Privacy Policy

Information we collect

Account information. Your name and email address, and, if you sign in with Google, your Google profile name and picture. We don't use passwords: you sign in with a one-time code sent to your email, or with Google.

Workspace information. The workspaces you create or join, their names, members and roles, and the email addresses you invite.

Your content. The files you upload (drawings, design standards, reference material), project names, the rules you write, your corrections to how pages are classified, and the reviews the Service produces from them ("Customer Content"). Drawings often belong to your clients; see "Your content" in our Terms.

Technical information. The IP address and browser information recorded with your sign-in sessions, and server logs we use to run and secure the Service.

Billing information. When paid plans are available, payments are handled by Stripe. We receive your plan, subscription status and a Stripe customer reference, never your full card details.

How we use it

• To provide the Service: store your files, run the reviews you start, and show you the results.
• To sign you in, keep your account and workspaces secure, and prevent abuse (for example rate limiting and preventing free-credit misuse).
• To send the emails the Service needs, such as sign-in codes and workspace invitations. We don't send marketing email without your consent.
• To manage credits and, when available, billing.
• To comply with law and enforce our Terms.

We don't use Customer Content to train AI models, ours or anyone else's, and we don't sell personal information.

How reviews are processed

When you start a review, its files and design standards are sent to an isolated, temporary sandbox that can read only that review's files and reach only the AI provider, file storage and SideRiser. The review is carried out by Anthropic's Claude through Anthropic's commercial API, whose terms don't allow Anthropic to train models on that data. Anthropic may retain API data for a limited period under its own terms, for example to detect abuse. The sandbox is deleted when the review finishes.

Who we share it with

Your workspace. Projects, files and reviews are visible to every member of the workspace they belong to. Owners and admins control who is a member.

Service providers. We use these providers to run the Service. They process information on our behalf and only to provide their services to us:

Legal and safety. We may disclose information when required by law, or to protect the rights, property or safety of SideRiser, our users or others.

Business transfers. If SideRiser is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this policy.

How long we keep it

• Customer Content is kept until you delete it. Deleting a file, review or project removes it from the Service; deleted files are removed from storage. A file a review used can be deleted once that review is deleted.
• Account and workspace information is kept while your account exists. To delete your account or a workspace, email legal@sideriser.com.
• Review sandboxes are deleted when the review finishes. Logs are kept for a limited period for security and troubleshooting.
• Copies may persist for a limited time in our providers' backups before they're overwritten.

Security

Files are encrypted in transit and at rest and are only opened through short-lived signed links. Access is restricted to members of the workspace that owns the content, sign-in codes are stored hashed, and each review runs in its own isolated sandbox. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.

Your choices and rights

You can view, change and delete your Customer Content in the Service at any time. To access, correct, export or delete your personal information, or to object to how we use it, email legal@sideriser.com. Depending on where you are, you may have additional rights under local data protection law, and you may complain to your local data protection authority.

If your workspace belongs to an organization, its owners and admins may also manage your membership and the workspace's content.

Cookies

We use only the cookies and browser storage the Service needs: a session cookie that keeps you signed in, and small preferences such as your sidebar state, your last sign-in method and your color theme. We don't use advertising or analytics cookies.

International transfers

SideRiser and its providers may process information in the United States and other countries, which may have different data protection laws from yours. Where required, we rely on appropriate safeguards for these transfers.

Children

The Service is for professionals aged 18 and over. We don't knowingly collect information from anyone under 18.

Changes to this policy

We may update this policy. We'll change the date above and, for material changes, notify you by email or in the Service before they take effect.

Contact

Questions or requests about privacy: legal@sideriser.com.