Privacy Policy

1. Overview

sidebrain is built with a privacy-first philosophy. We collect only what's necessary to provide the Service, and we give you full control over your data. This Privacy Policy explains what we collect, how we use it, and your rights.

2. Information We Collect

Account Information

When you create an account (via Clerk authentication), we store your name, email address, and profile image. This is used to identify your account and personalize your experience.

API Keys & Tokens

If you provide API keys (e.g., Anthropic Claude API key) or connect third-party integrations (Google, Notion, Twitter/X), we store encrypted access tokens. These are used solely to make API calls on your behalf.

Conversation Data & Memory

sidebrain stores conversation history and extracted memories to provide persistent context across sessions. This data is associated with your user account and is not shared with other users.

Usage Data

We collect basic usage metrics (e.g., feature usage, error logs) to improve the Service. We do not sell or share this data with third parties for advertising purposes.

3. How We Use Your Information

• Providing and maintaining the Service
• Processing your requests through AI models and integrations
• Storing memories and conversation context for personalization
• Sending transactional emails (account verification, billing)
• Improving the Service based on usage patterns
• Preventing abuse and enforcing our Terms of Service

4. Third-Party Services

sidebrain integrates with and sends data to the following third-party services as needed to provide functionality:

• Anthropic (Claude) — Your conversations are sent to Anthropic's API for AI processing, subject to Anthropic's Privacy Policy
• Clerk — Authentication and user management
• Supabase — Database hosting and storage
• Stripe — Payment processing
• Vercel — Application hosting
• Google, Notion, Twitter/X — Connected integrations (only when you explicitly connect them)
• OpenAI — Embedding generation for memory search and image generation
• Telegram — Bot messaging interface

5. Data Security

• API keys are encrypted at rest using AES-256 encryption
• All data is transmitted over HTTPS/TLS
• User data is isolated per account — no cross-user data access
• We use Clerk for secure authentication with industry-standard practices

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete your account and all associated data at any time through the Settings page. Upon deletion, we will remove your data from our active systems within 30 days. Backup copies may persist for up to 90 days before being purged.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data
• Disconnect any third-party integration at any time
• Revoke API key access at any time

8. Cookies

sidebrain uses essential cookies for authentication and session management. We do not use advertising or tracking cookies. Third-party services (Clerk, Stripe) may set their own cookies as needed for their functionality.

9. Children's Privacy

sidebrain is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app notification. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact

Questions about your privacy? Reach out at [email protected]