Privacy Policy

What we collect

Account data. When you sign up we store your email address, an account identifier and your subscription status. Authentication is handled by Supabase.

Usage data. We record how many tokens each request consumes so we can enforce plan limits and show your usage. Usage records are tied to your account, not to your browsing history.

Content you send. When you ask SideKik about a page, the extension sends the parts of the page needed to answer (such as the article text, the selected text or the form you are writing in). That content is sent to our API and forwarded to our model provider solely to generate the response. Under our Zero Data Retention (ZDR) policy, it is never written to disk, never kept in logs and never stored after your answer is generated. It is never used to train models and never sold.

Billing data. Payments are processed by Stripe. We never see or store your card details.

What we do not collect

We do not collect your full browsing history, keystrokes, passwords, or the content of pages you never ask about. The extension only reads a page when you invoke it on that page. Prompts and page content are never retained — there is no prompt history stored on our servers, and no conversation archive.

Zero Data Retention

All requests are processed under Zero Data Retention agreements with our model provider. Concretely, this means:

• Your prompts and page content are processed in memory only and discarded immediately after a response.
• They are not written to databases, analytics systems or server logs.
• They are never used to train, fine-tune or improve AI models.
• They are never sold, rented or shared for advertising.

Data retention and deletion

Prompts and page content are never retained, so there is nothing to delete. Account and usage data are kept only while your account is active. You can delete your account at any time by contacting us; we will remove your personal data within 30 days, except where we must keep billing records for legal reasons.

Third parties

We keep the number of parties touching your data to a minimum, and every model provider we use is bound by Zero Data Retention terms.

• Supabase — authentication and database hosting (account data only).
• OpenRouter and its model providers — process your prompt in memory and retain nothing.
• Stripe — payment processing and billing portal.
• Cloudflare — website and API hosting.

Contact

Questions? Email privacy@sidekik.win.