Privacy Policy

1. Introduction

Sidequest Board ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our job board platform located at sidequestboard.app (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address
• Name
• Password (encrypted using industry-standard hashing)
• Professional profile information (bio, profession, portfolio URL)
• Job preferences and alert settings

2.2 Usage Information

We automatically collect certain information about your device and how you interact with our Service:

• IP address
• Browser type and version
• Pages visited and time spent
• Jobs viewed, saved, and applied to
• Device information (screen size, OS)

2.3 Cookies and Similar Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how our Service is used. You can control cookies through your browser settings, but disabling them may limit functionality.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Personalize your experience (job recommendations, matching scores)
• Send you account, security, billing, and service-related notifications
• Process payments and manage subscriptions (via Dodo Payments)
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve our Service
• Detect, prevent, and address technical issues and security threats
• Enforce our Terms of Service

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

We use third-party services to operate our business:

• Dodo Payments: Payment processing (billing information is processed by Dodo Payments)
• Resend: Email delivery for notifications and alerts
• Turso (LibSQL): Database hosting and storage
• Vercel: Hosting and infrastructure

These providers have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for other purposes.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption in transit (TLS/SSL) and at rest
• Password hashing using bcrypt
• Secure session management with HTTP-only cookies
• Regular security audits and monitoring
• Limited access to production data (authorized personnel only)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Data Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request transfer of your data to another service
• Objection: Object to certain types of processing (e.g., marketing emails)

To exercise these rights, contact us at hello@sidequestboard.app. We will respond within 30 days.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations (e.g., tax laws)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law. Job application data may be retained in anonymized form for analytics purposes.

8. Children’s Privacy

Our Service is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to remove such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than the one in which you reside. Our servers are located in the United States and other jurisdictions where our service providers operate. By using our Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (e.g., email notification or prominent banner). We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: