Privacy Policy
Last updated: September 17, 2026
This Privacy Policy explains how Sidecar Rolodex ("we", "us", or "our") handles information when you use our web application and companion browser extension (collectively, the "Service"). By using the Service, you agree to this policy.
1. Information We Collect
Account information
- Your email address and authentication identifiers when you create an account.
Contact data you capture
- Producer contact details (names, companies, email addresses, phone numbers, social profiles, film/show credits, pipeline statuses and notes) that you choose to capture and save through the browser extension or manual entry. This information is provided by you and stored on your behalf.
Outreach settings and email connections
- Your pitch templates, sender name, signature and daily targets.
- If you connect email sending, we store the credentials needed to create drafts in your mailbox: a Google or Microsoft OAuth refresh token. These tokens are stored encrypted at rest and are used only to create drafts you request.
Usage information
- Basic operational logs (for example, error reports) needed to run and troubleshoot the Service.
2. How the Browser Extension Works
The extension only reads information from pages you have personally opened and are logged into in your own browser — such as your own IMDb Pro account. It does not run without your action, does not browse or scrape on its own, and sends data to the Service only when you click to send or copy it. You are responsible for using the extension in compliance with the terms of any website you visit, including IMDb Pro.
3. How We Use Information
- To provide the Service: storing your contacts, pipeline tracking, and pitch tools.
- To create email drafts in your connected mailbox at your direction. We never send email on your behalf without your explicit action.
- To maintain security, prevent abuse, and fix problems with the Service.
We do not sell your personal information, and we do not use your contact data to train AI models.
4. Third-Party Services
The Service relies on third parties to operate. Their own policies govern their processing:
- Hosting & database provider — stores your account, contacts and settings.
- Google — if you connect a Google account, Google's API services handle authentication and draft creation. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
We are not responsible for the privacy or security practices of third-party services.
5. Data Sharing
We share your information only with the providers listed above, to the extent needed to run the Service, or when required by law. Your captured contact data is visible only to your account.
6. Data Retention & Deletion
You can delete individual contacts, templates and settings from within the Service at any time. You may also request deletion of your account and all associated data by emailing josh@hollywoodspeakeasy.com. We will delete your data within 30 days of a verified request, except where retention is required by law.
7. Security
We use industry-standard measures, including encryption of stored email credentials and transport encryption for all traffic. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on your location (for example under the GDPR or CCPA), you may have rights to access, correct, export or delete your personal data. To exercise any of these rights, email josh@hollywoodspeakeasy.com.
9. Children's Privacy
The Service is not directed to anyone under 16, and we do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this policy as the Service evolves. We will post the updated version on this page with a new "Last updated" date. Continued use of the Service after changes means you accept the updated policy.
11. Contact Us
Questions about this policy? Email josh@hollywoodspeakeasy.com.