Privacy Policy

1. Introduction

Sidequestboard ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our job board platform located at sidequestboard.app (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address and name
• Password hash when you use email authentication (we do not store your plain-text password)
• Authentication identifiers supplied by Google or Apple when you choose those sign-in methods
• Professional profile information, including bio, profession, specializations, and portfolio URL
• Job preferences, saved jobs, notes, application status, and alert settings
• Messages you send to support and feedback you submit

2.2 Usage Information

We automatically collect certain information about your device and how you interact with our Service:

• IP address and approximate location derived from it
• Browser, device, operating-system, and app information
• Pages and features used, interaction events, and timestamps
• Jobs viewed, saved, shared, and marked as applied
• Crash reports, performance data, and diagnostic information

2.3 Purchases and Subscriptions

When you purchase Pro on iOS, Apple processes the payment and RevenueCat helps us manage subscription status. We receive subscription and transaction identifiers, product purchased, purchase and expiration dates, subscription status, and related billing-event information. We do not receive or store your full payment-card number or Apple ID payment credentials. Web purchases are processed by Dodo Payments.

2.4 AI Reply Information

When you request an AI reply, the relevant public job content and the professional profile information needed to personalize the draft may be sent through our AI processing service and its model providers. Do not include sensitive personal information in your profile or AI requests. Generated replies may be temporarily cached to operate the feature and enforce usage limits.

2.5 Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to maintain your session, remember preferences, measure product usage, prevent abuse, and diagnose errors. Where supported, our analytics respects your device's Do Not Track preference. Disabling these technologies may limit functionality.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Personalize your experience (job recommendations, matching scores)
• Send you account, security, billing, and service-related notifications
• Process web payments and manage Apple App Store and web subscriptions
• Authenticate accounts through email, Google, or Sign in with Apple
• Generate AI-assisted reply drafts at your request
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve our Service
• Detect, prevent, and address technical issues and security threats
• Enforce our Terms of Service

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

We use third-party services to operate our business:

• Apple: Sign in with Apple, App Store payment processing, subscription management, and fraud prevention
• RevenueCat: App Store subscription status, transaction processing support, and purchase restoration
• Google: Authentication when you choose Sign in with Google
• Dodo Payments: Payment processing for purchases made on the website
• AI processing providers: Processing the profile and job information needed to generate a reply you request
• PostHog: Product analytics and feature-usage measurement; session recording is disabled
• Sentry: Error, performance, crash, and diagnostic monitoring; diagnostic replays mask text and block media
• Resend: Delivery of account, billing, and service emails
• Turso (LibSQL): Database hosting and storage
• Vercel: Application hosting and infrastructure

These providers have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for other purposes.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption in transit (TLS/SSL) and at rest
• Password hashing using bcrypt
• Secure session management with HTTP-only cookies
• Regular security audits and monitoring
• Limited access to production data (authorized personnel only)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Data Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request transfer of your data to another service
• Objection: Object to certain types of processing (e.g., marketing emails)

To exercise these rights, contact us at hello@sidequestboard.app. We will respond within 30 days.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations (e.g., tax laws)
• Resolve disputes and enforce our agreements

You can permanently delete your Sidequestboard account and known account-linked data from Profile → Delete account. Deleting a Sidequestboard account does not cancel an active subscription; cancel it in your App Store or payment-provider settings to prevent renewal. We may retain limited information when required by law, to resolve disputes, prevent fraud, or maintain necessary transaction and security records. Service providers may retain data according to their own legal and backup-retention obligations.

8. Children’s Privacy

Our Service is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to remove such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than the one in which you reside. Our servers are located in the United States and other jurisdictions where our service providers operate. By using our Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (e.g., email notification or prominent banner). We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: