Legal

Privacy Policy

We respect your privacy. This policy explains what information we collect and how we use it.

Data controller

SideAway, Inc. is the data controller responsible for your personal information under this Privacy Policy. You can reach us at SideAway, Inc., Attn: Privacy, 7111 Santa Monica Blvd, Ste B460, Los Angeles, CA 90046, USA, or by email at privacy@sideaway.com.

Information we collect

We collect account details (name, email), profile information you choose to share, booking and messaging activity, and technical data like IP address and device information.

How we use your data

To operate the marketplace, match executives with assistants, process bookings and payments, prevent fraud, and improve our services.

Sharing

We share data with the other party in a booking, with payment processors, and with service providers strictly as needed. We never sell your data.

We do not sell your personal information as defined by the California Consumer Privacy Act (CCPA/CPRA). We also do not share personal information for cross-context behavioral advertising.

Cookies, analytics & session recording

We use cookies and similar technologies for three purposes: (1) essential cookies that keep you signed in and the site functional, (2) analytics that help us understand how the site is used, and (3) session recording that helps us find and fix usability issues.

Non-essential cookies only load after you click Accept all in our consent banner. If you choose Essential only, no analytics or session-recording scripts run. You can change your choice at any time by clearing the sideaway.cookieConsent.v1 value in your browser storage. See our Cookie Policy for the full list of cookies and providers.

Analytics and session recording are provided by Hotjar. Hotjar may capture mouse movement, clicks, scroll depth, and page content on the pages you visit. Sensitive fields (passwords, payment inputs) are masked. You can opt out globally at hotjar.com/legal/compliance/opt-out.

Third-party service providers (subprocessors)

We rely on the following processors to run the service:

  • Supabase — application hosting, database, authentication, and file storage.
  • Plaid Inc. — connecting and verifying assistant bank accounts for payouts. See the disclosure below.
  • Hotjar Ltd. — product analytics and session recording (only after consent).
  • UserWay Inc. — accessibility widget served from userway.org.
  • Email delivery provider — transactional email (account notifications, password resets, receipts).
  • Payment processor — payment card processing and payouts.

We contract each processor under a data processing agreement that restricts them to processing data only on our instructions.

Plaid disclosure

If you connect a bank account for payouts, we use Plaid Inc. to gather your financial information from your financial institution. By using our service you grant SideAway and Plaid the right to access and transmit your personal and financial information from your relevant financial institution. Your use of Plaid is subject to Plaid's End User Privacy Policy, available at plaid.com/legal.

Data retention

We retain personal data only as long as necessary for the purposes described below:

  • Account and profile data — for the life of your account, then up to 90 days after deletion.
  • Booking, messaging, and transaction records — up to 7 years to meet tax, accounting, and dispute-resolution obligations.
  • Identity and background-check records — up to 5 years, or as required by the FCRA and applicable state laws.
  • Marketing preferences — until you unsubscribe, then indefinitely for suppression-list purposes.
  • Analytics and session recordings — up to 365 days.
  • Support and legal correspondence — up to 3 years.

Your rights

You can access, correct, export, or delete your account at any time from Settings. EU/UK residents have additional rights under GDPR — see our GDPR page.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request access and a copy, to request correction, to request deletion, and to limit the use of sensitive personal information. You also have the right to opt out of the sale or sharing of personal information — although as noted above, we do not sell or share personal information for cross-context behavioral advertising.

To exercise any of these rights, email privacy@sideaway.com or use the export/delete tools in your account Settings. You may designate an authorized agent to submit a request on your behalf. We will not discriminate against you for exercising your rights. We respond within 45 days (extendable by 45 additional days when reasonably necessary).

Shine the Light (Cal. Civ. Code § 1798.83): California residents may request a list of any personal information we disclosed to third parties for their direct marketing purposes in the prior calendar year. We do not currently disclose personal information for third-party direct marketing.

Children's privacy

SideAway is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If we learn we have collected data from a child under 18, we will delete it. If you believe a child has provided us personal information, contact privacy@sideaway.com.

Security

Data is encrypted in transit and at rest. We follow industry best practices and use trusted infrastructure providers.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced by email or an in-product notice at least 30 days before they take effect. The "Last updated" date at the bottom of this page reflects the most recent revision.

Contact

Questions? Email privacy@sideaway.com.

Last updated: May 1, 2026