Business data processing terms

Last updated October 29, 2026

These terms supplement the Terms of Service for business customers using Sideview Teams. The customer decides which personal data to put in its team library and is responsible for having a lawful basis to share it. Lyorex Inc. processes that content to provide Sideview on the customer’s instructions.

What is processed

The service processes team names, member and invited email addresses, roles, shared prompts, site rules, settings and, when members opt in, last-seen information and aggregate prompt-use counts. Data subjects may include the customer’s members and people identified in content those members choose to share.

Processing consists of storing, retrieving, updating and deleting that information for the duration of the team’s use of the service. Sideview does not store AI conversations or browsing history on its servers.

Instructions and access

The customer’s configuration and authorized users’ actions provide the instructions for processing. We use shared content to operate and support the service, not for advertising or training AI models. People authorized to access customer content for support or operations are subject to confidentiality obligations.

Security

Sideview uses encrypted network connections, authenticated access, team role checks and database row-level security. The owner controls invitations and roles. Members should avoid sharing secrets or sensitive data their organization has not approved for this service.

Service providers and transfers

The customer authorizes the providers listed on the service-provider page to support processing. The database is hosted in Canada; other service processing may occur elsewhere. Contact us before using the service if your organization requires a signed DPA, specific international-transfer terms or advance notice/objection arrangements for provider changes. Any separately signed agreement governs where it differs from this page.

Requests and incidents

We assist with reasonable requests to access, correct or delete team data and with information needed to assess the service’s security. We notify the customer without undue delay after becoming aware of a personal data breach affecting its shared content, with the information available to us as the investigation proceeds.

Deletion and retention

Authorized team users can copy the shared content they can access. Owners can delete shared items or the team; deleting a team removes its shared content from the active database. Backup copies, if present, expire under the relevant provider’s retention policy. Account, security and billing records may be retained where needed for the service, dispute handling or legal obligations.

Contact

Contact support@sideview.app for data requests, security questions, the current service-provider list or a signed agreement. These terms describe the service’s processing and do not replace a customer’s own assessment of its legal or regulatory requirements.