Data handling
Privacy notice
Revision: Draft for review
What we collect
We store the submitted homepage URL, selected review intent, payment identifiers, an encrypted checkout email, private review assets, the review, delivery history, and short-lived abuse-prevention records. Stripe handles card details. Second Pass does not store them.
Why we use it
We use this information to confirm the order, produce and deliver the review, recover its private link, prevent abuse, support the customer, and keep operational records.
Service providers
Cloudflare hosts the application, database, and private assets. Stripe processes payment. Resend delivers transactional email. PostHog receives only a small set of product events on public marketing pages. Autocapture, session replay, automatic page views, and private review analytics are disabled. The review pipeline also sends PostHog one event per generated review with the reviewed site’s hostname, model usage and estimated cost. Reviews are written with the help of AI model providers; the public pages and screenshots of the site under review are sent to those providers for that purpose.
Retention
Unpaid drafts stop accepting checkout after seven days. If checkout was opened, a minimal reconciliation record may remain for up to seven additional days so delayed signed payment events can be handled safely. Completed reviews are scheduled for deletion after one year. Retired reviews are scheduled for deletion after seven days. Operational backups and provider records may follow their own limited retention periods.
Your choices
You may ask for access, correction, or deletion where applicable. Early deletion ends access to the private review. Use the privacy contact below for a request.