Privacy Policy
This policy explains how Sidecar handles information through sidecarworkflow.com, the public demo, and the authenticated Sidecar application.
Information you provide
The marketing waitlist may collect your name, email address, company, information about the workflow you are trying to organize, and whether you are open to a short feedback call. Netlify processes and stores these form submissions for Sidecar.
If you receive an application account, Sidecar may store your email address, display name, company or workspace association, password credentials in hashed form, and the administrative workflow information entered into your workspace.
Password reset emails
When a password reset is requested for an existing account, Sidecar generates a temporary password and uses Brevo's transactional email API to deliver it. Brevo receives the recipient email address, recipient name when available, sender details, and email content needed to send that message. Sidecar stores a hash of the temporary password and its expiration time, not the emailed temporary password in readable form.
Analytics and cookies
The marketing site does not currently use Google Analytics, advertising trackers, or marketing cookies. Sidecar uses Google Search Console to understand how the public marketing site appears in Google Search, including aggregate information such as search queries, impressions, clicks, indexing status, and page performance. Search Console verification does not add a visitor analytics script to the site.
The authenticated application uses an essential session cookie to keep users signed in and protect private workspace access. The service may also receive ordinary technical information such as IP addresses, browser details, request times, and error information through hosting and security infrastructure.
How information is used
Sidecar uses information to operate and secure the website and application, manage accounts, provide password resets, respond to feedback, understand prospective users' workflow needs, and maintain or improve the service. Sidecar does not sell personal information.
Document analysis uploads
When document analysis is used, uploaded files are processed in memory using OCR to generate extracted text, suggestions, and metadata for review. Sidecar stores extracted text, suggestions, source filename, content type, size, and related processing metadata, but does not retain the original uploaded file after analysis.
Service providers
Sidecar relies on service providers to run the service, including Netlify for the marketing site and waitlist submissions, Railway for application hosting, Brevo for transactional password reset emails, and Google Search Console for search visibility and indexing information. These providers process information as needed to perform their services.
Retention and security
Information is retained while it is reasonably needed to operate Sidecar, maintain accounts, respond to requests, protect the service, or meet legal obligations. Sidecar uses practical administrative and technical safeguards, but no internet service can guarantee absolute security.
Authenticated workspace data is separated by tenant in the application. The public demo uses isolated demo data and safe email simulations rather than a customer workspace. Operational backups and a documented restore process are maintained for recovery; workspace exports remain available for customer-controlled reporting and portability.
Inbound email and OCR-assisted intake are review-first workflows. They may suggest or attach context, but they are not intended to silently determine compliance, approve documents, or change business status without user review.
Your choices
You may ask to review, correct, or delete personal information associated with you, subject to operational and legal requirements. Use the Contact page or include a privacy request in the pilot form.
Changes to this policy
This policy may be updated as Sidecar changes. The effective date at the top of this page will be revised when material updates are published.