Data retention.
Draft 1. Last updated: .
This table says what RepSidecar keeps, where, and for how long. It goes with the Privacy page and the Sub-processor list. The app is not released. App rows describe how the app is built to work; each will be tested and dated before launch.
Swipe the table to see all 4 columns.
| Data item | Where it is kept | How long | Status |
|---|---|---|---|
Waitlist entry (email, role, sales calls per month, country, “where did you hear about us”, first_touch, page, kind, submitted_at, arrival time stamp) Draft: not final | Private Google Sheet controlled by the founder. | Until you ask us to delete it, or until we no longer need it to run the waitlist. | In use. |
| Same entry, in transit | Vercel function /api/submit. | Not stored by the function. | In use. |
| Rate-limit record (your IP address and the times you posted a form) | Memory of one running instance of the /api/submit function. | Until that instance stops, or until 5,000 IP addresses build up and the list is cleared. Old times for an IP are dropped only when that IP posts again. | In use. |
| Request records for every page view and form post (IP address and request details) Draft: not final | Vercel runtime logs. | 1 day on the Pro plan; 30 days with Observability Plus. | In use. |
| Contact entry (email, message, page, kind, arrival time stamp) Draft: not final | Same Google Sheet. | Until you ask us to delete it, or until we no longer need it to run the waitlist. | In use. |
| Your email replies to us | The founder’s Gmail (Google consumer account). | Until you ask us to delete them. | In use. |
first_touch value in your browser | Your browser’s session storage, this tab only. | Until the tab closes. | In use. |
| Call audio | On this Mac. | RepSidecar is built not to save audio by default. | Planned. |
| Transcript text on your Mac Draft: not final | Your Mac. | Not set yet. | Planned. |
| Transcript text at the relay | RepSidecar relay. | None. The relay is built to store no transcript text. | Planned. We plan to publish the dated test that checks this before launch. |
| Transcript text at the AI provider (Anthropic) | Anthropic. | Deleted within 30 days for API users, with exceptions (Usage Policy flags: up to 2 years; the law; a zero-retention agreement), as Anthropic’s retention page states it. | Planned. More detail is in the Sub-processor list. |
| License and usage data (license key, count of calls and call-hours, one “call coached” event per call with build number and timestamp) Draft: not final | License and usage service (not chosen yet). | Not set yet. | Planned. |
| Payment data (card, billing address, payment and refund records) Draft: not final | Held by our payment processor (named here before the first payment). | Set by our payment processor. | Planned. RepSidecar does not store full card numbers. |
| RepSidecar’s own billing and tax records (amounts, dates, invoices) Draft: not final | Our payment processor’s dashboard and Ryan Stempski’s records. | As long as tax law requires. | Planned. |
| Proof of your consent to auto-renewal terms | Checkout records. | At least 3 years, or 1 year after the contract ends, whichever is longer (Cal. Bus. & Prof. Code 17602(a)(6)). | Planned, for Pro subscriptions. |
| Crash reports (optional) Draft: not final | Crash-report service (not chosen yet). | Not set yet. | Planned. Crash reports are built to stay off until you turn them on, and to carry no transcript text. |
How to ask for deletion Draft: not final
Use the contact form. We delete your waitlist or contact entry and your email replies. We cannot delete records that our payment processor or a tax rule requires us to keep.