Privacy Policy
Effective Date: February 4, 2025 Last Modified: February 4, 2025
This Privacy Policy describes how Spaceport Technologies, Inc., a Delaware corporation ("Company," "we," "us," or "our"), collects, uses, and shares information in connection with your use of our website, services, and applications (collectively, the "Services") available at side.chat.
By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, do not use our Services.
1. Information We Collect
Account Information
When you register for an account, we collect information through our authentication provider, Auth0, including:
- Email address
- Name
- Profile picture (if provided)
Organization and Team Data
We collect information about your organization and team membership, including:
- Organization name and settings
- Team membership and roles (owner, admin, member, viewer)
- Invitation and access management data
Chat and Conversation Data
We collect and store your complete chat and conversation history with AI agents, including:
- User messages and queries
- AI responses and generated content
- AI reasoning processes and tool invocations
- Timestamps and conversation metadata
Agent Configuration Data
We collect information about AI agents you create and configure, including:
- Agent names and descriptions
- Personality and behavioral configurations
- Identity and system prompt settings
- Tool and capability configurations
File Uploads
We store files you upload to our Services in Google Cloud Storage, including any documents, images, or other files shared with AI agents.
Payment Information
We collect payment information through our payment processor, Stripe, including:
- Billing email address
- Payment method details (stored securely by Stripe)
- Subscription and purchase history
- Credit balance and usage metadata
Usage and Analytics Data
We automatically collect information about your use of the Services, including:
- AI token consumption and usage metrics
- API usage patterns
- Feature usage statistics
Technical Information
We collect technical information including:
- IP addresses (particularly for administrative actions in audit logs)
- Browser type and version
- Device information
- Access times and referring URLs
2. How We Use Artificial Intelligence
Our Services use artificial intelligence to provide AI agent functionality. By using our Services, you expressly consent to the processing of your data by AI systems.
Frontend Chat
Chat messages in our web application may be processed by Google Generative AI (Gemini models) to provide conversational assistance and features.
Agent Conversations
Messages sent to AI agents are routed through our LiteLLM proxy to various AI model providers, including but not limited to Anthropic (Claude models). These providers process your messages to generate AI responses.
Data Storage
Complete conversation history is stored in our databases to maintain context continuity, enable conversation history features, and improve service quality.
AI Training
We do not use your conversations or data to train AI models. When using API-based AI services, your data is typically not used for model training by our AI providers. Please refer to each provider's privacy policy for their specific data practices.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Services
- Process transactions and manage your account
- Send transactional communications (receipts, account notifications)
- Respond to your requests and support inquiries
- Monitor and analyze usage trends and preferences
- Detect, prevent, and address security issues and fraud
- Comply with legal obligations
- Enforce our Terms of Service
4. Third-Party Services and Data Sharing
We share information with the following categories of third-party service providers:
Authentication
Auth0: We use Auth0 for user authentication. Auth0 receives your email, name, and profile information to manage your account credentials.
Infrastructure
Google Cloud Platform: All Services data is hosted on Google Cloud Platform infrastructure. This includes databases, file storage, and compute resources.
AI Processing
Google Generative AI: Chat messages may be sent to Google Generative AI for processing.
Anthropic: Agent messages are routed to Anthropic for AI processing via our LiteLLM proxy.
Payments
Stripe: We use Stripe to process payments. Stripe receives your billing email, payment method details, and subscription information.
Communications
Mailgun: We use Mailgun for transactional emails. Mailgun receives your email address to deliver service-related communications.
Other Disclosures
We may also disclose your information:
- To comply with applicable laws, regulations, or legal processes
- To protect the rights, property, and safety of the Company, our users, or others
- In connection with a merger, acquisition, or sale of assets
- With your consent or at your direction
5. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt-Out: You may opt out of the "sale" or "sharing" of your personal information. We do not sell personal information as defined by the CCPA.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, please contact us at legal@side.chat.
6. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and applicable local laws:
- Right of Access: You may request access to your personal data.
- Right to Rectification: You may request correction of inaccurate personal data.
- Right to Erasure: You may request deletion of your personal data.
- Right to Restrict Processing: You may request restriction of processing of your personal data.
- Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format.
- Right to Object: You may object to processing of your personal data.
- Right to Withdraw Consent: You may withdraw consent at any time where we rely on consent to process your data.
The legal bases for our processing of personal data are: (i) your consent; (ii) performance of a contract with you; (iii) our legitimate business interests; and (iv) compliance with legal obligations.
To exercise these rights, please contact us at legal@side.chat. You also have the right to lodge a complaint with your local supervisory authority.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide you Services. Specific retention practices include:
- Conversation History: Stored indefinitely while your account is active to maintain context and enable history features.
- Account Information: Retained while your account is active and for a reasonable period afterward for legal and operational purposes.
- Credits: Unused credits expire 12 months from the date of grant.
- Audit Logs: Retained for security and compliance purposes.
You may request deletion of your account and associated data by contacting us at legal@side.chat.
8. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- VPC isolation for agent compute resources
- No external IP addresses on agent virtual machines
- Encryption of data at rest and in transit
- Access controls and authentication requirements
- Regular security assessments
However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
9. Children's Privacy
Our Services are not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at legal@side.chat.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have data protection laws different from your country. We take appropriate safeguards to ensure your information remains protected.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Modified" date. Changes are effective immediately upon posting.
Your continued use of our Services after any changes indicates your acceptance of the modified Privacy Policy.
12. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
Spaceport Technologies, Inc. One Broadway, Fl 14 Cambridge, MA 02142 Email: legal@side.chat