Privacy Policy · Sidepockt

1.What Sidepockt is

Sidepockt is a phone app that shows you live sales, opt-ins and funnel statistics from the ClickFunnels workspaces you choose to connect, and sends you notifications about them. It reads your data. It never changes or deletes anything you made in ClickFunnels.

2.What we collect

Account: your email address and name, and a profile photo if you add one.
ClickFunnels connection: the names and IDs of the workspaces you connect, and the access token ClickFunnels issues to Sidepockt for each one. Tokens are stored encrypted and are never sent to your browser or phone.
Business data we read on your behalf: sales (buyer name and email, product, amount, status, time), opt-ins and contacts (name, email, phone, tags, the page and funnel they came from, and referral parameters when ClickFunnels provides them), funnel and page statistics (views, opt-ins, sales, earnings), and email broadcast statistics.
Devices: a push notification subscription for each phone or browser you turn notifications on with, plus its type (for example "iPhone · Safari").
Billing: your plan, trial and subscription status. Card details are collected and stored by Stripe, not by us. We keep only the last four digits and card brand Stripe shows us.
Usage: which screens you open and basic device and error information, so we can fix problems. We do not use advertising trackers.

3.How we use it

To show you your numbers on your phone.
To send the notifications you turn on, to the devices you turn them on with.
To bill you and handle your plan.
To answer support requests.
To keep the service reliable and secure.

4.What we never do

We never sell your data or your customers' data.
We never change or delete your ClickFunnels content: no funnels, pages, products, contacts, tags, workflows or orders. We create only two things. One is a notification hook (an outgoing webhook endpoint) so ClickFunnels can tell us about new sales and opt-ins. The other is a test contact named "Sidepockt connection test (safe to delete)", which we add to check that the hook works and delete as soon as it has. When you disconnect, we remove the hook and end our access to the workspace.
We never read data from ClickFunnels workspaces you have not connected.
We never email or contact your customers or leads.
We never use your data to train models or for advertising.

5.Who we share with

We use a small number of providers to run the service. Each processes data only to provide their service to us.

ClickFunnels (Etison LLC): the source of your business data. Your use of ClickFunnels is governed by their terms and privacy policy.
Supabase: database, authentication and encrypted storage, hosted in the United States.
Vercel: application hosting.
Stripe: payments and subscriptions.
Resend: transactional email such as sign-in codes and invites.
Apple and Google push services: delivering notifications to your devices.

We share data with no one else, except if required by law or to protect the service from abuse.

6.Team and client access

Account owners can invite teammates and clients. The owner chooses exactly which workspaces or funnels each person can see, and each person sees only that. Members have their own login and their own notification settings. The owner can remove access at any time, and members can leave at any time. Owners are responsible for who they invite.

7.Retention and deletion

Business data we read from ClickFunnels is kept while the workspace is connected so your history and sparklines work.
Disconnecting a workspace ends our access to it, deletes its token and the data we hold for it, and removes our webhook from ClickFunnels.
Deleting your account disconnects every workspace, ends our access to each one, deletes your tokens, business data, members, notification settings and profile, and removes our webhooks from ClickFunnels.
Deleted data is purged from backups within 30 days.
Stripe retains billing records as required by law.

8.Security

Data is encrypted in transit (HTTPS) and at rest. ClickFunnels tokens are stored in an encrypted vault and used only on our servers. Access to production systems is limited to the operator. If we learn of a breach affecting your data we will tell you promptly.

9.Your rights

You can view and change your account details in the app, export your data by emailing us, and delete everything from Settings. If you are in the EU, UK, California or another jurisdiction with data rights, you may exercise access, correction, deletion, portability and objection rights by emailing privacy@sidepockt.com. We will respond within 30 days.

10.Children

Sidepockt is for business use by people 18 or older. We do not knowingly collect data from anyone under 18.

11.Changes

If we change this policy in a way that matters, we will email account owners before the change takes effect and note the date at the top of this page.

12.Contact

privacy@sidepockt.com