for the sign-in handover page. These are needed for the service to work; we set no advertising or analytics cookies, and our pages load no third-party scripts.
- Technical data: your IP address, used to limit request rates and protect the service, and short server logs. Our logs keep only the start of an order id, masked email addresses and outcomes, never sign-in links, share ids or card data.
When we record your app
- Copies of the screens our test account sees: pictures, captions, the steps taken, and short animated loops. Before saving, we mask email addresses, phone numbers, long numeric codes, keys and tokens, and we drop scripts, hidden fields and password values. What we publish is flat pictures, never live code from your app.
- The text of your public pages (to suggest what to show) and of the screens walked (to draft and repair the demo), which is sent to our AI provider (section 4).
- Emails your app sends to our test account's address at
inbox.demiguide.com(sign-up codes and links). We keep them in memory for up to 30 minutes; only the recipient and subject, masked, reach the recording. - Masking catches patterns. It cannot reliably recognise a person's name or street address, or text inside an image. Please make sure the app we record shows only test or invented data (Terms, section 8).
If your sign-in stops our test account (the sign-in handover)
- We email your confirmed work email a link, valid for 10 minutes, to a browser we host. Nothing is shown or accepted until you consent.
- We keep only the signed-in session for your app's own site (not your identity provider's, such as Google or Okta), in memory, for that one recording run. It is never written to disk or logs.
- Your keystrokes go straight to the browser and are not stored; we never read what you type into fields and never store your password.
- We keep an audit line with no values: the app, the reason, times, consent, outcome, the number of inputs and cookies and the sites they belong to.
Features coming with paid plans
Teammate invitations, connecting GitHub, and embedding demos on your own site are not available yet. We will update this policy, describing what each collects, before it launches.
3. Why we use it
| Use | Basis |
|---|---|
| Take your order, confirm your work email, record and deliver your demos | Performing our contract with you |
| Take payment, keep invoices and tax records | Contract; legal obligation |
| Send service emails (confirmation, ready, held order, handover link, renewal reminders) | Contract |
| Prevent abuse, limit request rates, keep the service secure | Legitimate interest |
| Improve how DemiGuide walks apps in general | Legitimate interest |
We send no marketing emails.
No training on your recordings. We do not use your recordings, demos or app content to train any AI model, ours or anyone else's. We use Anthropic's API under its commercial terms, under which API inputs and outputs are not used to train its models, and we will keep it that way: if a provider's terms change, we change provider or settings rather than let your recordings be used for training.
4. Who helps us (subprocessors)
| Provider | What for | Where |
|---|---|---|
| Stripe | Payments, subscriptions, invoices, the customer billing page | United States |
| Render | Hosting the website, the recording service and stored demos | United States |
| Anthropic (Claude API) | Reading page text and screens to draft and repair demo steps and captions | United States |
| Our email provider | Sending our emails, and receiving mail at inbox.demiguide.com for our test accounts | United States |
We update this list before adding a provider that handles personal data, and email paid customers at least 30 days before.
5. Who can see your demos
- Your wiki demo page has an unlisted share link. Anyone who has the link can open it, and it is meant to be forwarded. It is kept out of search engines. You can replace the link or turn it off at any time; the old link and its demo files then stop working.
- Confirmed findings about your app appear on that page with the screen as evidence.
- Demos you embed on your own site are visible to your site's visitors.
- Our team: only the people who need to, to finish held orders and fix problems.
6. How long we keep it
- Recordings and demos: kept while your plan is active and for 12 months after your last order or the end of your plan, whichever is later, then deleted. This includes paused demos after a plan ends and the internal working files of each recording.
- Order records and invoices: kept as long as tax and accounting law requires.
- Server logs: 30 days.
- Backups: expire within 30 days, so deleted data leaves backups within 30 days.
- Test-account email: 30 minutes, in memory.
- Sign-in handover sessions: the length of one recording run, in memory only.
7. Your choices and rights
- Turn a share link off or replace it at any time.
- Delete: write to hello@demiguide.com from your confirmed work email and we delete your recordings, demos and account within 30 days, keeping only the order records the law requires.
- Ask for a copy of your personal data, or to correct it, at hello@demiguide.com.
- Wherever you live, you can make these requests, and we will not treat you differently for making them. If a law where you live gives you further rights, write to us and we honour them.
8. Security
- Every page uses a strict Content-Security-Policy, HTTPS with HSTS, and no third-party scripts.
- Confirmation and handover links are signed and expire (24 hours and 10 minutes).
- Before anything is published, a leak check scans it for addresses, keys and tokens; if it finds one, nothing is published.
- Published demos are flat pictures, so nothing saved from your app runs in a visitor's browser.
- Payment webhooks are verified before an order is marked paid.
No system is perfectly secure. If a breach affects your data, we tell you by email without undue delay, and as the law requires.
9. People whose data may appear in a recording
DemiGuide is meant to record test accounts and invented data. If your personal data appears in a customer's recording, write to hello@demiguide.com and we will work with that customer to remove it. For recorded app content we act on our customer's behalf (as their processor or service provider); for our own customer account and billing data we are responsible ourselves.
10. Children
DemiGuide is a business service and is not for anyone under 16. We do not knowingly collect children's data.
11. Changes
We post changes here with a new date, and email paid customers about material changes at least 30 days before they apply.
12. Contact
My Record Locker, for DemiGuide: hello@demiguide.com.