Privacy Policy

1Who we are

Sidemarq is software for interior design studios: projects, proposals, invoicing, bookkeeping and the client portal. It is provided by Brayton Interiors (we, us). This policy explains what information we collect when you use our website and the Sidemarq service (the Service), what we do with it, and the choices you have. Our browser extension, the Web Clipper, has its own short privacy policy.

2Two kinds of information

Account information is about the people who use Sidemarq: your name, email address and sign-in details. We are responsible for it, and this policy governs it.

Studio data is everything a studio puts into the Service: its clients, projects, vendors, contractors, documents, invoices and bank activity. That data belongs to the studio. We handle it only to run the Service for the studio, as set out in our Terms of Service. If you are a studio’s client or contractor and have a question about your information, please contact that studio directly; if you contact us, we will pass your request on to them.

3What we collect

• From Google, when you sign in with Google: your name, email address and profile photo. We ask Google for nothing else: no access to your Gmail, Calendar, Drive or contacts.
• When you sign in by email: your email address, and your password, which we store only in scrambled (hashed) form.
• About your studio: its name, logo, address and contact details, and tax identification numbers, which we encrypt.
• What you put in: projects, rooms, items, images, floor plans, proposals, contracts, invoices, notes and similar content.
• Signatures: when someone signs a document, the name they typed or the signature they drew, the time, and their IP address and browser, kept as a record of the signing.
• Bank connections, if a studio chooses to connect a bank: account names, balances and transactions, provided through Plaid. We never see or store bank sign-in details.
• Payments: card and bank payments are handled by Stripe. We receive the result of a payment, never full card numbers.
• Technical information: IP address, browser type and the pages requested, recorded in our server logs to keep the Service secure and working.

4How we use it

• To provide the Service: signing you in, showing your work, and doing what you ask of it.
• To send email the Service needs to send: sign-in links, invitations, documents to sign, and invoices and proposals a studio sends to its clients.
• To bill studios for their subscription.
• To keep the Service secure, prevent misuse, and fix problems.
• To answer you when you contact us.

We do not sell personal information. We do not share it for advertising. We do not use your information or studio data to train AI models.

5Information from Google

If you sign in with Google, we use your name, email address and profile photo only to sign you in, identify you to your team, and show your name and picture in the Service. We do not use this information for advertising, we do not sell it, and we do not transfer it to anyone except as needed to provide the Service or as required by law.

Sidemarq’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6Companies that help us run the Service

We use a small number of service providers, each only for its part of the Service and each bound to protect the information:

• DigitalOcean: hosting, in the United States.
• Google: sign in with Google.
• SendGrid (Twilio): delivering the Service’s email.
• Stripe: payments, subscription billing and sales tax calculation.
• Plaid: bank connections, for studios that choose to connect a bank.
• Anthropic: AI features such as suggested budgets and price lookups. Only the details needed for the request are sent, and they are not used to train AI models.

We may also disclose information if the law requires it, to protect the rights and safety of our users or the public, or as part of a sale or reorganisation of the business, in which case this policy would continue to apply to it.

7Cookies

We use only the cookies the Service needs to work, chiefly the one that keeps you signed in. Your browser also remembers a few display preferences, such as which panels you have folded. There are no advertising or tracking cookies and no third-party analytics.

8How long we keep it

We keep account information and studio data while the studio’s account is active. When an account closes, the studio can export its data for thirty days, and we delete it within ninety, except anything we must keep by law, for only as long as required. Server logs are kept for a short period for security and troubleshooting.

9Keeping it safe

Information travels over encrypted connections. Each studio’s data is kept separate from every other studio’s, access within a studio follows the roles the studio sets, and sensitive fields such as tax identification numbers are encrypted at rest. No system is perfectly secure; if a breach affects your information, we will tell you promptly.

10Your choices and rights

You can see and correct most of your information in the Service. You can ask us for a copy of your account information, or to correct or delete it, by emailing mark@braytoninteriors.com. Studio administrators can export their studio’s data at any time. Depending on where you live, including California under the CCPA, you may have further rights; we honour them, and we will not treat you differently for using them.

You can revoke Sidemarq’s access to your Google account at any time from your Google account’s security settings.

11Children

The Service is for businesses and is not directed to children. We do not knowingly collect information from anyone under 16.

12Changes to this policy

If we change this policy, we will post the new version here with a new effective date, and tell studios by email or in the Service before a material change takes effect.

13Contact

Questions about privacy: mark@braytoninteriors.com.