Privacy Policy

What this policy covers

This policy applies to the Sidebeam website and web app, browser extension, computer companion, and other Sidebeam experiences that link to it. It covers information Sidebeam handles when you create an account, use the service, connect another service, or contact us.

Sidebeam is the name of the service described in this policy. If a separate agreement identifies an organization operating your deployment, that agreement also applies.

Information Sidebeam handles

The information involved depends on the features you choose to use.

• Account and profile. Your email address, display name, avatar, language, timezone, authentication methods, authorized devices, and account settings.
• Content and instructions. Conversations, prompts, responses, files, images, audio, knowledge documents, memories, personas, tasks, schedules, comments, and other content you create or provide.
• Connected services. Connection details and the content you ask Sidebeam to access from email, cloud drives, chat apps, websites, browser pages, tools, or connected computers. Authorization credentials are handled so the requested connection can work.
• Use, device, and security information. Features used, request times, delivery status, quota and cost measurements, browser and device information, error records, and security events needed to run and protect the service.
• Information you choose to share. Content included in public file or chat links, group conversations, generated web apps, or other collaboration features you deliberately publish or send to other people.

How Sidebeam uses information

Sidebeam handles information only for purposes connected to providing, securing, and improving the service, including to:

• Create and maintain your account; deliver chats, files, knowledge, tasks, notifications, and other features you request.
• Apply your saved language, timezone, persona, memory, permissions, and connected-service choices.
• Send sign-in codes, security messages, task results, and service notices, and respond to feedback.
• Authenticate requests, prevent abuse, investigate failures, enforce limits, and protect users and the service.
• Measure reliability and feature use, troubleshoot problems, and improve product behavior without placing private content in analytics events.
• Comply with applicable law, respond to valid legal requests, and establish or defend legal claims.

Sidebeam does not use private conversations, files, or connected-service content to show you advertising.

AI and connected services

AI model providers

When a request needs an AI model, Sidebeam sends the instructions, content, and relevant context needed to complete that request to the model provider configured for the service. The provider may process that information on Sidebeam's behalf under the service arrangement in place for that deployment.

Services you connect

If you connect email, cloud storage, a chat app, an external tool, or another service, Sidebeam accesses it only within the permissions you approve and for the actions you request. You can disconnect integrations from settings. The connected service also handles information under its own privacy terms.

Browser extension

The extension reads the current page only when you open the page assistant or choose to save page content. It does not read passwords, sign-in details, cookies, or browsing history. Sidebeam asks before operating the page.

Connected computers and cloud browsers

Sidebeam performs computer or browser actions only through an authorized device or session and within the permissions shown to you. Screens, page content, action results, and session state needed for the requested work may be processed.

When information is shared

Sidebeam shares information only as needed for the service or when you direct it. Recipients may include:

• Service providers. Hosting, storage, database, email delivery, AI model, search, analytics, browser, and security providers that support the service.
• Services and people you choose. Connected services, delivery destinations, collaborators, or recipients you ask Sidebeam to contact or send content to.
• Public and collaborative features. Anyone with an active public link may be able to view its contents. Other members of a group conversation or shared space can see the content and identity shown within that collaboration.
• Safety and legal reasons. Authorities or other parties when disclosure is reasonably necessary to comply with law, protect rights and safety, investigate abuse, or support a business reorganization subject to appropriate safeguards.

Sidebeam does not sell personal data or share it for cross-context behavioral advertising.

Cookies and analytics

Sidebeam uses cookies and local browser storage to keep you signed in, remember language and interface choices, protect requests, support offline behavior, and keep the app working as you move between pages.

A deployment may enable Google Analytics to measure visits and feature routes. When enabled, Sidebeam sends normalized route patterns without query strings, share tokens, record identifiers, account identifiers, email addresses, or content. Google processes that analytics data under its own terms.

You can limit cookies in your browser, but blocking essential cookies or storage can prevent sign-in and other core features from working.

Retention and deletion

Sidebeam keeps information for as long as needed to provide the feature, keep the service secure and reliable, meet legal obligations, and resolve disputes. The period depends on the type of information and why it is held.

• Account settings and active content are generally kept while your account or the relevant feature remains active.
• When you delete content or revoke a public share, Sidebeam removes it from active use according to that feature's deletion flow. Copies already received or saved by another person are outside Sidebeam's control.
• When account deletion succeeds, sign-in access and active public shares are revoked. Account-owned data and locally stored connection credentials are removed from the active service. Storage objects and connections that support remote revocation or deletion are queued for cleanup when they cannot be handled in the same transaction.
• To prevent repeated signup rewards after account deletion, Sidebeam retains a one-way keyed fingerprint of a verified sign-in identity. It is used only to decide reward eligibility and does not retain the original email address or provider account identifier.
• Limited copies may remain in protected backups until they are overwritten on the normal backup cycle. Backups are not used to restore deleted content into the live service except when required for disaster recovery.
• Security, audit, billing, or legal records may be kept longer when required, with access limited to those purposes. Aggregated information that can no longer reasonably identify you may be retained.

Content contributed to a shared space may need to be removed, replaced with a deletion marker, or retained as part of a collaborative record, depending on the feature and the rights of other participants.

Your choices and rights

Sidebeam provides controls inside the product, and privacy law may give you additional rights depending on where you live.

• Review or update your profile, language, timezone, authentication methods, and notification choices in settings.
• Manage conversations, files, knowledge, memories, tasks, generated apps, and public shares from the corresponding product area.
• Review and disconnect email, drives, chat apps, browser connections, external tools, and authorized computers from settings.
• You may request access, correction, deletion, restriction, portability, or objection where applicable, and may withdraw consent when consent is the basis for processing.

Security and international processing

Sidebeam uses technical and organizational measures designed to protect information, including access controls, authenticated requests, scoped permissions, protected credentials, logging boundaries, and deletion workflows. Access is limited to people and systems that need it for the purposes described here.

Sidebeam and its service providers may process information in countries other than the one where you live. When required, the organization operating the deployment is responsible for using an approved transfer mechanism and appropriate contractual or technical safeguards.

No online service can guarantee absolute security. Protect your sign-in methods, review connected devices, and contact us if you believe your account has been compromised.

Children, changes, and contact

Children

Sidebeam is not directed to children who are below the minimum age required to consent to an online service in their location. If you believe a child provided personal data without appropriate permission, contact us so it can be reviewed.

Changes to this policy

We may update this policy when the service, our practices, or legal requirements change. We will update the date above and provide an additional notice when a change materially affects your choices.

Privacy questions and requests

For a privacy question or request, contact Sidebeam at support@sidebeam.net

You may also submit a complaint to the data protection authority available where you live or work. Contacting Sidebeam first gives us an opportunity to address the request directly.