Legal

Privacy Policy

What we collect to run Sideren, what we do with it, and how long we keep it — in plain English.Effective 2026-10-01

The policy
  1. 01

    What we collect

    Account data — your name, email address, and the sign-in identity you use (email or Google).

    Usage data — API request metadata (timestamps, model, token counts, status) and the content of API requests and responses, which is kept for up to one year (see Retention below).

    Website and dashboard usage — pages you visit, buttons you click, and frontend error reports, so we can see how the product is used and when a page breaks. This does not include the content of your API requests or responses.

    Sideren CLI — the se command-line tool sends outcome counts, such as how many edits were kept or how many test runs failed, with no file contents, unless you turn this off in its settings.

    Sideren CLI devices — when se is installed, started, signed in or signed out, it sends details about the computer: an install ID, a one-way hash of the computer's own ID, the computer name, the user name on the computer, the operating system and its version, the processor, memory, terminal and se version. We record them with the IP address the request came from and the place and network our hosting provider derives from it (country, region, city, postal code, approximate coordinates and network provider). We use them to keep accounts secure, to show you which computers use your account, and to detect abuse. They never include your files or prompts.

    Billing — payment details are collected and held by our payment provider. We never see or store your card details.

  2. 02

    How we use it

    We use this data to operate the service: authenticate you, meter usage against your plan, bill subscriptions, keep the service reliable, debug failures, and prevent abuse. We send transactional email about your account.

    We may use the content of your API requests and responses to improve the system, including training the models that decide how requests are routed. This applies to content sent on or after 2026-10-01.

    We do not sell personal data.

  3. 03

    Retention

    API request metadata is retained for as long as your account exists. Request/response content is retained for a limited period — up to one year — for reliability, debugging, abuse prevention, and improving the system, then deleted. Account data is kept for as long as your account exists. Payment details are never stored by us.

  4. 04

    Processors

    We share data with a small number of processors, only as needed to run the service: our payment provider (Dodo Payments, our merchant of record) for subscriptions and payment details; our authentication and database provider for account data; our hosting providers, which run the API and dashboard; a cloud compute provider we use to train the models that decide how requests are routed; a product analytics processor for website and dashboard usage; and an error-monitoring processor for frontend and server crashes. The compute provider receives request and response content with secrets and contact details removed. Analytics and error monitoring do not receive the content of your API requests or responses. We do not share your data with anyone else, except where the law requires it.

  5. 05

    Your rights

    You can ask us to access, correct, or delete the personal data we hold about you — email us, and we act on reasonable requests regardless of where you live. Closing your account removes your account data; retained request content ages out within the retention window above.

  6. 06

    Contact

    Privacy questions: support@sideren.io. For the rules that govern your use of the service, see the Terms of Service below.