Privacy Policy of Sider.AI

1. Introduction and Who We Are

Sider.AI ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our services, including our website, browser extensions, mobile and desktop applications, and other related platforms (collectively, the "Services"). This Policy describes our practices; where the law requires your consent for a particular use, we will ask for it separately.

1.1 Data Controller

The company responsible for your personal information is Vidline Inc., 335 Huntington Ave #35, Boston, MA 02115-4406, USA ("Sider"). You can contact us about privacy at [email protected].

1.2 Summary of Key Points

  • We use your inputs, uploaded files and chat history only to provide the features you request, keep the Services secure, and comply with law. We do not use them to train AI models, for research, or for demonstrations.
  • To answer your request, we send the relevant content to the AI provider of the model you choose (OpenAI, Anthropic, Google, xAI, DeepSeek or Moonshot AI). Each provider processes it under its own privacy policy and terms (Section 5.5).
  • We use cookies for analytics, advertising and affiliate tracking; Section 4 explains how to control them.
  • You can delete your account and data yourself at sider.ai/my. We erase account data within 30 days after closure, except where the law requires us to keep specific records.
  • Wherever you live, you can e-mail [email protected] to access, correct or delete your data, or to receive a copy of it. Users in the EEA, UK and Switzerland may also complain to their data-protection authority.

This Policy should be read together with our Terms of Use. On matters of personal data, this Policy prevails.

2. Information We Collect

2.1 Account, Contact and Payment Information

Account Information: name, e-mail address or phone number (depending on how you sign in), sign-in identifiers from the third-party login you choose (e.g., Google or Apple), subscription status, and other registration details.

Communication Information: when you contact us, the information you provide, including your name, contact details, and the content of your inquiries.

Payment Information: subscriptions are processed by Stripe or Antom, who collect your card or wallet details. We receive only a transaction ID, the last four digits of your card, billing country and transaction history; we do not store full card numbers.

2.2 Device, Usage and Analytics Information

We treat the following as personal information because it can identify you indirectly: the features you access, the content you view or interact with, actions you take within the Services, date and time of activity; device type, operating system, browser type, language, IP address (from which we derive an approximate location), device identifiers, crash and performance data, and mobile network information; and page load times, error rates and traffic sources collected through analytics tools (Section 4).

2.3 Content You Provide to AI Features ("Content")

When you use AI features we process the prompts you type, files and images you upload, web-page text you ask us to read or summarize, audio you record, the conversation history needed for context, and the outputs generated for you. Content may include personal information about you or others, and may include sensitive information if you choose to include it. We do not ask for sensitive information, and we process any sensitive information in Content solely to provide the feature you request.

3. How and Why We Use Your Information

3.1 Provide and Improve the Services

We use your personal information to create and manage your account, provide access to the Services, deliver the features you request, process payments, and provide support. Usage information helps us understand how you interact with the Services, identify areas for improvement, and develop new features.

3.2 Communication

We use your contact information to send important updates, announcements, and administrative messages, such as service changes, security alerts, and legal notices. After you register, we may also send you our newsletter and product updates. You can unsubscribe at any time via the unsubscribe link in every such e-mail or in your account settings at sider.ai/my; we process unsubscribe requests within 10 business days. Service and legal notices are sent regardless of your marketing preference.

3.3 Analytics

We use analytics tools to analyze usage patterns and trends, measure the effectiveness of our marketing, and make data-driven decisions to improve the Services. Product testing (for example, comparing two versions of a feature) uses usage data, not your Content.

3.4 How We Use Your Content

Your Content is used only (a) to generate the response you request, including by sending it to the AI provider of the model you select (Section 5.5); (b) to store your conversation history so you can access it, until you delete it; (c) to detect and prevent abuse, fraud and security threats, which may involve limited review by our staff of flagged Content; and (d) to comply with legal obligations.

We do not use your Content to train or fine-tune AI models, and we do not use it for research, public demonstrations, marketing or case studies.

3.5 Legal Bases (EEA, UK and Swiss users)

PurposeLegal basis
Account, AI features, storing your history, billing, supportPerformance of a contract — Art. 6(1)(b) GDPR
Security, abuse and fraud preventionLegitimate interests — Art. 6(1)(f): protecting users and the Services
Product analytics and improvementLegitimate interests — Art. 6(1)(f); consent where required for cookies
Newsletter and marketing; advertising cookiesConsent — Art. 6(1)(a) (see Sections 3.2 and 4 for how to withdraw)
Tax, accounting, responding to lawful requestsLegal obligation — Art. 6(1)(c)
Establishing, exercising or defending legal claimsLegitimate interests — Art. 6(1)(f)

Providing account and payment information is necessary to enter into our contract with you; without it we cannot provide the Services. Providing Content is your choice.

4. Cookies and Similar Technologies

We use cookies, local storage, pixels and SDKs on our website and apps for the purposes below.

4.1 Essential Cookies

Required for the proper functioning of the Services, such as logging in, keeping your session, navigating between pages, and security.

4.2 Analytics Cookies

Help us analyze how you use the Services and improve performance: number of visitors, pages visited, time on page. We use Google Analytics for this purpose.

4.3 Advertising Cookies

Used to promote Sider.AI on external platforms such as Google and Microsoft. These cookies collect identifiers and information about your visits to our Services, which those platforms combine with their own data about your interests and activity on other websites and apps, so that we can display targeted ads to attract new users and measure our advertising. Under U.S. state privacy laws this may constitute "sharing" personal information for targeted advertising; see Section 8.4. We do not use Content from the AI chat features for advertising.

4.4 Affiliate and Social-Media Cookies

Affiliate cookies track referrals from affiliate partners so that sign-ups or purchases can be attributed to the correct partner. Social-media cookies enable sharing features and are set by the social network concerned, which may receive information about your visit; see that network's privacy policy.

4.5 How to Control Cookies

You can block or delete cookies through your browser settings (this may affect some features). To opt out of personalized advertising, use Google's Ads Settings (adssettings.google.com), Microsoft's Ad Settings (account.microsoft.com/privacy/ad-settings), and the industry tools at optout.aboutads.info (U.S.) or youronlinechoices.eu (Europe). To opt out of Google Analytics, install the Google Analytics opt-out browser add-on. Mobile apps: use your device's "Limit Ad Tracking" / "Opt out of Ads Personalization" setting.

5. Data Sharing and Disclosure

5.1 Service Providers

We share personal information with service providers that help us operate the Services: hosting and content delivery (Amazon Web Services, Cloudflare), sign-in (Google, Apple), payment processing (Stripe, Antom), e-mail delivery (Amazon SES), analytics (Google), and AI model providers (Section 5.5). Under their service terms, these providers may use your information only to provide their services to us and must protect it.

5.2 Advertising Partners

Google and Microsoft receive advertising identifiers and information about your visits through the cookies described in Section 4.3, and use that information for their own advertising networks under their own privacy policies.

5.3 Legal Requirements

We may disclose your personal information if required by law, regulation, or legal process, such as a court order, subpoena, or government investigation, and where necessary to protect the life, safety or legal rights of users or others, or to investigate fraud or security incidents affecting the Services. We review requests for scope and lawfulness and disclose only what is necessary.

5.4 Business Transfers

In a merger, acquisition, sale of assets, or other business transfer, your personal information may be transferred to the acquiring or successor entity. The recipient must continue to honor this Policy as it applied when your information was collected. We will notify you where legally permitted, and any materially new use of your information will require fresh notice and any consent required by law.

5.5 Third-Party AI Model Providers

When you use AI features, we send the Content needed to process your request through Sider's servers to the third-party AI provider corresponding to the model you select, including OpenAI, Anthropic, Google, xAI, DeepSeek, or Moonshot AI. Depending on the feature, this may include text, images, attachments, web content, audio, and relevant conversation history, and may contain personal information. We send only the Content needed for your request, and the provider of each model is shown when you select it.

In the Sider iOS app, we ask for your explicit consent before sending this content to third-party AI providers. If you do not consent, we will not send this content to these providers through the iOS app.

Each provider processes the Content it receives in accordance with its own privacy policy and terms. We encourage you to review the privacy policy of a provider before choosing its model. OpenAI, Anthropic, Google and xAI are located in the United States; DeepSeek and Moonshot AI are located in China (see Section 6). Sider itself uses your Content only as described in Section 3.4.

6. International Data Transfers

We are located in the United States, and our service providers are also located mainly in the United States and, for the DeepSeek and Moonshot AI models, in China. Your personal information will therefore be processed outside the country where you live, including outside the EEA, the United Kingdom and Switzerland.

For transfers from the EEA, UK and Switzerland we rely on the recipient's certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses (and the UK Addendum). You may ask us at [email protected] which mechanism applies to a particular provider.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the establishment, exercise, or defense of legal claims, and in accordance with applicable laws.

CategoryRetention
Account data, chats, files and outputsUntil you delete them or close your account; then deleted within 30 days
Usage and analytics data3 months, then anonymized or deleted
Support communications24 months after the last interaction
Billing and transaction recordsAs required by tax and accounting law (generally up to 7 years)
Records needed for a specific legal claim or investigationOnly the relevant records, until the matter is resolved

Backups are overwritten within 90 days and are not used for ordinary operations.

8. Your Privacy Rights

8.1 Rights Available to All Users

Wherever you live, you may ask us to: (a) tell you what personal information we hold about you and give you a copy of it in a commonly used electronic format; (b) correct inaccurate information; (c) delete your account and all associated data (you can also do this yourself at sider.ai/my; individual chats and files can be deleted directly within the Services); (d) stop or restrict certain processing; and (e) stop sending you marketing. To make a request, e-mail [email protected].

We respond within 30 days (45 days where U.S. state law so provides); if we need more time we will tell you why. Requests are free unless manifestly unfounded or excessive. We will tell you if any information must be kept for legal reasons.

We verify requests by confirming that they come from the account holder (for example, by matching the e-mail address or phone number registered to your account); where necessary we may ask for additional information proportionate to the request. You may authorize someone to act for you, in which case we may ask for proof of authorization.

We will not treat you differently for exercising your rights.

8.2 EEA, UK and Swiss Users

You may also withdraw any consent at any time (this does not affect processing before withdrawal), object to processing based on our legitimate interests, and lodge a complaint with your local data-protection authority (a list of EU authorities is at edpb.europa.eu; UK: ico.org.uk; Switzerland: edoeb.admin.ch).

8.3 Automated Decisions

Automated systems may flag Content or accounts for abuse or payment fraud. If your account is restricted as a result, you may ask for a person to review the decision by e-mailing [email protected] (Section 12).

8.4 U.S. State Residents (California and other states with privacy laws)

In the preceding 12 months we collected the following categories of personal information: identifiers (name, e-mail, IP address, device ID); customer and payment records; commercial information (purchases, subscriptions); internet and device activity on our Services; approximate location derived from IP address; audio, image and other Content you provide; and sensitive personal information only where you include it in Content or account credentials. Sources: you, your device, and our service providers. Purposes: Section 3. We disclose these categories to the service providers in Section 5.1 and, for cookie-based identifiers and browsing information only, to the advertising partners in Section 5.2. We do not use sensitive personal information for purposes other than providing the Services, security and legal compliance.

Opting out of "sharing" for targeted advertising. The advertising cookies in Section 4.3 may constitute "sharing" personal information for cross-context behavioral advertising. You may opt out using the tools in Section 4.5 or by e-mailing [email protected]. We do not knowingly sell or share the personal information of consumers under 16.

If we decline a request, you may ask us to reconsider by replying to our response, and if you remain dissatisfied you may contact your state Attorney General.

9. Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including physical, technical, and administrative safeguards such as firewalls, encryption in transit, access controls, and employee training. However, no security system is 100% secure, and we cannot guarantee absolute security.

If a data breach is likely to put your rights at risk, we will notify the competent authority and affected users as required by applicable law (including within 72 hours to EU/UK authorities under GDPR).

10. Children's Privacy

The Services are not directed to children. You must be at least 13 years old to use the Services, or 16 if you are in the EEA or the United Kingdom (or the higher age required in your country). We do not knowingly collect personal information from children below these ages, and we do not knowingly sell or share the personal information of anyone under 16 for advertising. If we become aware that we have collected personal information from a child in breach of this section, we will delete it as soon as possible. If you believe a child has provided us with personal information, please contact [email protected].

11. Your Content and Outputs

As between you and Sider, you own your inputs and, to the extent permitted by applicable law, the outputs generated for you. Sider claims no ownership or joint ownership of your Content and uses it only as described in Section 3.4. Outputs may not be unique and may not qualify for copyright protection; we make no warranty regarding their legal status. Your responsibilities regarding your inputs and your use of outputs are set out in the Terms of Use.

12. Account Restrictions: Notice and Review

The circumstances in which we may restrict or suspend an account (such as a breach of the Terms of Use, payment fraud, or a legal requirement) are set out in the Terms of Use. This section describes how we notify you and how you can ask for a review.

12.1 Notice

Once your account is restricted, we will show a notification on the client interface when you use the Services. The notification will inform you that your account has been restricted and how to contact us. If you e-mail [email protected], we will look up your case and tell you the reason and the term of the Terms of Use relied on, unless disclosure is prohibited by law or would compromise an ongoing security or fraud investigation, in which case we will tell you the general category of reason.

12.2 Review

If you believe your account has been restricted in error, you can contact us at any time by e-mailing [email protected] with your account e-mail, an explanation, and any supporting evidence. Our team will review your case and we will respond by e-mail within 7 business days. If the restriction is lifted, we restore your account and Content. Your rights under Section 8 (including deletion) continue to apply while your account is restricted.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. When we make changes, we will post the updated version on our website and indicate the date of the last update.

For material changes — such as new uses of your Content, new categories of recipients, or a reduction of your rights — we will notify you at least 30 days before they take effect by e-mail or an in-product notice. We will not apply a materially new use to personal information collected before the change without first obtaining any consent the law requires. If you do not agree with a change, you may delete your account and data at any time at sider.ai/my.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:

Vidline Inc.
335 Huntington Ave #35, Boston, MA 02115-4406, USA
E-mail: [email protected]

Last updated: October 19, 2026. Previous versions are available on request.