SideQuest
Home Archetypes Camp Gallery Take Quiz

Privacy Policy

Last updated: October 1, 2026

SideQuest AI ("we," "us," or "our") operates the website sidequestai.quest and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, take our quiz, purchase Quests, or use SideQuest Camp.

1. Information We Collect

Information you provide directly:

  • Email address — when you take the quiz, subscribe to our newsletter, or purchase a Quest
  • Name — when you create an account or enter SideQuest Camp
  • Quiz responses — your answers to the archetype quiz (used to determine your result)
  • Payment information — processed securely by Stripe; we never store your card details
  • Community posts — content you share in SideQuest Camp

Information collected automatically:

  • Necessary service logs — short-lived hosting and security records such as request time, route, IP address, browser type, response status, and abuse signals
  • Browser storage — sessionStorage holds the signed Camp or Content Studio session for the current tab; localStorage remembers limited Camp preferences on your device

SideQuest AI does not use advertising pixels, behavioral trackers, or third-party analytics in Content Studio.

2. How We Use Your Information

  • Deliver your archetype quiz results and personalized recommendations
  • Process purchases and deliver Quest PDFs via email
  • With explicit consent, use Mailchimp for audience, tag, and segment state; n8n to orchestrate milestone timing and suppression checks; and Resend to deliver lifecycle email
  • Provide access to SideQuest Camp community features
  • Improve our website, products, and user experience
  • Send relevant updates about new Quests, features, or offers (you can unsubscribe anytime)

3. Third-Party Services

We use the following third-party services that may process your data:

  • Stripe — payment processing (Stripe Privacy Policy)
  • Mailchimp — consented audience, tag, subscription, and segment state (Mailchimp Privacy Policy)
  • n8n — lifecycle timing, suppression checks, and delivery orchestration; workflow execution storage is disabled for this flow (n8n Privacy Policy)
  • Resend — lifecycle email delivery and delivery metadata (Resend Privacy Policy)
  • Netlify Blobs — tenant-scoped storage for Camp posts, replies, reactions, authentication state, and Content Studio connection and progress records (Netlify Privacy Policy)
  • Netlify — website hosting (Netlify Privacy Policy)
  • DigitalOcean — file storage for Quest PDFs (DigitalOcean Privacy Policy)
  • TikTok — social media content publishing (TikTok Privacy Policy)
  • Anthropic or OpenAI — the configured provider generates customer-requested campaign and creative drafts (Anthropic Privacy Policy; OpenAI Privacy Policy)

3a. TikTok Integration

SideQuest AI Content Studio uses the TikTok Content Posting API to let signed-in customers publish their own original videos to their own TikTok accounts after reviewing each post.

When you connect your TikTok account:

  • You authorize SideQuest AI through TikTok's official OAuth 2.0 flow — we never see or store your TikTok password
  • We receive your public profile information (username, display name, avatar) to display within the app
  • We receive access and refresh tokens so the connection can remain available until you disconnect it
  • We request only video.publish, which covers the fresh creator posting options, direct post initialization, and status checks used by this workflow

Data handling:

  • TikTok tokens are encrypted and stored server-side; they are never returned to your browser
  • Video files selected from your device are uploaded directly from your browser to TikTok after you press Post this video to TikTok; SideQuest does not retain the video file
  • We retain the connected creator identity and minimal publish records (publish ID, status, account handle, selected privacy, disclosures, and timestamps) so you can see the result and obtain support
  • Content Studio provides controls to disconnect and revoke TikTok access, or revoke access and delete the customer's stored connection, encrypted tokens, profile, publish records, progress milestones, rate counters, free-tier quota claims, marketing consent, pending lifecycle milestones, campaign identifier, and pending connection state
  • You can also revoke SideQuest AI through TikTok's Connected Apps settings

Campaign and creative drafts: Product, audience, offer, goal, proof, and creative-brief text is sent to the configured AI provider only when you ask Content Studio to generate a plan or draft. SideQuest does not persist that prompt text or generated output. The configured provider processes it under its retention terms; Anthropic states that standard API inputs and outputs are normally deleted from its backend within 30 days, subject to policy or legal exceptions, and are not used for model training by default unless the customer opts in. Do not enter passwords, personal data, or confidential supplier or customer information. General milestone timestamps and a pseudonymous campaign identifier may be retained without prompt or output text.

Consented lifecycle email: After you actively opt in, SideQuest sends the minimum event context needed for the message: contact and campaign identifiers, email, first name, lane, product name, milestone, timestamps, paid-status flag, and opaque delivery and unsubscribe tokens. Tokens contain no email, email hash, or stable account identifier. Delayed jobs retain only the delivery token, event, template, and due time for up to eight days; they resolve contact details only after rechecking authoritative consent immediately before delivery. The unsubscribe mapping expires after 180 days and is made available immediately before a delayed send. Using the unsubscribe link immediately stores suppression before notifying the email workflow. The lifecycle workflow does not store execution payloads; keyed pseudonymous idempotency claims and aggregate delivery receipts may be retained to prevent duplicates and diagnose delivery.

If an email-provider suppression update is temporarily unavailable, SideQuest retains the email hash and a pending-suppression flag only until the downstream removal is confirmed. The local suppression takes effect immediately and blocks delayed sends.

External media and fonts: SideQuest serves its site typefaces and optional videos from its own host. Video playback begins only when you click Play.

Your use of TikTok through SideQuest AI is also subject to TikTok's Privacy Policy and TikTok's Terms of Service.

4. Data Retention

We retain personal information while your account is active or as needed to provide the service and meet legal obligations. TikTok connection data is retained while connected; minimal publish records and milestone timestamps remain until you use the Content Studio data-deletion control or submit a deletion request. Necessary hosting and security logs follow provider retention settings. You may request deletion at any time by emailing us or by using Content Studio support.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • HTTPS encryption on all pages
  • Secure payment processing through Stripe (PCI DSS compliant)
  • API keys and credentials stored server-side, never exposed to browsers
  • Regular security reviews of our infrastructure

6. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correct — update or correct inaccurate information
  • Delete — request deletion of your personal data
  • Unsubscribe — opt out of marketing emails at any time via the unsubscribe link in any email
  • Data portability — receive your data in a structured, commonly used format

7. Browser Storage

SideQuest uses browser storage for:

  • sessionStorage — Camp and Content Studio authentication for the current tab, the first-run tour state, and a customer-reviewed Camp handoff
  • localStorage — limited Camp preferences such as owned-tool display and whether the welcome prompt was shown

You can clear this storage through your browser controls. Clearing it signs you out of the current tab and resets local preferences.

8. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes constitutes acceptance.

10. Contact Us

For privacy-related questions, data requests, or concerns:

  • Email: Theo@sidequestai.quest
  • Website: sidequestai.quest
SideQuest

© 2026 SideQuest AI. All rights reserved.

Privacy Terms