Privacy Policy

1. Introduction

Welcome to Second Brain ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered knowledge management application. Please read this policy carefully. By accessing or using Second Brain, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect information in the following ways:

• Account Information: When you create an account, we collect your name, email address, and profile picture (if provided through OAuth).
• User Content: Notes, links, file uploads, and other knowledge items you store in your Second Brain.
• Usage Data: Information about how you interact with the application, including pages visited, features used, and timestamps.
• Device Information: Browser type, operating system, and device identifiers collected automatically.

3. Google OAuth Data

When you sign in using Google OAuth, we access the following information from your Google account:

• Your name and email address
• Your profile picture

We do not access your Google Drive, Gmail, contacts, or any other Google services data. We only use the information necessary to create and manage your account. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

• To provide, maintain, and improve Second Brain's features and services
• To authenticate your identity and manage your account
• To process and store your knowledge items securely
• To provide AI-powered features such as summarization, tagging, and natural language queries
• To communicate with you about service updates and changes
• To ensure the security and integrity of our platform

5. AI Processing

Second Brain uses third-party AI providers (such as OpenAI and Google Gemini) to process your content for summarization, tagging, and natural language queries. When you use AI features, relevant portions of your content are sent to these providers for processing. These providers process data according to their own privacy policies and do not retain your data for training purposes beyond what is necessary to provide the service.

6. Data Storage & Security

Your data is stored securely using industry-standard practices. We use encrypted connections (SSL/TLS) for all data transmission. Your knowledge base is stored in PostgreSQL databases hosted on Neon, which provides enterprise-grade security and encryption at rest. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or destruction.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Request export of your data in a machine-readable format
• Restriction: Request limitation of processing of your personal data
• Objection: Object to processing of your personal data

To exercise any of these rights, please contact us using the information provided below.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. When you delete your account, we will delete your personal data and knowledge base content within 30 days, except where we are required to retain data for legal or compliance purposes.

9. Third-Party Services

Second Brain integrates with or relies on the following third-party services:

• Google OAuth: For authentication
• OpenAI / Google Gemini: For AI processing features
• Neon: For database hosting
• Vercel: For application hosting

Each of these services has its own privacy policy governing the use of your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of Second Brain after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: privacy@niheshr.com