Sidechat
Version 2.7 | Effective Date: November 5, 2026
CRITICAL REDUCED NOTICE PRIVACY DISCLOSURE & UNILATERAL MODIFICATION NOTICE: NOTICE OF ANY MODIFICATION TO THIS PRIVACY POLICY IS STRICTLY LIMITED TO POSTING THE REVISED POLICY AND UPDATING THE EFFECTIVE DATE AT THE TOP OF THIS DOCUMENT. NO ADVANCE OR 30-DAY NOTICE PERIOD IS REQUIRED. CONTINUED USE OF OUR SERVICES FOLLOWING AN UPDATED EFFECTIVE DATE CONSTITUTES ACKNOWLEDGMENT OF THE REVISED PRACTICES. This Master Privacy Policy applies to Spaceport Technologies, Inc. (doing business as Sidechat, Canopy, Dispatch, and associated marks) ('Spaceport,' 'Provider,' 'we,' 'us,' or 'our') and governs the collection, use, processing, disclosure, and protection of personal data across all websites (including side.chat and canopy.side.host), software applications, cloud developer infrastructure, agentic AI pipelines, telephony networks, collaboration channels, browser extensions, and related services. Spaceport complies with applicable data protection legislation, including Massachusetts 201 CMR 17.00 & M.G.L. c. 93H, California CCPA/CPRA, Cal. Civ. Code § 1798.83 ('Shine the Light'), comprehensive US state privacy laws, GDPR / UK GDPR, Canadian PIPEDA & Quebec Law 25, Brazil LGPD (Lei 13.709/2018), Illinois BIPA, ICANN Consensus Policies, Google Chrome Web Store User Data Policies, and IRS Form 1099-K reporting rules. This policy strictly reflects live technical implementations, including Zero-Knowledge merchant credential architectures and Human-in-the-Loop dispute workflows. By accessing our services, you acknowledge the data practices described herein.
Spaceport Technologies, Inc. (doing business as Sidechat, Canopy, Dispatch, and associated marks), a Delaware corporation having its principal office at 1 Broadway, FL 14, Cambridge, MA 02142, USA, operates cloud-based software-as-a-service (SaaS) applications, autonomous artificial intelligence agents, remote browser viewport technologies, telephony bridging and messaging networks, developer cloud hosting, relational database services, browser extensions, and multi-vendor application marketplaces (collectively, the 'Services').
This Master Privacy Policy ('Privacy Policy') explains how Spaceport collects, receives, processes, stores, transfers, and discloses information relating to identified or identifiable natural persons ('Personal Information' or 'Personal Data') through your interactions with our Services, our corporate websites (including side.chat and canopy.side.host), developer APIs, companion browser extensions, documentation portals, and customer communications.
This Privacy Policy applies universally to all visitors, registered account holders, enterprise administrators, authorized users, developers, and platform participants. If you enter into a separate product-specific agreement or service schedule with Spaceport (such as the Dispatch In-App Operating Agreement or Data Processing Addendum), that schedule shall supplement this Privacy Policy, and in the event of any direct conflict regarding specific data handling practices of that product, the product schedule shall govern.
Controller vs. Processor Role Distinction & Enterprise Request Routing: This Privacy Policy describes Spaceport's data practices when acting as a Data Controller (or 'Business') of Personal Information (such as account registration, billing, marketing, and platform telemetry). To the extent Spaceport processes Customer Data, workspace files, connected third-party records, or end-user content on behalf of an enterprise Customer organization, that Customer organization is the Data Controller (or 'Business') and Spaceport acts strictly as a Data Processor (or 'Service Provider') operating under the instructions of that organization and the applicable Data Processing Addendum. If you are an employee, contractor, or end-user accessing the Services through an organization's workspace, please direct any requests to access, export, restrict, or delete workspace content directly to your Organization Administrator.
Depending on how you interact with our Services, Spaceport collects and processes several categories of Personal Information, which may be provided directly by you, generated automatically through your usage, or obtained from authorized third-party platforms:
A. Account, Profile & Enterprise Identity Data: Full name, business email address, postal address, company name, telephone number, job title, account credentials (usernames, cryptographic password hashes, and multi-factor authentication metadata), enterprise SSO federation identifiers (WorkOS directory metadata and Auth0 subject identifiers), and billing contact details.
B. Mobile Device Push Registration Tokens & OS Hardware Permissions: Device hardware tokens (`pushToken`) registered via Apple Push Notification service (APNs) to deliver real-time, out-of-band operational notifications and system alerts to authorized mobile devices. APNs tokens are linked to your user profile and are purged immediately upon device unregistration or account logout.
C. Mobile Camera & Photo Gallery Access: Where you elect to use our mobile application or mobile-responsive dashboard to photograph physical kitchen prep tickets, delivery slips, or bag-sealing packaging as dispute evidence, Spaceport requests explicit OS permission to access your Device Camera and Photo Library. Photographic media is uploaded solely for the dispute resolution workflows you direct, and you maintain the absolute right to enable or disable camera and photo gallery permissions at any time through your iOS or Android system settings.
D. Customer Uploaded Content, Files & Bulk Spreadsheets: Text files, CSV/XLSX spreadsheets imported into relational tables (`tables_import`) or parsed client-side in the browser (such as DoorDash financial reports uploaded via `upload.tsx`), PDF invoices and documents parsed via text extraction engines (`pdf_readText`), dispute records, order receipts, menu catalogues, customer support correspondence, and unstructured business records uploaded into our cloud repositories, databases, or agent execution contexts.
E. Agentic AI Prompts, Instructions & Operational Workflows: Natural language queries, task parameters, system prompts, automated tool configurations, cron schedules, workflow triggers, and contextual instructions supplied to our AI agents, copilots, and autonomous pipelines.
F. Headless Browser, Remote Viewports & Zero-Knowledge Credential Handles: Encrypted session contexts, connection handles (`accountRef`), page metadata, navigational clickstreams, and ephemeral Document Object Model (DOM) snapshots captured during automated portal audits or interactive remote viewport sessions (Canopy Live View) executed across isolated cloud browser virtualization infrastructure (Browserbase). Spaceport operates a Zero-Knowledge Architecture regarding third-party portal passwords: users authenticate directly on third-party domains within the remote viewport, and Spaceport servers never capture, read, or store cleartext portal passwords or multi-factor authentication (OTP) codes. Video and canvas streams are processed transiently in real time and are not permanently recorded as raw video archives.
G. Telephony, Voice, Email & Omnichannel Messaging: Voice call audio recordings, automated speech-to-text transcripts, caller and recipient telephone numbers, call duration, timestamp metadata, SMS/MMS message content, transactional emails routed via Mailgun, WhatsApp Business template payloads and paired phone identifiers (`wa_id`), and Slack workspace event webhooks and channel message logs generated through our integrated communication partners (Twilio, Mailgun / Sinch, Meta, Slack).
H. Financial, Billing & Commercial Marketplace Information: Billing addresses, transaction identifiers, payment histories, and subscription records. All payment card numbers, CVVs, and bank account credentials are tokenized directly and processed by our third-party PCI-DSS Level 1 compliant payment processor (Stripe, Inc. and Stripe Connect); Spaceport never stores raw credit card details on its servers. For developer marketplace sellers, we collect tax identification numbers (SSN/EIN), legal entity names, and payout records via Stripe Connect for statutory IRS Form 1099-K reporting compliance.
I. Stored Credential Vaults & OAuth Brokerage Data: Encrypted user API keys, third-party authentication tokens, and service credentials securely deposited into designated credential slots (`slot_<id>`) or connected via integration brokers (Composio). Secrets are stored in isolated encrypted keyrings and are injected server-side without exposure to foundation models.
J. ICANN Domain Registration Data: Registrant full name, organization, physical mailing address, telephone number, and administrative email address collected during custom domain name registrations (`domains_purchase`) for mandatory transmission to ICANN-accredited registrars and registry operators.
K. Persistent Memory & State Storage Data: Structured entities, preferences, user profile summaries, long-term memory topics, and historical cross-session context stored in sovereign agent memory stores (Honcho) and user-declared relational tables ('tables_create').
L. Technical Device, Telemetry & Server Log Data: Internet Protocol (IP) addresses (including server-derived edge IP headers such as Cloudflare 'cf-connecting-ip'), browser type and version, operating system, referring URLs, device fingerprints, unique device identifiers, network carrier, access timestamps, API request volumes, error logs, and performance diagnostics.
Spaceport Technologies firmly adheres to an institutional data sovereignty standard regarding artificial intelligence model training:
A. No Base Model Training: Spaceport does NOT use, disclose, sell, or license any Customer Data, uploaded business documents, dispute filings, customer proprietary records, or agent conversational inputs/outputs to train, retrain, fine-tune, or validate any public foundation models (such as those operated by OpenAI, Anthropic, Google, or Meta) or commercial base large language models.
B. Zero-Retention Inference: All LLM inference conducted through our enterprise cloud routing layer (LiteLLM proxy and sovereign API endpoints) operates under zero-data-retention or transient processing agreements where foundation model providers are contractually prohibited from logging or using customer payloads for model training.
C. Sovereign Memory Segregation: Long-term memory records and vector embeddings generated within your organization are cryptographically segregated within your organization's sovereign tenant context and are never exposed across tenant boundaries.
Spaceport processes Personal Information under the following lawful legal bases and operational purposes:
A. Performance of Contract (Art. 6(1)(b) GDPR): Providing, configuring, maintaining, and delivering our SaaS applications, autonomous agents, and developer platforms; processing subscriptions; executing dispute recovery workflows; registering requested ICANN domains; routing push notifications and messaging; and authenticating authorized users.
B. Legitimate Business Interests (Art. 6(1)(f) GDPR): Safeguarding our network infrastructure; detecting, preventing, and prosecuting fraud, unauthorized access, and prompt injection attacks; monitoring system uptime and performance diagnostics; improving product interfaces; and enforcing contractual terms.
C. Compliance with Statutory Legal Obligations (Art. 6(1)(c) GDPR): Maintaining statutory commercial accounting and tax records (including IRS Form 1099-K reporting); adhering to export administration regulations; honoring ICANN domain registrant verification policies; complying with subpoenas, court orders, and lawful law enforcement requests; and complying with telecommunications regulations (TCPA/CTIA).
D. Valid Consent (Art. 6(1)(a) GDPR): Where applicable by law, such as for the recording of telephone conversations, placing non-essential tracking cookies, accessing device camera/photo libraries, or dispatching direct marketing communications. You maintain the absolute right to revoke consent at any time.
E. De-Identified & Aggregated Telemetry Covenant (Cal. Civ. Code § 1798.140(m)): Spaceport may aggregate and/or de-identify technical usage metadata and diagnostic telemetry so that it can no longer reasonably be linked to any identified or identifiable individual or household. To the extent Spaceport processes de-identified data, Spaceport covenants that it maintains and uses such information solely in de-identified form and will not attempt to re-identify the data, except solely to test whether our de-identification processes comply with applicable law.
Certain Services (such as Dispatch) utilize headless automated browsers and remote viewport proxies (Canopy Live View) to log into third-party merchant portals, delivery marketplaces, and enterprise platforms on your behalf to audit deduction charges, discover error adjustments, and compile pre-filled dispute justifications:
A. Zero-Knowledge Credential Architecture: Customer signs into its merchant portal directly within an isolated, sandboxed remote browser viewport rendered on the official domain of the third-party platform. Spaceport servers and databases NEVER capture, log, intercept, read, or store Customer's plaintext master passwords, passkeys, or two-factor multi-factor authentication (OTP/SMS) codes. Authentication is maintained via cryptographically isolated session handles (`accountRef`).
B. Cloud Browser Virtualization (Browserbase): Headless automation and stealth audit sessions execute across dedicated cloud browser containers managed by Browserbase. Browserbase acts as a technical sub-processor operating under strict data protection and non-disclosure covenants.
C. Multi-Factor Authentication (OTP) Self-Authentication: Multi-factor authentication challenges presented by third-party delivery platforms during interactive sign-in are entered directly by Customer's authorized personnel within the sandboxed viewport. Spaceport does not harvest, intercept, or store OTP codes.
D. Remote Viewport Streaming & Human-in-the-Loop Pre-Filled Links: Screen streaming is rendered through encrypted low-latency WebRTC canvas streams without persistent video archiving. Dispatch generates pre-filled deep links to delivery platform dispute forms for affirmative review and submission by Customer's authorized personnel; Dispatch does not autonomously submit dispute claims without human intervention.
Spaceport does not sell, rent, or trade your Personal Information. We disclose Personal Information solely to authorized service providers and sub-processors bound by strict confidentiality and data protection agreements:
A. Cloud Hosting & Database Infrastructure: Amazon Web Services, Inc. (AWS) and Google Cloud Platform (GCP) for encrypted cloud computing and US regional database hosting.
B. Edge Networking & Security: Cloudflare, Inc. for edge network acceleration, DDoS defense, SSL/TLS termination, Web Application Firewall (WAF), and Cloudflare D1 distributed storage.
C. Virtualized Browser Infrastructure: Browserbase, Inc. for isolated cloud browser containers and headless portal auditing.
D. Enterprise Artificial Intelligence Infrastructure: Anthropic, PBC and OpenAI, LLC for zero-data-retention model inference and reasoning APIs.
E. Telephony, Communications & Inbound Email: Twilio, Inc. (Voice calls, SMS/MMS messaging); Mailgun Technologies, Inc. / Sinch (transactional email routing); Meta Platforms, Inc. (WhatsApp Business API); and Slack Technologies / Salesforce (Slack bot event webhooks).
F. Identity, Directory & SSO Federation: Auth0, Inc. (Okta) and WorkOS, Inc. for enterprise user authentication, SCIM directory synchronization, and SAML/OIDC SSO federation.
G. Payment Processing & Marketplace Merchant Settlement: Stripe, Inc. and Stripe Connect for PCI-DSS compliant credit card processing, recurring subscription billing, and marketplace seller IRS Form 1099-K tax compliance.
H. Integration Brokerage: Composio, Inc. for brokering authenticated API integrations to third-party SaaS services.
I. ICANN Domain Registrars: Namecheap, Inc. and ICANN-accredited registrar partners for domain name registrations.
J. Corporate Restructuring & Legal Disclosures: In connection with any merger, financing, acquisition, or liquidation, customer data may be transferred subject to this Privacy Policy. We may disclose data where required by valid court order, subpoena, or statutory obligation.
K. Enterprise Domain Ownership & Managed Account Administration: If you register or access a platform account using an email address with a domain owned or controlled by your employer or organization (e.g., @company.com), and that organization verifies ownership of the domain to establish or administer an enterprise workspace, certain information about your account—including your name, profile picture, contact details, workspace content, and past usage of your account—may become accessible to that organization's administrators and other workspace users sharing the same domain.
A. Meta WhatsApp Business API: Where enabled, Spaceport processes your paired telephone number (`wa_id`), inbound text messages, outbound notification templates, and media attachments via the Meta Cloud API. Data is used strictly to deliver operational alerts and customer support.
B. Slack Events API & Bot Installations: When connecting a Slack workspace, Spaceport ingests channel identifiers, user IDs, event webhooks, and message text necessary to execute requested bot actions. Message processing is confined to channels where the Spaceport bot is explicitly invited.
A. Verbatim Google API Limited Use Affirmation: Spaceport's and Canopy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
B. How Canopy Brokers Gmail & Google Workspace Connections for Marketplace Apps: When you connect your Google Workspace or Gmail account to Canopy, Spaceport's Google OAuth client stores your encrypted OAuth credentials within Canopy's isolated credential vault (`oauth-connections`). Third-party applications published on the Canopy Marketplace (such as applications built by independent third-party developers) never receive your Google password or raw OAuth refresh tokens.
C. Affirmative User Consent Before Passing Scoped Results to Seller Apps: When a third-party Marketplace application requests access to Gmail or Google Workspace capabilities, Canopy presents an explicit capability consent screen that names the specific third-party Seller application and identifies the requested permission scope. Only after you affirmatively approve that consent prompt does Canopy execute the requested Google API query on your behalf and pass the scoped results (such as matching email messages, thread snippets, headers, or metadata) to that designated Seller application.
D. Strict Downstream Purpose, Advertising & AI Training Prohibitions: Both Spaceport and any authorized third-party Marketplace Seller receiving Google API data are strictly prohibited from: (i) selling, renting, or transferring Google user data to third parties for advertising, retargeting, personalized marketing, or creditworthiness evaluation; (ii) using Google user data to train, retrain, fine-tune, or improve generalized, public, or foundation artificial intelligence or machine learning models; or (iii) allowing humans to read raw Google user data unless you have given prior affirmative consent to inspect specific messages for support, or as strictly necessary for security abuse investigation or legal compliance.
E. Revocation & Deletion of Google OAuth Data: You may revoke any third-party application's capability grant or disconnect your Google OAuth connection at any time via your Canopy account settings or Google Security settings (https://myaccount.google.com/permissions). Each third-party Marketplace application also publishes its own dedicated Privacy Policy (`legal/privacy.md`, hosted at `https://canopy.side.chat/legal/apps/<appId>/privacy`) governing its app-specific retention and 30-day deletion procedures.
If you opt in to, and choose to receive SMS notifications from us, we collect your mobile phone number solely to deliver account, workflow, and support-related messages from your side.chat agent.
Mobile phone numbers and SMS opt-in/consent data are never sold, rented, or shared with any third parties or affiliates for any purpose, including marketing. Text-messaging originator opt-in data and consent will not be shared with third parties. Phone numbers collected for SMS messaging are used solely by us to facilitate SMS services.
You may opt out of SMS services at any time by replying STOP to any message, or from the SMS integration settings in your account.
Message frequency varies; we will send you some messages that will be directly related to your SMS service requests; however, the total number of messages you receive will be based on how you choose to use our SMS services.
SMS message and data rates may apply, so depending on your plan with your wireless or other applicable provider, you may be charged by your carrier or other applicable provider.
For customer assistance or support regarding SMS messaging, reply HELP to any message or contact support@side.chat.
When an authorized administrator invites a team member to join an organization (`canopyInviteTeammate`), Spaceport ingests the colleague's email address to deliver a transactional invitation. Invitation emails contain explicit identification of the inviting party and an immediate opt-out mechanism in full compliance with CAN-SPAM, Canada CASL, and GDPR Article 14.
Customer may import bulk datasets (CSV, XLSX) into relational tables or client-side upload interfaces (such as DoorDash reports uploaded via `upload.tsx`). Spreadsheet parsing executes within isolated sandbox environments. Processed tabular data is stored strictly within Customer's private organizational scope.
Under Section 6050W of the Internal Revenue Code, Spaceport and its payment partner Stripe Connect collect legal entity names, Social Security Numbers (SSN), or Employer Identification Numbers (EIN) from marketplace developers receiving commercial payouts. Tax documentation is retained for the statutory seven (7) year tax record retention schedule.
Where Customer installs an official companion Chrome Web Store extension, network traffic capture conforms strictly to Google Web Store policies: capture occurs solely during active, user-initiated sessions; data is parsed locally in `chrome.storage.local`; and extension data is never sold or used for ad targeting.
We use essential, functional, and analytical cookies. In compliance with European ePrivacy regulations and modern global standards, non-essential cookie consents expire automatically after twelve (12) months, prompting a fresh consent banner. Users may update cookie preferences at any time via the cookie settings banner or browser controls.
A. Active Subscription Retention: Personal Information is retained for the active duration of Customer's subscription.
B. 30-Day Active Data Purge: Following account termination and written request, Customer Data is permanently purged from active production databases within thirty (30) calendar days.
C. Disaster Recovery Backups: Data stored in encrypted, immutable disaster-recovery backups is overwritten on a routine rotation cycle not exceeding one hundred eighty (180) days.
D. Legal Audit Log Retention: Assent records and cryptographic audit hashes (`legal_agreements_audit_log`) are retained indefinitely for legal non-repudiation.
E. Shared Team Workspace Content & Managed Accounts: If your individual user seat within an active organization workspace is deactivated or removed, content, messages, files, agent configurations, and operational records that you contributed to shared team workspaces will remain accessible to the organization and your team members so that the organization's collaborative records and business operations are not disrupted. Where the Services are made available to you through an organization, we retain organizational workspace data for as long as directed by the administrator of that organization.
Spaceport maintains an institutional Written Information Security Program (WISP) in strict compliance with Massachusetts 201 CMR 17.00 & M.G.L. c. 93H. Safeguards include TLS 1.3 transit encryption, AES-256 GCM rest encryption, hardware MFA tokens, zero-knowledge portal sessions, and isolated multi-tenant databases.
Where synthetic speech or video processing is utilized, Spaceport does not generate or retain biometric identifiers. To the extent voice prints or facial templates could be derived, Spaceport adheres to Illinois BIPA (740 ILCS 14/) and Texas CUBI (§ 503.001), obtaining explicit written consent and destroying biometric source data within thirty (30) days.
When registering domain names via our Services, registrant contact information is transmitted to ICANN-accredited registrars and registry operators. WHOIS privacy masking is enabled by default where supported by the top-level domain registry.
Customer data is stored persistently within data centers in the United States. International data transfers from the EEA, UK, Switzerland, Canada, or Brazil are governed by the European Commission's Standard Contractual Clauses (SCCs Module 2: Controller-to-Processor).
A. Statutory CCPA/CPRA Rights: Under the California Consumer Privacy Act as amended by the CPRA, California residents enjoy the right to know and access specific pieces and categories of personal information collected in the preceding twelve (12) months, the right to request deletion, the right to correct inaccurate personal information, the right to opt out of 'sales' or 'sharing' for cross-context behavioral advertising, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising privacy rights. Spaceport does not 'sell' or 'share' personal information (including of minors under 16 years of age), nor do we use sensitive personal information for purposes other than those permitted by Cal. Civ. Code § 1798.121. Under California Civil Code § 1798.83 ('Shine the Light'), we do not disclose personal data to third parties for their direct marketing purposes.
B. Universal Opt-Out Signals & Global Privacy Control (GPC): Where required by applicable law, Spaceport recognizes and honors universal browser-based opt-out preference signals, including the Global Privacy Control ('GPC') signal, as a valid request to opt out of any applicable sale, sharing, or targeted advertising for that browser or device.
C. Authorized Agent Verification Procedure: You may designate an Authorized Agent to submit a privacy rights request on your behalf by providing the agent with signed written permission to act for you. To protect your account against unauthorized access or deletion, we require the Authorized Agent to submit a copy of your signed written authorization and we may require you to independently verify your identity directly with us or confirm directly that you granted the agent permission to submit the request.
A. Multi-State Statutory Rights: Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), and other United States jurisdictions with comprehensive state privacy laws enjoy statutory rights to confirm whether we process their personal data, access and obtain a portable copy of their personal data, correct inaccuracies, delete personal data, and opt out of targeted advertising, sales of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
B. Right to Appeal a Denied Privacy Request: If Spaceport declines to take action regarding your privacy rights request, we will inform you of the justification for declining to take action. You have the statutory right to appeal our decision within a reasonable period after receiving our response by emailing privacy@side.chat with the subject line 'Privacy Rights Appeal'. Within forty-five (45) days (or the shorter period required by your state's law) of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may contact your state Attorney General to submit a complaint.
In compliance with PIPEDA and Quebec Law 25, Spaceport provides Canadian residents with rights to access and correct personal data, clear consent mechanisms, and appointed Privacy Officer oversight.
Pursuant to Brazilian Lei 13.709/2018 (LGPD), data subjects in Brazil may exercise rights of confirmation, access, correction, anonymization, portability, and revocation of consent by contacting our Privacy Office.
Under GDPR and UK GDPR, data subjects possess rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Requests may be submitted to our Data Protection Officer.
Our Services are strictly business-to-business enterprise platforms not directed to individuals under eighteen (18) years of age. We do not knowingly collect personal information from children.
Where an authorized user generates an unauthenticated public sharing link (`share_file` / `share_folder`), access is granted to anyone holding the cryptographic URL. Public links expire automatically within 7 to 90 days.
Spaceport reserves the right to update, modify, amend, or alter this Privacy Policy at any time in its sole discretion without prior advance notice. Notice of any update is strictly limited to posting the revised Privacy Policy on our websites (https://side.chat/privacy) and updating the 'Effective Date' at the top of this policy. Users expressly waive any entitlement to separate email notifications or 30-day advance notice periods for policy revisions. Your continued access to or use of the Services following the posting of an updated Effective Date constitutes your immediate and binding acknowledgment of the updated privacy practices. If you disagree with any changes to this Privacy Policy, you must immediately stop using the Services, deactivate your account(s), and/or submit a request to delete your Personal Information.
For inquiries, DSAR submissions, or data protection questions, please contact our Privacy Office:Spaceport Technologies, Inc. (d/b/a Sidechat, Canopy, Dispatch)Attn: Data Protection Officer / Legal Privacy Office1 Broadway, FL 14, Cambridge, MA 02142, USASupport Email: support@side.chat | Billing Email: billing@side.chat | Privacy Inquiries: privacy@side.chatOfficial Web Footers: https://side.chat/privacy | https://side.chat/terms
Protected by Canopy