Privacy & Cookie Policy
Effective date: October 13, 2026
Who we are and what this policy covers
This policy explains what personal information Sidekar, Inc. ("Sidekar", "we", "us") collects through our website at www.sidekar.co, and through demo requests and emails you send us, and what we do with it.
Sidekar builds FirmOS, an AI context layer for family offices and registered investment advisers. This policy does not cover information our customers process inside FirmOS. That information is governed by the Master Services Agreement and related contracts we sign with each customer, under which we process it only on the customer's instructions. If you are a client or employee of one of our customers, contact that firm about how it handles your information.
Sidekar, Inc. is responsible for the personal information described here. You can reach us at info@sidekar.co.
Information we collect
We collect only what we need to run the website and respond to people who contact us.
- Demo requests. When you request a demo, we collect your first and last name, work email, firm name, firm type, and, if you choose to give them, your phone number and how you heard about us.
- Emails and meetings. If you email us or meet with us, we keep that correspondence and any notes, including your email address, so we have a record if you reach out again.
- Website analytics, only if you accept cookies. If you click Accept on our cookie banner, Google Analytics records how you use the site: pages viewed, time on page, the site that referred you, approximate location derived from your IP address, browser, device type, and whether you submitted the demo form. If you click Decline, Google Analytics does not load.
- Technical logs. Like any website, our hosting provider automatically records basic request data, such as IP address, browser type, the page requested, and the time of the request, to deliver the site and keep it secure.
We do not ask for, and ask you not to send us, sensitive information such as account numbers or client financial data through the website or by email.
How we use information
| What we use it for | Information used | Legal basis (for visitors in the EU/UK) |
|---|---|---|
| Respond to demo requests and follow up about Sidekar | Demo request details, emails | Steps you asked us to take before a contract; our legitimate interest in replying to business inquiries |
| Understand how the website is used and improve it | Analytics data | Your consent, given through the cookie banner |
| Keep the website running and secure | Technical logs | Our legitimate interest in operating a secure website |
| Meet legal obligations and enforce our rights | Any of the above, as needed | Legal obligation; legitimate interest |
We do not use information from this website to train AI models. We do not make decisions about you based solely on automated processing.
Who we share it with
We do not sell your personal information. We do not share it for cross-context behavioral advertising.
We share information only with service providers that help us run the website and our business, and only for those purposes:
| Provider | What they do for us | Information involved |
|---|---|---|
| Vercel | Hosts the website | Technical logs |
| Formspree | Receives demo request submissions and forwards them to us | Demo request details |
| Google Analytics | Website analytics, only after you accept cookies | Analytics data |
| Microsoft 365 | Email and calendar | Emails and meeting details |
We may also disclose information when the law requires it, such as in response to a valid subpoena or court order, or to protect the rights and safety of Sidekar or others. If Sidekar is involved in a merger or acquisition, information may transfer as part of that deal, and we will tell you before it becomes subject to a different privacy policy.
How long we keep it
| Information | How long |
|---|---|
| Demo requests and emails | Up to 3 years after our last contact with you, unless you become a customer or ask us to delete it sooner |
| Analytics data | 2 months |
| Technical logs | For a limited period set by our hosting provider |
We may keep information longer when the law requires it or to resolve disputes.
Security
The website is served only over encrypted HTTPS connections, and we limit access to demo requests and correspondence to the Sidekar team members who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Where information is processed
Sidekar is a U.S. company, and the services we use for the website process information primarily in the United States. If you contact us from outside the U.S., your information will be transferred to and processed in the U.S.
Children
This website is for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 16.
Your rights and choices
We give everyone the same privacy rights, wherever they live. You can ask us to:
- Know and access the personal information we hold about you and how we use it.
- Correct information that is wrong.
- Delete your information, subject to limits in the law.
- Receive a copy of your information in a portable format.
- Object to or restrict how we use it.
- Withdraw consent to analytics cookies at any time (see the Cookie Policy below).
To make a request, email info@sidekar.co. We may need to confirm your identity, usually by checking your name and email address, before we act. If someone makes a request on your behalf, we will need your signed permission. We will not treat you differently for exercising these rights.
If we deny your request, you may appeal by replying to our decision. If you are in the EU or UK, you can also complain to your local data protection authority.
Changes to this policy
We may update this policy when our practices change or the law requires it. We will change the effective date at the top, and for significant changes we will take reasonable steps to let you know.
Contact
Questions about this policy or your information: info@sidekar.co.
Cookie Policy
Effective date: August 1, 2026
Our website uses one storage item to remember your cookie choice, and Google Analytics cookies only if you click Accept.
What cookies are
Cookies are small text files a website stores in your browser. Similar technologies, such as browser local storage, work the same way. Some are needed for a site to work; others, like analytics cookies, need your consent first.
What we use
| Name | Set by | Purpose | How long | Needs your consent |
|---|---|---|---|---|
cookie_consent (local storage) | Sidekar | Remembers whether you clicked Accept or Decline, so we don't ask again | Until you clear your browser data | No, strictly necessary |
_ga | Google Analytics | Tells visits from different browsers apart | 2 years | Yes |
_ga_WVCJ0NBK1Y | Google Analytics | Keeps track of the current visit | 2 years | Yes |
Cookie lifetimes are Google's defaults (Google Analytics cookie usage). Learn how Google uses information from sites that use its services.
Your choices
- Banner. When you first visit, Google Analytics stays off until you choose. Decline keeps it off.
- Changing your mind. Use the Cookie settings link in the footer, or clear sidekar.co data in your browser settings, and the banner will appear again.
- Other tools. You can block cookies in your browser settings or install the Google Analytics opt-out add-on.
Questions: info@sidekar.co.
Portions of this policy are adapted from the Basecamp open-source policies, available under CC BY 4.0.