Nearside is operated by Satvikya Srivastava ("we", "us"). We are the data controller for the personal data described below. For any privacy question or request, contact us at getnearside@gmail.com.
Data we collect
- Account details. Your name and email address, used to sign you in (with a password) and to contact you about your account.
- Your outreach profile. The bio, skills, highlights, availability, phone number and email style you enter, plus any CV you upload. Your CV is stored in a private file store and is used for two things: it is attached to the first email you send each company, and, if you use CV auto fill, it is sent once to OpenAI so your bio and skills can be read out of it. If you would rather it were never read by an AI provider, type those in yourself and skip auto fill.
- Connected sending inbox. If you choose automatic sending, the email address and app specific password for your mailbox. The password is encrypted at rest (AES-256-GCM) and used only to send your emails and check for replies on your behalf.
- Campaign data. The companies sourced for you, the draft emails, and which were sent or replied to.
- Billing data. If you subscribe, our payment processor (Stripe) handles your card details. We never see or store your card number; we keep only a customer reference and your plan status.
- Referral data. Your referral code and, if you were referred, who referred you.
- Usage and error data. Which pages are visited and which features are used, and technical details when something breaks. See "Cookies and browser storage" below for how this is collected without cookies.
How we use it, and our lawful bases
- To provide the service. Source companies, draft emails and send from your inbox (performance of our contract with you).
- To take payment and manage your subscription (performance of our contract).
- To understand how the site is used, fix errors, improve the product and respond to support requests (our legitimate interests).
- To meet legal and accounting obligations (legal obligation).
The companies you email
Nearside sources publicly available business contact information (from the Google Places API and Companies House) so you can contact companies about internships. Emails are sent from your own inbox and are your responsibility. See our Terms.
Who we share it with (processors)
We use a small number of trusted providers to run the service:
- Supabase. Database, authentication and file storage (hosted in the EU).
- Stripe. Payment processing.
- Vercel. Application hosting.
- OpenAI. The only AI provider we use, for three things: drafting your emails on a paid plan, reading your uploaded CV if you use CV auto fill, and writing application answers. It receives the company being written to and the bio, skills and highlights on your profile, so the email is in your voice. Emails on the free plan are written by our built in writer and never reach OpenAI.
- PostHog. Product analytics (hosted in the EU). It records page visits and feature use, and stores nothing on your device.
- Sentry. Error monitoring (hosted in the EU). When something breaks, it receives technical details of the error so we can fix it.
- Google (Places API). Finds businesses near the area you search. It receives the search area and the kind of business, not your profile.
- Your email provider. The mailbox you connect, used to send and read replies.
We do not sell your personal data, and we don't use it for advertising.
Where your data is processed
Supabase, PostHog and Sentry store our data in the EU. Stripe, Vercel, OpenAI and Google are United States companies, so some processing happens outside the UK. Those transfers rely on the UK International Data Transfer Addendum, the UK Extension to the EU-US Data Privacy Framework, or the equivalent safeguards in each provider's own terms. OpenAI is only involved when an AI feature is used: it sees nothing if your emails are written by the built in writer and you fill your profile in yourself.
Cookies and browser storage
We only store what the site needs to work, and nothing for advertising.
- Sign in cookies. Set when you sign in, so you stay signed in. These are strictly necessary: the site cannot work without them.
- Things you asked the site to remember. Your light or dark theme, an unfinished campaign form so you don't lose it, and which account last used this browser, so one person's saved form is never shown to the next. These are kept in your own browser's local storage and are not sent to us.
- No analytics or tracking cookies. Our analytics runs in memory only and stores nothing on your device, so one visit is not linked to the next. We use no advertising or cross site tracking of any kind.
Stripe may set its own cookies on its checkout pages to prevent fraud. Those are covered by Stripe's privacy policy.
Retention
We keep your data for as long as your account is active. You can delete individual campaigns at any time, and you can ask us to delete your account and associated data by emailing getnearside@gmail.com. We may retain limited billing records where the law requires it.
Your rights
Under UK data protection law you have the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email getnearside@gmail.com. You also have the right to complain to the UK Information Commissioner's Office (ICO).
Security
Data is encrypted in transit, your connected inbox password is encrypted at rest, and CV files are stored privately. No system is perfectly secure, but we take reasonable measures to protect your information.
Changes
We'll update this page if our practices change and revise the date above. Material changes will be communicated where appropriate.