Privacy

If you are a customer of a business that uses us

The business you hired holds your details and decides what to do with them. We store them on that business's behalf and do nothing else with them — we do not sell them, we do not share them with other businesses on withsidekick, and we do not use them to advertise anything to you.

What that business gives us about you is:

• your first name and mobile number
• the dates of the jobs they did for you, and how many
• whatever note or tag they choose to add
• the text of messages between you and them that go through us, and whether each was delivered
• a record that consent was given, including the exact wording shown at the time

To stop the texts, reply STOP to any of them. That takes effect immediately, before anything else is sent, and it is also enforced by the mobile carriers themselves. Reply HELP for contact details. To have your details deleted entirely rather than just stopped, ask the business directly — it is their record, and they can remove it. You can also write to us at support@withsidekick.ai and we will pass it on.

If you run a business that uses us

We store your email address, your business name and trade, your city, state and timezone, your mobile number, your Google review link, and your settings. Billing is handled by Stripe; we keep only the customer and subscription identifiers Stripe gives us and never see your card.

If you use review detection, you forward Google's notification emails to an address we give you. We read those to find new reviews. The raw email is deleted after 90 days; the review it contained is kept, because it is yours.

Who else sees it

Only the companies that make the product work, each doing one job:

• Supabase — the database and sign-in
• Vercel — hosting, and a count of how many people visited each page
• Twilio — sending and receiving the text messages
• Resend — sending our email, and receiving forwarded review notifications
• Stripe — payments
• Anthropic — drafting suggested replies to reviews

The reply drafting deserves a specific note: the text of a public review, and your business name, are sent to Anthropic's API to produce a suggested reply. Nothing about your customer list goes with it. Anthropic does not train on data sent through its API. The draft is shown to you and posted only if you post it.

We do not sell data to anyone, and there is no advertising or tracking network on this site. The page-view counts above are first-party and aggregate: no cookie, no identifier that follows you anywhere else, and nothing that could be tied back to a person.

How long we keep things

• Forwarded review-notification emails: the raw email is deleted after 90 days.
• Consent records and message history: kept for as long as the account exists. These are the evidence that a message was allowed to be sent, and US telemarketing rules require they be kept — so they survive other deletions on purpose.
• Everything else: for as long as the account exists.

Close your account and we delete your business and its customer records, keeping only what the paragraph above says we must. Email support@withsidekick.ai to start that.

Security

Traffic is encrypted in transit. Each business's data is separated at the database level so one account cannot read another's. The links we text — your button, your numbers page, a reply draft — are unguessable rather than password-protected, so treat them like keys: anyone you forward one to can use it. You can replace any of them from Settings, which makes the old one stop working.

Children

This is a tool for businesses. It is not directed at anyone under 18 and we do not knowingly collect their information.

Changes

If we change how any of this works we will change this page and update the date at the top. If the change is significant, account holders get an email.