At Sidekick Labs, LLC ("Sidekick," "we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered business coaching platform (the "Service").
1. Information We Collect
1.1 Information You Provide
- Account Information: Email address, name, and password when you create an account
- Business Information: Business name, type, goals, challenges, revenue, customer counts, and other details you share during onboarding and usage
- Conversations: Messages and content you share in AI coaching sessions
- Check-in Data: Weekly metrics, wins, struggles, and reflections you submit
- Payment Information: Billing details processed securely through Stripe (we do not store full card numbers)
1.2 Information Collected Automatically
- Usage Data: Features used, pages visited, and interactions with the Service
- Device Information: Browser type, operating system, and device identifiers
- Log Data: IP addresses, access times, and referring URLs
- Cookies: Session cookies for authentication and preferences
2. How We Use Your Information
We use your information to:
- Provide the Service: Deliver AI-powered coaching, generate insights, and track your progress
- Personalize Experience: Tailor recommendations based on your business context and history
- Improve the Service: Analyze usage patterns to enhance features and user experience
- Communicate: Send service updates, weekly digests, and respond to inquiries
- Process Payments: Handle subscription billing and invoicing
- Ensure Security: Detect and prevent fraud, abuse, and security incidents
- Comply with Law: Meet legal obligations and respond to lawful requests
3. AI Processing
Our Service uses artificial intelligence provided by Anthropic (Claude) to deliver personalized coaching. Here's how AI processing works:
- Conversation Processing: Your messages are sent to Anthropic's API to generate responses
- No AI Training: Per Anthropic's commercial terms, your conversations are NOT used to train their AI models
- Data Retention: Anthropic may temporarily process your data but does not retain it for training purposes
- Our Use: We may analyze conversation patterns (in aggregate) to improve our prompts and features
For more information, see Anthropic's Privacy Policy.
4. Aggregated and Anonymized Data
We may create anonymized, aggregated data that does not identify you or your business. This data may be used for:
- Industry benchmarks (e.g., "average solo founder works X hours/week")
- Product improvement and feature development
- Research and published reports
- Marketing materials and case studies (without identifying information)
This aggregated data cannot be used to identify you and is not subject to data deletion requests.
5. Information Sharing
We do not sell your personal information. We may share your information with:
5.1 Service Providers
- Supabase: Database hosting and authentication
- Anthropic: AI processing for coaching conversations
- Stripe: Payment processing
- Vercel: Application hosting
- Resend: Email delivery
5.2 Legal Requirements
We may disclose information when required by law, court order, or to protect our rights, safety, or property, or that of our users or the public.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
6. Data Security
We implement appropriate security measures to protect your data:
- Encryption in transit (HTTPS/TLS) and at rest
- Row-level security in our database
- Regular security assessments
- Limited employee access to user data
- Secure authentication practices
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion:
- Your personal data and business information are permanently deleted
- Conversations and check-ins are removed
- Anonymized, aggregated data may be retained
- We may retain certain data as required by law or for legitimate business purposes
8. Your Rights and Choices
You have the right to:
- Access: Request a copy of your data (available via Settings > Data > Export)
- Correction: Update inaccurate information through your account settings
- Deletion: Delete your account and associated data (Settings > Data > Delete)
- Portability: Export your data in JSON format
- Opt-out: Unsubscribe from marketing emails
9. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser, but this may affect Service functionality.
10. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If we learn we have collected data from a child, we will delete it promptly.
11. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers.
12. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA, including:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your rights
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes constitutes acceptance.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Sidekick Labs, LLC
Email: legal@sidekicklabs.com