Privacy Policy

Last updated: July 2026

Overview

Sidekick runs locally on your computer. We collect anonymous telemetry — error reports and basic usage events — to improve the product (you can opt out). We do not access your InDesign documents.

What We Collect

Update Checks

Sidekick periodically checks our server for software updates. When this happens, our server receives:

  • Your IP address (logged automatically by our web server)
  • The current version of Sidekick you are running

We use this information solely to deliver updates. Server logs containing IP addresses are retained for a limited period for security and troubleshooting purposes, then deleted.

Product Telemetry

Sidekick sends a small number of anonymous telemetry events to help us find problems and keep the product working well. There are two kinds:

Usage events. Basic lifecycle signals: when the MCP server starts, when the InDesign plugin connects, whether a page snapshot succeeded or failed, and an aggregate summary at the end of a session (how many commands ran and how many failed). These contain version numbers and your operating system (macOS or Windows) — nothing else.

Error reports. When code execution fails in InDesign, we collect:

  • The code snippet that caused the error (first 500 characters)
  • The error message and type (e.g., TypeError, ReferenceError)
  • Stack trace information (if available)
  • Your Sidekick version and operating system

The code that runs in InDesign is generated by your AI assistant. It usually contains only layout instructions, but it can include fragments of text that were being written into your document at the moment of the error. We never collect your InDesign document itself.

All telemetry is anonymous — events carry a random session ID that is regenerated each time Sidekick starts and is not linked to you or your device. We do not store your IP address or any location data with telemetry events; both are stripped when the data is received.

Telemetry is enabled by default. You can disable it at any time by asking your AI assistant to "disable Sidekick telemetry".

What Sidekick Does Not Collect

  • We do not collect your InDesign documents
  • We do not collect your name, email address, or any account information through telemetry
  • We do not use a persistent identifier — telemetry cannot be linked across sessions, to you, or to your device
  • We do not store IP addresses or location data with telemetry events

Website Analytics

This website (sidekick.eastpole.nl) uses PostHog for anonymous analytics. Analytics are only enabled if you consent via the cookie banner. If you accept, we collect:

  • Pages you visit on this website
  • Your approximate location (country/region, derived from IP address)
  • Device type and browser information
  • Referral source (how you found this website)

We use this information to understand how visitors use our website and improve it. No personal profiles are created for anonymous visitors. You can withdraw consent at any time by clearing your browser's local storage for this site.

Data Processing

All communication between the MCP server and InDesign happens locally on your machine. Your documents and the instructions sent by AI assistants do not pass through our servers.

Third Parties

Sidekick is distributed through Adobe Exchange. Adobe's privacy practices are governed by their own privacy policy. If you use Sidekick with an MCP client (such as Claude Desktop), that client's data practices are governed by its provider's privacy policy.

We use PostHog to process both website analytics (with your consent) and the anonymous product telemetry described above. PostHog processes data on our behalf as a data processor. We do not share data with third parties for marketing or advertising purposes.

Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Object to or restrict processing of your data
  • Lodge a complaint with your local data protection authority

In practice, the personal data we may hold includes IP addresses in server logs from update checks, and (if you consented) anonymized website analytics data. Product telemetry is anonymous and cannot be linked back to you, which means we are unable to locate or delete individual telemetry events on request. If you wish to exercise any of these rights, contact us at the address below.

Data Controller

East Pole B.V.
The Netherlands
Website: https://sidekick.eastpole.nl
Email: [email protected]

Changes

We may update this policy from time to time. Changes will be posted on our website.