Privacy Policy

1. Data We Collect

We collect the minimum data necessary to provide and improve our services:

• Account information provided by OAuth providers (Twitch, Kick): user ID, display name, avatar URL, and email address (if available).
• Technical session data: IP address, browser user agent, authentication tokens, and session timestamps.
• Service usage data: features accessed, actions performed, and interaction timestamps.
• Payment information: transaction IDs, subscription plan, billing dates, and payment status. We do not store credit card numbers or bank account details — all payment processing is handled by third-party providers.
• Realtime module data: canvas state, component configurations, and collaboration metadata required for live interactions.

2. How We Use Your Data

Your data is used exclusively for the following purposes:

• Authenticating your identity and managing session access.
• Providing, maintaining, and improving SidePilot features including overlays, canvas, chatbot, and moderation tools.
• Processing subscription purchases, renewals, and managing payment status.
• Detecting and preventing abuse, unauthorized access, and ensuring platform stability.
• Responding to support requests and troubleshooting technical issues.

3. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share limited data with the following third parties solely for operational purposes:

• OAuth providers (Twitch, Kick) — for authentication flows only.
• Payment processors — for subscription billing and payment verification.
• Law enforcement or regulatory authorities — only when required by applicable law or valid legal process.
• Infrastructure and hosting providers — for service delivery and performance monitoring.

4. Cookies and Local Storage

SidePilot uses essential cookies and browser local storage for authentication tokens, session management, and user preferences. We do not use third-party tracking cookies or advertising cookies.

5. Data Retention

We retain your account data for as long as your account is active. Session logs and technical data are retained for up to 90 days for security and diagnostic purposes. Payment records are retained as required by applicable financial regulations. You may request deletion of your account and associated data at any time by contacting support.

6. Data Security

We implement industry-standard security measures including encrypted connections (TLS/HTTPS), secure token storage, access control, and regular security audits. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Right to access — request a copy of your personal data.
• Right to rectification — correct inaccurate or incomplete data.
• Right to deletion — request removal of your account and data.
• Right to data portability — receive your data in a structured format.
• Right to object — object to certain data processing activities.

To exercise any of these rights, email us at privacy@sidepilot.app.

8. Children's Privacy

SidePilot is not intended for use by individuals under the age of 13 (or the minimum digital consent age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us to have it removed.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through a notice on the website or via email. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, email us at privacy@sidepilot.app. For general support, contact support@sidepilot.app.