Privacy Policy

This Privacy Policy explains how Sidekick Log processes information when you use the Chrome extension, website, and related services.

Gmail access

Sidekick Log requests one Google OAuth scope: https://www.googleapis.com/auth/gmail.readonly. It can read Gmail data needed to detect conversation state, but it cannot send, delete, label, archive, or otherwise modify messages.

The extension may read:

• Sender and recipient addresses
• Subject lines
• Message text and Gmail snippets
• Timestamps, thread identifiers, reply counts, and labels

Sidekick Log does not intentionally access or store attachments. Gmail remains the source of truth; Sidekick Log does not create a cloud copy of your inbox.

Local processing and storage

Core signal detection and conversation-state logic run in the browser. The extension stores derived records in chrome.storage.local, such as signal classifications, conversation state, lightweight thread metadata, preferences, feedback, and local caches needed for change detection.

Full thread payloads may be read locally while a scan is running, but Sidekick Log does not persist a full cloud copy of your mailbox.

AI enrichment

AI enrichment is on by default and can be switched off in settings. While it is on, Sidekick Log sends limited context such as sender, subject, and snippet through sidekicklog.com to Groq, with Anthropic's Claude API as a fallback. Anthropic does not use Claude API inputs for model training without permission and deletes them within 30 days by default.

Raw attachments are not sent for AI enrichment. Sidekick Log does not intentionally retain AI request bodies after processing, and Gmail data is not used to train or fine-tune Sidekick Log models.

Subscription verification

To verify paid access, the extension sends authenticated account information to sidekicklog.com. The service uses the verified Gmail address to check subscription status with Polar. Sidekick Log does not store your payment-card details.

Analytics and diagnostics

The extension uses PostHog EU for product telemetry and error diagnostics. It sends no analytics until you choose “Share usage”. If you do, it sends usage events, a SHA-256 hash of your Gmail address as the analytics identity, and your email’s domain (for example, company.com). Raw Gmail message content, names, and thread subjects are not sent as analytics event properties.

When you install the extension, it opens a welcome page on sidekicklog.com that records one anonymous install event with a random install ID. It contains no email address and sets no cookies.

If you arrive from sidekicklog.com, the extension may read a Sidekick Log website cookie to link that visit to your install, under the same analytics settings.

You can disable analytics in the extension settings.

The sidekicklog.com website also uses PostHog EU to measure visits and clicks. It runs without analytics cookies unless you accept them in the privacy banner. See the Cookie Policy for details, including the install attribution cookie.

Server-side operational data

Requests to Sidekick Log services may generate operational logs such as IP address, user agent, request origin, timestamp, account identifier, and request status. These logs are used for security, abuse prevention, billing verification, and service reliability. They are retained only as long as reasonably necessary for those purposes and according to our infrastructure-provider settings.

Third-party services

• Google Gmail API — read-only access to Gmail data you authorize
• Vercel — website and serverless infrastructure for the Sidekick Log proxy and subscription endpoints
• Polar — checkout and subscription management
• Groq and Anthropic (Claude API) — AI inference while AI enrichment is on (the default)
• PostHog EU — extension product analytics and error diagnostics

We do not sell Gmail data or use it for advertising or remarketing.

Data deletion and control

You can revoke Gmail access at any time from your Google Account. You can also clear Sidekick Log's locally stored data from the extension settings. Uninstalling the extension removes its local Chrome storage.

For deletion requests involving server-side account or subscription records, contact hi@screate.co.

Google API Limited Use

Sidekick Log's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Gmail data is used only to provide or improve user-facing features.
• Gmail data is not used for advertising or targeting.
• Gmail data is not used to train or fine-tune AI models.
• Gmail data is transferred only when necessary to provide enabled user-facing features, such as transient AI enrichment.
• Human access to Gmail data is not permitted except with explicit user consent, for security or legal reasons, or when data is aggregated and anonymized for internal operations.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information we hold about you. Contact hi@screate.co for privacy requests.

Changes

If this policy changes materially, we will update the date above and, when appropriate, provide notice through the extension or website.

Contact

Privacy questions: hi@screate.co