Privacy Policy

Account. When you sign in with Google, we receive and store your email address, your name, and your profile image from your Google account. We do not receive your Google password. If you try aside without signing in, we create an anonymous account that holds no name, email, or other information about you.

Conversations. Everything you type, every answer the model produces, which model produced it, and the structure of your asides — including the text you selected to open one — is stored so that your conversations are there when you come back. If you sign in after trying aside anonymously, the conversations from your trial are moved onto your account rather than deleted.

Usage. For every model call we record when it happened, which model was used, how many tokens went in and out, and what it cost us. This is how usage limits are enforced.

Technical. We record the browser identifier (user agent) on your sign-in session. We derive a one-way, salted hash from your IP address and store only that hash, never the address itself; it is used to detect abuse and to apply usage limits to visitors who are not signed in. We set two cookies: one that keeps you signed in and one that remembers your language.

We do not run analytics or advertising trackers, we do not use third-party fonts or scripts that report to anyone, and we do not buy or sell information about you.

• To run aside: your conversation is sent to a language model so it can answer, and stored so you can return to it.
• To keep your conversations with your account, including across the moment you sign in.
• To apply fair-use limits, prevent abuse, and keep the service secure.
• To answer you when you write to us, and to tell you about changes to aside or to this policy.
• To bill you, if you choose a paid plan, and to keep the records that billing requires.

Where the law where you live requires a legal basis for processing, ours is the performance of our agreement with you for the first, second and fifth purposes, our legitimate interest in running a secure and fairly shared service for the third, and our legitimate interest in communicating with you for the fourth. We do not use your conversations to train models.

We use a small number of service providers, each of which processes your information only to provide its service to us:

• OpenAI (United States) generates the answers. The content of your conversation is sent to OpenAI's API. Under OpenAI's API data-usage policy, content sent through the API is not used to train OpenAI's models and may be retained by OpenAI for up to 30 days to monitor for abuse, after which it is deleted.
• Neon hosts our database, where your account, conversations, and usage records live.
• Cloudflare sits in front of aside and carries all traffic to it.
• Google provides sign-in. Google's own privacy policy governs what Google does with your Google account.
• When paid plans launch, a merchant of record will handle payments as the legal seller. It will collect your payment details and billing address directly; we never see your card number.

We will disclose information if the law requires it, or if it is necessary to protect the rights, safety, or property of you, us, or others. We do not sell information about you and do not share it with anyone else for their own purposes.

Our providers operate in the United States and other countries, so your information — including the content of your conversations — is transferred to and processed outside the country you live in. Where a transfer requires safeguards, we rely on our providers' contractual commitments, including standard contractual clauses where they apply. By using aside you consent to your information being provided to the third parties in section 3, including those located outside Japan.

Your account and your conversations are kept until you ask us to delete them. Usage records are kept for as long as they are needed to apply limits and to keep the accounts that billing requires. Sign-in sessions expire on their own. Backups roll off within 30 days of a deletion.

To delete your account, write to contact@askaside.com from the email address on the account. Within 30 days we delete your account, your conversations, and your sign-in sessions. Usage records that no longer identify you may be kept for accounting.

You can ask us to tell you what information we hold about you, to correct it, to delete it, or to stop using it for a particular purpose. If you are in the European Economic Area, the United Kingdom, or another place with similar law, you also have the right to receive a copy of your information in a portable form, to object to processing based on our legitimate interests, and to lodge a complaint with your data protection authority. If you are in Japan, requests under the Act on the Protection of Personal Information — disclosure, correction, suspension of use, and deletion — are handled the same way.

All requests go to contact@askaside.com. We may ask you to confirm that the account is yours before we act, and we answer within 30 days.

aside is not for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has an account, write to us and we will delete it.

All traffic to aside is encrypted in transit. Raw IP addresses are never stored. Access to our providers is limited to the people who operate aside. No system is perfectly secure, and we cannot promise that yours will never be breached; if we learn of a breach that affects your information, we will tell you.

When this policy changes, we publish the new version at this address with a new date at the top. If a change materially reduces your rights, we tell you before it takes effect, in aside or by email.

This policy is written in English. Korean and Japanese versions are provided for convenience; if they differ from the English text, the English text governs.