Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you register, subscribe, or contact us, we may collect your name, email address (provided through HubSpot or Google OAuth sign-in), billing information processed by Stripe (we never store full payment card numbers), and support correspondence.

1.2 Information Stored Locally in Your Browser

The following sensitive credentials are stored exclusively in your local Chrome browser storage (chrome.storage.local) and are never transmitted to our servers:

• AI provider API keys (Anthropic Claude, OpenAI, Google Gemini)
• HubSpot and Salesforce OAuth access and refresh tokens
• Google Workspace (Gmail, Calendar) OAuth tokens
• Chat session history and extension preferences

1.3 Subscription and Account Data

We collect and store in a secured registry: email address, trial start and end dates, subscription status (trial, active, or expired), Stripe customer ID (no card data), HubSpot portal ID or Salesforce org ID, and timestamps of first and most recent login.

1.4 Automatically Collected Website Data

Our website may automatically collect standard server log data including IP address, browser type, referring URL, and pages visited. We do not use tracking cookies or behavioral advertising technologies.

2. How We Use Your Information

We use collected information solely to:

• Verify and manage your trial or paid subscription
• Process payments through Stripe
• Authenticate your access to SideBlend features
• Respond to customer support inquiries
• Send transactional communications (trial reminders, billing receipts)
• Comply with legal obligations under North Carolina and federal law
• Prevent fraud, abuse, and enforce our Terms of Service

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third party. We share information only in the following limited circumstances:

• Stripe, Inc. — Payment processing only. Subject to Stripe’s Privacy Policy.
• Google LLC — Google Sheets subscription registry, Gmail API, Calendar API, and Google OAuth flows. Subject to Google’s Privacy Policy.
• HubSpot, Inc. and Salesforce.com, Inc. — CRM data is accessed at your direction using your own authorized accounts. We do not independently store or transmit your CRM records.
• AI Providers — When you send a chat message, your message text is transmitted directly from your browser to your chosen AI provider (Anthropic, OpenAI, or Google) using your own API key. We do not relay or log these messages.
• Legal Requirements — We may disclose information if required by law, court order, or government authority, or where reasonably necessary to protect the rights, safety, or property of SideBlend, our users, or the public.

4. Data Storage and Security

We implement reasonable security measures consistent with the North Carolina Identity Theft Protection Act (N.C.G.S. § 75-60 et seq.), including:

• All sensitive credentials (API keys, OAuth tokens) are stored locally in your browser and never transmitted to our servers
• Subscription data is secured with service account authentication and restricted access controls
• All payment card data is handled exclusively by Stripe under PCI DSS compliance
• HTTPS encryption is enforced for all data in transit to our servers
• Access to subscription data is limited to authorized personnel only

When personal information is no longer required, we follow secure disposal practices consistent with N.C.G.S. § 75-64, rendering data unreadable or permanently destroying records containing personal information.

5. Your Rights as a North Carolina Resident

Under North Carolina law and applicable federal law, you have the following rights with respect to your personal information:

• Right to Access — Request a copy of the personal information we hold about you
• Right to Correction — Request correction of inaccurate or incomplete personal information
• Right to Deletion — Request deletion of your personal information from our systems
• Right to Opt-Out — Opt out of marketing communications at any time via the unsubscribe link in any email or by contacting us directly
• Right to Portability — Receive your personal data in a commonly used, machine-readable format upon request

To exercise any of these rights, contact us at privacy@sideblend.com. We will respond within 30 days. We will not discriminate against you for exercising your privacy rights. We may need to verify your identity before fulfilling a request.

6. Data Breach Notification

In the event of a security breach involving unencrypted personal information, we will comply with the North Carolina Identity Theft Protection Act (N.C.G.S. § 75-65), including:

• Notifying affected North Carolina residents as expeditiously as possible, but no later than 30 days after discovery and investigation of the breach
• Notifying the North Carolina Attorney General’s Office if the breach affects more than 1,000 North Carolina residents
• Notifying all nationwide consumer reporting agencies if more than 1,000 residents are affected

Notice will be delivered by email to the address on your account, or by substitute notice (conspicuous website posting and notification to major statewide media) where direct notice is not reasonably practicable or cost-prohibitive.

7. Third-Party Services

SideBlend integrates with third-party services entirely at your direction. Each service operates under its own privacy policy, which governs how they handle your data. We encourage you to review the privacy policies of any service you connect:

• HubSpot: legal.hubspot.com/privacy-policy
• Salesforce: salesforce.com/company/privacy
• Anthropic (Claude): anthropic.com/privacy
• OpenAI: openai.com/policies/privacy-policy
• Google (Gmail, Calendar, Gemini): policies.google.com/privacy
• Stripe: stripe.com/privacy

We are not responsible for the privacy practices or content of third-party services.

8. Children’s Privacy

SideBlend is designed for business professionals and is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13 years of age in compliance with the Children’s Online Privacy Protection Act (COPPA). If we become aware that we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you have reason to believe we have collected such information, please contact us at privacy@sideblend.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on this page with a revised effective date, sending email notice to active subscribers, and displaying a notice within the SideBlend extension. Your continued use of SideBlend after the effective date of any update constitutes your acceptance of the revised policy.

10. Contact Us

For privacy-related questions, requests, or concerns, please contact us:

You also have the right to file a complaint with the North Carolina Attorney General’s Consumer Protection Division at ncdoj.gov or by calling 1-877-5-NO-SCAM (1-877-566-7226).