Privacy Policy

This Privacy Policy describes how Sidekick (the "Service"), accessible at trysidekick.com and web.trysidekick.com, collects, uses, discloses, and protects personal data.

Sidekick is operated by Ghaas Technologies Pvt. Ltd. References to "we", "us", or "our" in this Privacy Policy refer to Ghaas Technologies Pvt. Ltd., the entity responsible for operating the Service.

This Privacy Policy applies to personal data processed through our website and application (collectively, the "Service"). It does not apply to information collected offline or through third-party websites or services not controlled by us.

1. Data Controller and Contact Information

Ghaas Technologies Pvt. Ltd.
Address: A3-103, Plaza at 106, Sector 106, Gurugram, 122006, India
Email: contact@trysidekick.com

For the purposes of applicable data protection laws, Ghaas Technologies Pvt. Ltd. acts as the data controller for personal data relating to account management, billing, and customer relationship management for users of the Service.

Where the Service is used to process data on behalf of enterprise customers, we act as a data processor, and the relevant customer acts as the data controller.

2. Legal Basis for Processing

We process personal data in accordance with the GDPR and other applicable data protection laws on one or more of the following lawful bases:

• Contractual necessity, where processing is required to provide the Service;
• Legitimate interests, including operating, maintaining, improving, and securing the Service, provided such interests are not overridden by user rights;
• Consent, where required by law for specific processing activities; and
• Legal obligations, where processing is necessary to comply with applicable laws or regulatory requirements.

3. Categories of Personal Data We Process

3.1 Data You Provide

We may process personal data that you voluntarily provide when using the Service, including:

• account and contact information (such as name, email address, company details);
• communications and correspondence with us; and
• configuration or settings information provided through the Service.

3.2 Data Collected Automatically

When you access or use the Service, we may process certain information automatically, including:

• technical data relating to your device, browser, or connection;
• usage and interaction data relating to how the Service is accessed and used; and
• information collected through cookies or similar technologies.

We may maintain limited technical logs for operational, security, and troubleshooting purposes, including in connection with the development or testing of new features. Such logs are designed to minimise the storage of personal data and are not intended to persistently store the content of third-party messages or records beyond what is necessary to provide and support the Service.

3.3 Customer Data

Where you connect third-party business systems or upload data through the Service, we may process personal data relating to your end users or contacts ("Customer Data"). In such cases:

• you remain the data controller for Customer Data; and
• we act as a data processor, processing Customer Data solely to provide the Service.

The processing of Customer Data is governed by our Terms of Service and any applicable data processing terms.

3.4 Data We Do Not Intentionally Collect

The Service is not designed for the processing of special category personal data (such as health, biometric, or other sensitive information). Users are advised not to intentionally submit such data through the Service, and any such processing would occur solely at the direction and responsibility of the user.

The Service is designed to minimise data storage and is designed not to store or retain the content of third-party messages or records beyond what is necessary to provide the requested functionality, including any transient processing required to deliver the Service.

4. How We Use Personal Data

We process personal data for the following purposes:

• to provide, operate, and maintain the Service;
• to configure, support, and administer user accounts;
• to communicate with users and provide customer support;
• to monitor, secure, and improve the Service;
• to analyse usage patterns and develop new features or functionality;
• to comply with legal obligations and enforce our terms; and
• for other compatible purposes permitted under applicable law.

Certain features of the Service may involve the temporary processing of data from integrated third-party platforms in order to provide specific functionality. Such data is processed solely for that purpose and is not persistently retained beyond what is necessary to deliver the Service.

4.1 AI and Machine Learning

We do not use Customer Data or personal data submitted through the Service to train artificial intelligence or machine learning models.

5. Data Sharing and Sub-Processors

We do not sell, rent, or trade personal data. We may share personal data with third-party service providers who assist us in operating and supporting the Service ("Sub-Processors"), such as providers of:

• cloud infrastructure and hosting;
• analytics and monitoring services;
• communications and email services;
• customer support tools; and
• security and operational services.

All Sub-Processors are engaged under written agreements requiring them to process personal data only on our instructions and to implement appropriate data protection safeguards. We maintain an up-to-date list of Sub-Processors and will provide notice of material changes where required under applicable data protection laws.

We may also disclose personal data:

• where required by applicable law, regulation, or valid legal process;
• to protect our rights, users, or the public; or
• in connection with a merger, acquisition, restructuring, or sale of assets.

6. International Data Transfers

Personal data may be processed in countries outside the European Economic Area or the United Kingdom that may not provide an equivalent level of data protection. Where required, we rely on appropriate safeguards for such transfers, including:

• Standard Contractual Clauses approved by the European Commission; and
• where applicable, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

Further information about these safeguards may be provided upon request.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting, or reporting obligations. When personal data is no longer required, it is securely deleted or retained only in a limited operational form in accordance with our data retention and deletion practices.

8. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful access, loss, misuse, alteration, or disclosure. Access to personal data is restricted to authorised personnel on a need-to-know basis and subject to confidentiality obligations.

While no method of transmission or storage can be guaranteed to be completely secure, we are committed to maintaining reasonable and appropriate safeguards to protect personal data.

9. Your Data Protection Rights

Depending on your location and subject to applicable data protection laws (including the GDPR), you may have certain rights in relation to your personal data, including the right to:

• access your personal data and obtain information about how it is processed;
• rectify inaccurate or incomplete personal data;
• request erasure of your personal data, where permitted by law;
• restrict or object to the processing of your personal data in certain circumstances;
• request data portability in a structured, commonly used, and machine-readable format; and
• withdraw consent at any time, where processing is based on consent.

Requests may be submitted to contact@trysidekick.com. You may also have the right to lodge a complaint with a relevant data protection supervisory authority.

10. Cookies and Similar Technologies

We use cookies and similar technologies to operate and maintain the Service, ensure its security and functionality, analyse how the Service is used, and enhance user experience. Where required by law, users are provided with choices regarding the use of cookies. You may manage your cookie preferences through your browser settings, though disabling certain cookies may affect the availability of parts of the Service.

11. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will assess the breach without undue delay. Where required by applicable law, we will notify the relevant data protection supervisory authority and affected individuals. Where we act as a data processor, we will notify the relevant data controller without undue delay.

12. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect or process personal data relating to children. If we become aware that such data has been processed inadvertently, we will take appropriate steps to delete it.

13. Third-Party Links

The Service may contain links to third-party websites or services not operated by us. This Privacy Policy applies only to our processing of personal data. We encourage you to review the privacy policies of any third-party services before providing them with personal data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Where changes are material, we will provide notice through the Service or by other appropriate means. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Ghaas Technologies Pvt. Ltd.
Email: contact@trysidekick.com
Address: A3-103, Plaza at 106, Sector 106, Gurugram, 122006, India