Privacy Policy

Beside processes personal data carefully because the data we handle is unusually personal — your voice, your relationship, the way you talk to someone you love. This document explains what we collect, what we do with it, and how to make us delete it.

1. Who controls your data

The data controller is [LEGAL ENTITY NAME], reachable at hello@beside.tw.

2. What we collect

• Account data. Your name and email from your Google account, and a Google-issued user identifier we use to tie your sessions together.
• Setup content.Your answers to the about-us questionnaire, your recipient’s name and email, and any chat excerpt you choose to paste in.
• Voice recording. The 30-second clip you record in onboarding. We hand this to ElevenLabs (see § 4) to create a voice clone, and we store the resulting voice identifier (not the raw audio) so we can synthesise messages later.
• Photo. The image you upload, stored in Supabase Storage.
• Recipient replies.When the recipient writes back to a message, we store the text. We summarise it periodically into a per-couple memory document so the AI knows what’s happened in their week.
• Operational metadata. Request timestamps, route paths, and rate-limit counters — kept briefly for abuse prevention.

3. How we use it

Everything we collect goes into one of three buckets:

• Generating messages.Your setup content + the recipient’s recent replies + your cloned voice are passed to AI providers (see § 4) to produce each break-time message.
• Operating the service. Account auth, displaying the gift link to the recipient, sending outbound transactional email, billing (when Stripe ships).
• Keeping the service safe. Rate-limit counters, abuse logs, and incident response.

We do not use your content to train shared models for other customers. We do not sell or rent personal data to third parties. We do not show ads.

4. Third parties (data processors)

Beside uses the following processors. Each one only sees the data it needs to perform its function, under a written processor agreement.

• Google — sign-in and identity. Your Google account email and name. See Google’s privacy policy.
• Supabase — Postgres database (account data, setup content, replies, voice identifiers) and object storage (your uploaded photo). See Supabase’s privacy policy.
• Vercel — application hosting and edge network. Sees inbound HTTP requests in the course of routing them. See Vercel’s privacy policy.
• ElevenLabs — voice cloning and text-to-speech. Receives your 30-second voice recording and the text we want read back. Returns a voice identifier and synthesised audio. See ElevenLabs’s privacy policy.
• Google (Gemini API)— large language model that generates message text. Receives the setup content, recipient’s recent replies, and a system prompt. Per Google’s API terms, paid-tier inputs are not used for model training.

5. Where data is stored

[PLACEHOLDER — fill in once Supabase region is locked: this is likely AWS Asia Pacific (Tokyo) or US East depending on the Vercel-Marketplace integration setup.] Vercel routes traffic through global edge nodes. ElevenLabs and Google Gemini process requests in their own infrastructure, primarily in the US.

6. Retention

• Voice clone. Kept while your subscription is active. Deleted from ElevenLabs within 30 days of cancellation, or sooner on request.
• Setup content + replies. Kept while the account is active, deleted within 90 days of account closure.
• Photo. Same as setup content.
• Operational metadata. Rate-limit rows are purged daily. Application logs are kept for up to 30 days.

7. Your rights

You can ask us to:

• Show you the data we have about you.
• Correct inaccurate data.
• Delete your data and your account.
• Export your data in a portable format.

Email hello@beside.tw and we’ll respond within 30 days. If you want your cloned voice deleted from ElevenLabs immediately (separate from a full account deletion), say so in the email — we’ll process that within 7 days.

8. Voice cloning — recipient awareness

If you receive a Beside gift, you’ll see, before claiming it, who sent it and that the messages will play in their cloned voice. You can decline the gift simply by not signing in. We don’t generate messages until you’ve claimed the gift.

9. Children

Beside is not for anyone under 18. We don’t knowingly collect data from minors. If you believe a minor has set up an account, email us and we’ll delete it.

10. International transfers

[PLACEHOLDER — depending on entity domicile and Supabase region, Beside may transfer data internationally. A lawyer should localise this section for the chosen jurisdictions and the standard contractual clauses we rely on.]

11. Security

Authentication is handled by Google. Data at rest is encrypted by our processors’ default disk encryption. Data in transit uses TLS. Production database access is gated behind row-level security and the service-role key, which is never exposed to the browser. We can’t promise no breach will ever happen, but we treat your relationship and your voice as the most sensitive things in the database.

12. Changes to this policy

We’ll post any material change on this page with a fresh date at the top, and email active accounts.

13. Contact

Questions, requests, or anything else: hello@beside.tw. You can also read the Terms of Service.