Effective date: October 23, 2026Last updated: October 23, 2026
1. Introduction
Sidekick Robotics, Inc. (“Sidekick Robotics,” “SRI,” “Sidekick,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information processed through our websites, applications, APIs, developer tools, robotics infrastructure, AI services, simulation environments, and related products and services (collectively, the “Platform”).
This Privacy Statement explains how we collect, use, disclose, store, protect, and otherwise process personal information when you visit our websites, create an account, use the Platform, interact with our services, communicate with us, or participate in our programs.
This Statement is intended to address applicable privacy requirements, including the EU General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), and other applicable U.S. state privacy laws.
This Statement must be read together with any applicable product-specific privacy notices, cookie notices, contractual terms, and supplemental notices provided when you use particular services.
2. Who We Are
The entity responsible for your personal information is:
Legal entity: Sidekick Robotics, Inc. Registered address: 611 North Brand Boulevard, Suite 1300, Glendale, CA, 91203 Privacy contact: founders@sidekickrobotics.ai Website: www.sidekickrobotics.ai
For individuals in the European Economic Area (“EEA”), the United Kingdom, or Switzerland, the relevant Sidekick Robotics entity will act as controller where it determines the purposes and means of processing personal data, unless a different entity or role is identified in an applicable notice or agreement.
If we are required to appoint an EU or UK representative or a Data Protection Officer (“DPO”), the relevant representative or DPO contact details will be provided here or in a supplemental notice.
3. Scope
This Statement applies to personal information processed by SRI in connection with the Platform, subject to any more specific notice that applies to a particular service or relationship.
It does not necessarily govern personal information that a customer independently collects and processes through its own applications, robots, models, datasets, or deployments. Where a customer determines the purposes and means of processing and SRI acts solely on the customer's instructions as a processor or service provider, the customer’s privacy notice and applicable data processing agreement may govern that processing.
This Statement does not apply to third-party websites, services, models, or products that we do not control. Those providers are responsible for their own privacy practices, subject to applicable law and any relevant contractual obligations.
4. Personal Information We Collect
The categories of information we collect depend on how you interact with SRI and which services you use.
A. Account and identity information
We may collect your name, business email address, username, organization, job title, account credentials, authentication identifiers, account preferences, and other information you provide when creating or maintaining an account.
We may also collect identity-verification information where reasonably necessary for security, fraud prevention, regulatory compliance, or access to restricted services.
B. Transaction and billing information
For paid services, these are managed directly with the billing provider. We may collect related information, such as notifications of when the subscription is completed, when the subscription is updated, or subscription is cancelled.
Payment and billing data (such as credit card details) are collected and processed directly by our third-party payment processors (e.g., Stripe). We generally only receive basic transaction confirmations and subscription status.
C. Platform usage and technical information
We may collect telemetry that can help improve the experience of the Sidekick Robotics Platform™, including, but not limited to, IP addresses, device identifiers, browser and operating-system information, access logs, timestamps, API request metadata, session information, diagnostic data, feature usage, performance metrics, error reports, and security events.
We may use cookies, SDKs, local storage, or similar technologies where permitted by law and, where required, after obtaining your consent.
D. AI, robotics, and development information
Depending on the services you use, we may process:
Prompts, instructions, queries, and other inputs submitted to AI services.
AI-generated responses, model outputs, code, configurations, and associated metadata.
Simulation configurations, test scenarios, execution traces, and evaluation results.
Robotics telemetry, sensor readings, device logs, operational events, and performance measurements.
API payloads, integration metadata, debugging information, and error reports.
Files, datasets, documentation, and other content that you upload or connect to the Platform.
These materials may contain personal information, including information about employees, customers, users, or other individuals. You are responsible for ensuring that you have an appropriate legal basis and any necessary permissions before submitting personal information to the Platform.
We will process this information according to the applicable service terms, contractual arrangements, configuration choices, and privacy requirements.
E. Communications and support information
We may collect information contained in support tickets, emails, chat messages, feedback, survey responses, product demonstrations, and other communications with us.
F. Information from third parties
We may receive information from authentication providers, business partners, service providers, integration partners, security vendors, publicly available sources, and other third parties where permitted by law.
Where required by applicable law, we will provide information about the source and relevant categories of personal information obtained from third parties.
G. Sensitive personal information
We do not intentionally seek sensitive personal information unless it is necessary for a specified service or other lawful purpose. However, information submitted through prompts, files, sensor data, or customer integrations may contain sensitive information.
Where applicable law requires consent, limitation, or additional safeguards for sensitive personal information, we will implement those requirements. We do not use sensitive personal information for purposes that require a right to limit its use unless we provide the applicable notice and mechanism.
5. How We Use Personal Information
We may use personal information for the following purposes:
Providing services: Creating and administering accounts, authenticating users, delivering AI and robotics tools, processing requests, and maintaining integrations.
Operating the Platform: Monitoring performance, troubleshooting errors, testing functionality, managing capacity, and improving reliability.
Security and fraud prevention: Detecting abuse, unauthorized access, malicious activity, service vulnerabilities, and violations of our terms.
Product development: Developing and improving features, evaluating service quality, and conducting research and testing.
AI development and evaluation: Using eligible data to evaluate, improve, or develop models and related systems only as permitted by applicable law, contractual commitments, product settings, and any required consent or opt-out choices.
Communications: Responding to inquiries, sending service notices, providing support, and delivering updates.
Billing and administration: Managing subscriptions, payments, accounting, tax requirements, and contractual relationships.
Legal compliance: Meeting applicable legal obligations and responding to valid legal process.
Business operations: Managing corporate transactions, enforcing agreements, protecting rights, and establishing or defending legal claims.
Marketing: Sending promotional communications where permitted by law and respecting applicable consent and opt-out requirements.
We will not process personal information in ways that are incompatible with the disclosed purposes unless permitted by law and, where required, after providing additional notice or obtaining consent.
6. Legal Bases for Processing Under the GDPR
Where the GDPR applies, we rely on one or more of the following legal bases:
Contract: Processing necessary to enter into or perform a contract with you, including providing the services you request.
Legitimate interests: Processing necessary for legitimate business interests, such as maintaining platform security, preventing fraud, improving reliability, and managing our business, provided those interests are not overridden by your rights and interests.
Consent: Processing based on your consent, including where required for certain cookies, marketing activities, or optional processing.
Legal obligation: Processing necessary to comply with applicable legal obligations.
Vital interests or public interest: Where applicable and legally justified in the circumstances.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing performed before withdrawal.
Where we rely on legitimate interests, you may have the right to object as described in Section 12.
We will identify the applicable legal basis for particular processing activities where required by law.
7. AI Training, Model Improvement, and Customer Data
Because SRI operates in the physical-AI technology sector, we distinguish between information necessary to provide a requested service and information that may be used for broader model development or improvement.
Unless otherwise disclosed in a product-specific notice or agreement:
We process prompts, outputs, uploaded files, configurations, and telemetry as necessary to provide, secure, support, and maintain the relevant service.
We do not assume that information submitted to the Platform is automatically available for general-purpose model training.
Use of customer content for model training or improvement will depend on the applicable product settings, contractual commitments, legal basis, and any consent or opt-out rights required by law.
Enterprise customers may have additional protections or restrictions under their contracts and data processing agreements.
We may use aggregated or appropriately de-identified information for analytics and service improvement where permitted by law.
We will not represent information as anonymous if individuals can reasonably be identified from it. Where information is de-identified, we will maintain safeguards and use it in accordance with applicable legal requirements.
If you submit personal information relating to another individual, you must ensure that you are authorized to do so and have provided any notices or obtained any permissions required by law.
8. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients, subject to applicable law and appropriate contractual safeguards.
A. Service providers and processors
We may disclose information to hosting providers, cloud infrastructure providers, payment processors, analytics vendors, customer-support providers, security vendors, and other vendors that perform services on our behalf.
Where required, these providers are subject to contractual restrictions governing their processing of personal information.
B. AI, robotics, and integration providers
When you choose to use an external model, API, integration, simulation environment, or other third-party service through the Platform, relevant information may be transmitted to that provider to fulfill your request.
Depending on the provider and service, the provider may process information under its own privacy terms or act as a processor or service provider under an applicable agreement.
You should review relevant third-party privacy terms before submitting information to external services. We will not disclose information to third parties for unrelated purposes without an appropriate legal basis.
C. Affiliates
We may share information with our corporate affiliates for purposes consistent with this Statement, subject to applicable law and appropriate safeguards.
D. Professional advisers and authorities
We may disclose information to lawyers, auditors, insurers, regulators, courts, and law enforcement authorities where necessary and lawful, including to protect rights, investigate security incidents, comply with legal obligations, or establish or defend legal claims.
E. Business transactions
Personal information may be disclosed in connection with a proposed or completed merger, acquisition, financing, restructuring, sale of assets, or similar transaction, subject to applicable confidentiality and legal requirements.
F. With your direction or consent
We may disclose information where you request or authorize the disclosure, including through integrations, collaboration features, or connected accounts.
9. Sale, Sharing, and Targeted Advertising
SRI does not treat the ordinary provision of a requested service as permission to sell personal information or share it for cross-context behavioral advertising.
If our practices constitute a “sale” or “sharing” of personal information under California law, or targeted advertising under another applicable state privacy law, we will provide the required disclosures and opt-out mechanisms before or as required by law.
Where applicable, you may exercise your opt-out rights through the privacy controls provided on our website or by contacting us using the details in Section 18. We will process recognized opt-out preference signals, including Global Privacy Control (“GPC”), where required by applicable law.
We will not discriminate against you for exercising a privacy right.
10. Cookies and Similar Technologies
We may use cookies, pixels, SDKs, local storage, and similar technologies to:
Maintain sessions and authenticate users.
Remember preferences and improve accessibility.
Protect against fraud and unauthorized access.
Measure service performance and diagnose technical issues.
Understand feature usage and improve our products.
Support marketing or advertising, where applicable and permitted.
Strictly necessary technologies may be used where permitted without consent. For non-essential cookies and similar technologies that require consent, including relevant technologies used for analytics or advertising, we will seek consent before activation as required by applicable law.
You may manage cookie preferences through our consent interface and, where available, your browser or device settings. Disabling certain technologies may affect functionality.
Withdrawing consent will not affect processing lawfully conducted before withdrawal.
11. Data Retention
We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Statement, including providing services, maintaining security, meeting legal obligations, resolving disputes, and enforcing agreements.
Retention periods depend on the type of information and the context of processing. Relevant factors include:
Whether the information is necessary to maintain an active account or provide a service.
Security, fraud-prevention, debugging, and audit requirements.
Contractual obligations and customer retention instructions.
Applicable statutory retention periods and legal claims.
Whether information can be deleted, aggregated, or de-identified.
We will establish and maintain category-specific retention periods or criteria. Where required, these will be disclosed in our collection notices or applicable service documentation.
When personal information is no longer needed, we will delete it, anonymize it, or securely isolate it until deletion is possible, subject to applicable law and legitimate retention requirements.
Backup systems may retain residual copies for a limited period before routine deletion.
12. Your Privacy Rights
Your rights depend on your location, the applicable law, and SRI’s role in processing the information.
A. Rights under the GDPR
Where the GDPR applies, you may have the right to:
Request access to your personal data.
Request correction of inaccurate or incomplete data.
Request erasure of your personal data.
Request restriction of processing.
Receive certain personal data in a portable format.
Object to processing based on legitimate interests.
Object to direct marketing at any time.
Withdraw consent where processing is based on consent.
Request human intervention or challenge certain decisions subject to applicable rules on solely automated decision-making.
Lodge a complaint with your competent data protection supervisory authority.
These rights are subject to legal conditions and exceptions. We may need to verify your identity before responding.
B. Rights under California law
Subject to applicable law and exceptions, California residents may have the right to:
Know the categories and specific pieces of personal information collected about them.
Know the categories of sources, purposes of collection, and categories of third parties to whom personal information is disclosed.
Request deletion of personal information.
Request correction of inaccurate personal information.
Opt out of the sale or sharing of personal information.
Limit certain uses and disclosures of sensitive personal information.
Receive equal service and pricing without unlawful discrimination for exercising privacy rights.
Use an authorized agent to submit a request, subject to applicable verification requirements.
Where required, we will provide a process for appealing a decision not to act on a privacy request.
C. Rights under other U.S. state laws
Residents of other states may have additional rights under applicable state privacy laws, including rights to access, correct, delete, obtain a copy of certain information, opt out of targeted advertising, opt out of sales or certain profiling, and appeal certain decisions.
We will provide applicable rights and mechanisms based on the laws that apply to our processing.
D. How to exercise your rights
Submit a request to:
Email: founders@sidekickrobotics.ai Privacy request page: Via our in-platform privacy request portal (accessible by logging into your account at sidekickrobotics.ai/platform/login).
If required by applicable law, we will also provide additional request methods. We may ask for information reasonably necessary to verify your identity or authority to act on another person’s behalf.
We will respond within the time periods required by applicable law and notify you if an extension is legally available and necessary.
You do not need to create an account solely to submit a privacy request where applicable law prohibits that requirement.
If SRI processes information on behalf of an enterprise customer, we may refer your request to that customer or assist the customer in responding, as required by our contractual and legal obligations.
13. International Data Transfers
SRI may process personal information in the United States and other countries where we or our service providers operate.
Where personal information is transferred from the EEA, United Kingdom, or Switzerland to a country that does not benefit from an applicable adequacy decision, we will implement a valid transfer mechanism as required by law, such as the relevant Standard Contractual Clauses or UK-approved transfer mechanism, together with supplementary measures where necessary.
We will assess applicable transfer risks and implement safeguards appropriate to the nature of the information and the circumstances of the transfer.
You may contact us to request further information about relevant transfer safeguards, subject to applicable law.
14. Data Security and Breach Response
We implement technical, organizational, and administrative measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.
Measures may include access controls, encryption, monitoring, secure development practices, vendor reviews, incident-response procedures, and personnel training, as appropriate to the risks.
No system or transmission method can be guaranteed to be completely secure.
If a personal data breach occurs, we will assess the incident and provide notifications to affected individuals, regulators, customers, or other parties where and when required by applicable law and contract.
15. Children and Minors
The Platform is intended for professional, developer, research, and business use and is not directed to children under 13.
We do not knowingly collect personal information directly from children under 13 without the legally required authorization. Where applicable law imposes stricter requirements for minors, we will comply with those requirements.
If you believe a child has provided personal information to SRI in violation of applicable requirements, contact us using the details in Section 18 so that we can assess and address the matter.
16. Automated Decision-Making and Profiling
We may use automated systems to support service delivery, security monitoring, fraud detection, diagnostics, and product functionality.
Where we engage in solely automated decision-making that produces legal or similarly significant effects on individuals, we will provide the notices, legal basis, safeguards, and rights required by applicable law.
We will disclose relevant information about the logic involved, significance, and envisaged consequences of such processing where legally required.
This Statement does not authorize automated decisions that would otherwise be unlawful.
17. Changes to This Statement
We may update this Statement to reflect changes in our services, data practices, technology, or legal obligations.
We will publish the updated Statement and revise the “Last updated” date. Where required by law, we will provide additional notice or obtain consent before implementing material changes.
18. Contact Us and Complaints
For privacy questions, concerns, or requests, contact:
Sidekick Robotics, Inc. 611 N. Brand Blvd, Suite 1300, Glendale, CA, 91203 Email: founders@sidekickrobotics.ai Privacy request page: Via our in-platform privacy request portal (accessible by logging into your account at sidekickrobotics.ai/platform/login).
If you are located in the EEA, you may lodge a complaint with the data protection supervisory authority competent for your habitual residence, place of work, or the location of the alleged infringement, as permitted by law.
If you are located in the United Kingdom or Switzerland, you may also contact the relevant data protection authority.
California residents may contact the California Privacy Protection Agency or the California Attorney General regarding concerns under applicable California privacy law.
Nothing in this Statement limits any rights you may have under applicable law.