Privacy Policy

What data we collect

We collect the following categories of personal data:

• Account data: name, email address, company name
• Usage data: how you use our service, which features you use
• Technical data: IP address, browser type, device information
• Website data: URLs you analyze, content you generate
• Payment data: billing address (payment details are processed by Stripe)

How we process your data

We process your data for the following purposes:

• Providing and improving our services
• Analyzing your website and competitors
• Generating AI-created content
• Sending service-related communications
• Complying with legal obligations

Legal basis

We process your data based on:

• Contract performance (to deliver our services)
• Legitimate interest (to improve our services)
• Consent (for marketing communications)
• Legal obligation (for accounting and taxes)

Your rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access: you can request what data we have about you
• Right to rectification: you can have incorrect data corrected
• Right to erasure: you can request deletion of your data
• Right to restriction: you can limit the processing
• Right to portability: you can request your data in a structured format
• Right to object: you can object to certain processing

To exercise any of these rights, contact us at privacy@sidekickmark.app.

Data retention

We don't keep your data longer than necessary:

• Account data: up to 2 years after account termination
• Usage data: 26 months (for analytics)
• Billing data: 7 years (legal requirement)
• Support tickets: 3 years after resolution

Third parties

We share data with the following service providers:

• Vercel (hosting) - US, Privacy Shield certified
• Neon (database) - US, SOC 2 certified
• Clerk (authentication) - US, GDPR compliant
• Stripe (payments) - US, PCI-DSS certified
• Resend (email) - US, GDPR compliant
• OpenAI/Anthropic (AI) - US, for content generation

We have data processing agreements with all these parties and they may only process your data on our behalf.

Security

We take appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS) and at rest (AES-256)
• Access control and authentication
• Regular security audits
• Tenant isolation for multi-tenant environment

Contact

For questions about this privacy policy or your data, contact us at:

You can also file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).