Privacy policy

Last updated October 12, 2026

SOPpal turns the work you do on a computer into step-by-step guides. This policy explains what the SOPpal website (soppal.com) and the SOPpal Recorder browser extension collect, why they collect it, and the choices you have. We collect only what we need to make guides for you. We do not sell your data, show ads, or use it for anything other than running the service.

What the SOPpal Recorder extension does

• It does nothing until you press Start recording. Only while a recording is running, it watches for your mouse clicks on the pages you visit.
• For each click it takes a screenshot of the visible part of the page and reads the label and type of the element you clicked (for example a button named “Save”) and its position, so it can name the step and place a highlight.
• It never reads or stores what you type. It notes only that you typed into a field. Password fields are never described, and are always blurred in screenshots. You can also choose to blur all text fields.
• Steps stay inside your browser until you press Finish. Then they are sent over HTTPS to your own SOPpal account (or the SOPpal server address you entered), and removed from the extension. Nothing is sent anywhere else.
• The extension stores a connection code and your server address on your device so it can sign in to your account. You can disconnect at any time from the extension.
• It asks Chrome for permission to access websites only when you start your first recording, and loads its page script only while a recording is running.

Information we collect on soppal.com

• Account details: your name, email address, workspace name, and a password that we store only as a salted hash.
• Your guides: the screenshots, step titles and descriptions, highlight positions, and any logo or brand color you add. Guides are private to your workspace until you create a share link.
• Connection codes for the extension, stored only as a one-way hash.
• Basic technical data such as server logs needed to keep the service running and secure. We do not use advertising or analytics trackers.

Visits and where you came from

On our public pages (the home page, sign-up and the trade training pages) we count visits by day and page, together with the campaign tags in the link you followed (for example utm_source) when there are any. These counts are not tied to you. We also save the first campaign tags, referring site and page you saw in a small first-party cookie for 30 days. If you sign up, we store those values with your workspace so we know which ad or page brought you. We do not sell this information.

If you arrive from one of our ads on Facebook or Instagram, our public pages (home, sign-up, demo and the trade training pages) load the Meta Pixel, a script from Meta Platforms that tells Meta you visited and, after you create an account or open the sample company, that you did so. We use it only to measure and improve our ads. It does not run inside the signed-in app, and we do not send it your name, email or anything you enter in SOPpal. Meta may set its own cookies, which are covered by Meta's privacy policy. The Pixel does not load if your browser sends a Global Privacy Control or Do Not Track signal. You can also block it with your browser's tracking protection or by turning off ad personalization in your Facebook and Instagram settings.

Screenshots can contain private information

A screenshot shows whatever was on the page when you clicked. Before you record, close anything private. While recording you can blur form fields automatically, and afterwards you can blur, black out or crop any part of a screenshot. Those edits are permanently applied to the saved image. Take care before sharing a guide.

Sharing

If you create a share link, anyone who has the link can view that one guide without an account. The page asks search engines not to index it. Turning sharing off disables the link immediately.

How we use information

We use your information only to provide SOPpal: to sign you in, to store and display your guides, to generate exports (PDF, Word, PowerPoint and web page files) that you request, and to keep the service secure. We do not sell or rent your information, we do not use it for advertising, and we do not use it to train machine-learning models. We do not share it except with the hosting provider that runs our servers, or when the law requires it.

Chrome Web Store user data policy

The use of information received from Chrome APIs by the SOPpal Recorder follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used only for the single purpose of recording your clicks into a guide, is not transferred to third parties, and is not used for unrelated purposes, advertising, or creditworthiness or lending decisions. Humans do not read your screenshots unless you share them or ask us for support.

Security

All traffic uses HTTPS. Passwords and connection codes are stored only as hashes. Screenshots are stored on our servers and are accessible only to members of your workspace, or to anyone you give a share link for that guide. No system is perfectly secure, but we work to protect your data.

Keeping and deleting your data

Your guides stay in your account until you delete them. Deleting a guide permanently removes its screenshots from our servers. To close your account and remove everything associated with it, contact us at support@debriefiq.com and we will delete it.

Children

SOPpal is intended for work use and is not directed to children under 13.

Changes to this policy

If we change this policy we will update the date above, and for significant changes we will tell account holders.

Contact

Questions about privacy? Email support@debriefiq.com.