Privacy Policy

1. Who is responsible

Second Look is operated by Ben Dellicarpini, an individual based in Ohio, USA. Contact: support@secondlookfinance.com.

For the emails and vendor details our business customers put into Second Look, the customer decides what to submit and why, and we process that information on their behalf (see our Data Processing Agreement). For account and billing information, we decide how it's used, as described below.

2. What we collect

Information you give us

• Account details: your name, work email, company name, and a securely hashed password (we never store the password itself).
• Vendor details: vendor names, email domains, phone numbers and notes that you add. The service is designed to refuse bank account numbers.
• Emails you check: the text and headers of emails you paste or upload. These may contain personal information about the sender and others, such as names, email addresses and phone numbers.
• Check results and checklist entries: verdicts, findings, who ran each check, and who recorded each verification step and when.
• Billing details: handled by Stripe. We receive your Stripe customer ID, plan, subscription status and billing dates, but not your full card number.

Information collected automatically

• Security and usage information: IP address and request details, used to keep accounts secure and to limit abuse (for example, too many login attempts).
• Cookies and local storage: one essential cookie that keeps you logged in, and a setting in your browser that remembers light or dark mode. We don't use advertising or tracking cookies.

Second Look never opens links or attachments inside the emails you check. It only reads their text.

3. How we use information

• to provide the service: running checks, keeping your log, managing your team and billing;
• to keep the service secure and prevent abuse;
• to provide support and send important service messages (for example, about billing or changes to these policies);
• to improve the service, using aggregated information that doesn't identify the contents of your emails;
• to comply with the law.

We don't sell personal information, and we don't use the emails you check for advertising or to train AI models.

4. Who we share it with

We share information only with service providers that help us run Second Look, under contracts that protect it:

• Render (Render Services, Inc.): hosts the application and database, in the United States.
• Stripe: processes payments and manages subscriptions.
• Resend: sends account emails, such as password reset links. It receives your email address and the message we send you, never the emails you check.
• Cloudflare: runs our domain name and forwards messages sent to our support address.
• Anthropic (Claude): only if your plan includes AI review and it is switched on. The text of emails you check, and the automated findings, are sent to Anthropic to produce the AI review. Account owners can switch this off in Settings.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a business transfer (for example, if Second Look becomes a company), in which case this policy will continue to apply.

5. How long we keep it

• Email text you check: deleted automatically after 30 days by default. Account owners can choose a shorter or longer period, or not to store email text at all, and can delete any email immediately.
• Check results, checklist entries and vendor details: kept while your account is active, so you have a record of verification.
• After your account ends: we delete Customer Data within 90 days, except where we must keep certain records (such as billing records) by law.

6. Security

We use measures including hashed passwords, secure session cookies, encrypted connections (HTTPS), per-company data separation, rate limiting and automatic deletion of email text. No system is perfectly secure; if a breach affects your information, we will notify you as required by law.

7. Your choices and rights

You can see and update most information in the app. Depending on where you live (for example, California, other US states with privacy laws, or the European Economic Area and United Kingdom), you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or limit certain processing. To make a request, email support@secondlookfinance.com. If your information was submitted by one of our business customers (for example, you sent an email that they checked), we may refer your request to that customer.

8. International transfers

Second Look is operated from the United States, and information is processed in the United States. If you use the service from outside the US, you understand your information will be transferred there.

9. Children

Second Look is a business service and isn't intended for anyone under 18.

10. Changes

We'll update this policy when our practices change and post the new date at the top. For material changes, we will notify account owners in advance.

11. Contact

Privacy questions or requests: support@secondlookfinance.com.