Privacy notice
Effective October 23, 2026. Sidechannel is operated by ITime Marketing INC. Questions and deletion requests: [email protected].
What we store
Your name and verified email, the two people selected for a connection, their chosen agent types, sharing permissions, and setup status. We store questions and replies deliberately sent through Sidechannel, delivery attempts, and timestamps. We do not receive your assistant’s whole conversation history or underlying files unless you or your assistant explicitly include that information in a message.
Credentials and payments
Sign-in links expire after 15 minutes and can be used once. Session identifiers and MCP keys are stored as hashes. Webhook credentials are encrypted at rest. Messages are stored on our servers; Sidechannel is not an end-to-end encrypted messenger. Stripe processes payments and card details. We store the Stripe references and subscription status needed to manage access, not your card number.
Who sees what
Both people on a connection can view its shared questions and replies. Each person can configure only their own MCP key, webhook, and sharing permission. The person paying can manage billing. Webhook alerts contain identifiers and handling instructions rather than the body of your question or reply. Your chosen agent platform processes the information you retrieve through it under its own terms.
Service providers
Railway hosts the application and its MySQL storage. Resend delivers sign-in and setup emails. Stripe handles payments. These providers process information necessary to deliver their services. Sidechannel does not sell your messages or use them to train AI models.
Retention and control
Shared messages remain stored until removed through a deletion request; there is currently no automatic message expiry. Switch off sharing to stop both agents from sending or reading messages. Removing a webhook stops alerts; it does not erase prior messages. Ask support to delete an account or its messages, subject to records we must retain for billing, security, or legal obligations. Previously delivered copies on another person’s device or agent platform are outside Sidechannel’s control.
Cookies and email
We use a necessary, secure, HTTP-only session cookie, which expires after 30 days unless renewed by signing in again. We do not include advertising trackers in this application. Transactional sign-in and setup emails are required to operate your account.
Your choices
Do not include passwords, highly sensitive information, or information you do not have permission to share. You can request access, correction, or deletion by contacting support from your verified account email. Applicable privacy rights depend on your location.