This Privacy Policy describes how J3C Consulting LLC, a Washington limited liability company doing business as SecondPage ("SecondPage," "we," "us"), collects, uses, and shares information when you use our website, applications, APIs, and related services (the "Service").
By using the Service, you agree to this Privacy Policy and our Terms of Service.
1. Information We Collect
Account Information. Name, email address, company name, password (hashed), and billing details. Payment card information is collected and processed directly by our payment processor (e.g., Stripe); we do not store full card numbers.
Google Account Data. If you sign in with Google, we receive your name, email address, and profile picture from your Google account. If you connect a Google service such as Google Analytics, Google Sheets or Drive, or Google Contacts and Directory, we access only the data you authorize on Google's consent screen and use it only to provide the feature you requested, such as showing your analytics on a Page or suggesting colleagues to invite. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your consent, for security or abuse investigation, or as required by law. SecondPage's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. You can revoke our access at any time from your Google account permissions page or from the Connections settings in the Service.
Customer Content. Data, files, text, and content you upload to, connect to, or submit through the Service, including data from third-party services you choose to connect.
Content Published by Our Customers. Our customers use the Service to create and publish Pages. The customer decides what goes into a Page, who can view it, and whether to collect view reports. For the Customer Content a customer uploads and for information about the people who view that customer's Pages, the customer is the party responsible for that data (the "controller" under EU and UK law), and SecondPage processes it on the customer's behalf and instructions as a processor. If you are viewing a Page and have a question or request about your data, please contact the customer who published the Page first. We support customers in responding to such requests and will forward requests to the publisher where we can identify them.
Usage and Device Information. Log data, IP address, browser and device type, pages viewed, features used, timestamps, and interactions with the Service, collected automatically.
Published Page View Reporting. When you open a Page that a SecondPage customer has published, we record that the Page was opened, when, how long it stayed open, roughly how far it was read, how long you spent on each section, the country the request came from, the type of device, the size of your browser window, the language your browser asks for, whether you printed the Page, and the website that linked to it. We do not place cookies or store anything on your device for this, and we do not store your IP address. If you are signed in to a SecondPage account when you open a Page, the owner of that Page can see your name and email address alongside this information. If you are not signed in, you are counted without being identified. We do not record your session or replay what you did on the Page.
Cookies and Similar Technologies. We use cookies and similar technologies for authentication, preferences, analytics, and (if applicable) marketing. You can control cookies through your browser; disabling some may impair the Service. We do not currently use advertising cookies or share information for cross-context behavioral advertising. Some browsers send a "Do Not Track" signal; because there is no common standard for interpreting it, we do not respond to Do Not Track signals at this time.
Communications. Information you provide when contacting support or responding to surveys.
2. How We Use Information
We use information to:
- Provide, operate, maintain, secure, and support the Service
- Process payments, manage subscriptions, and send transactional messages
- Develop, test, and improve the Service, including troubleshooting and quality evaluation
- Train and improve our models, algorithms, and systems using only aggregated, de-identified, or anonymized data. We do not use your identifiable Customer Content to train AI models
- Create aggregated, de-identified, or anonymized data, which we may use for any lawful purpose
- Monitor usage, prevent fraud and abuse, and enforce our Terms
- Communicate with you about features, updates, and offers (you may opt out of marketing at any time)
- Comply with legal obligations
3. How We Share Information
We do not sell your personal information for money. We share information with:
- Service Providers. Vendors that help us operate the Service, such as cloud hosting, payment processing (e.g., Stripe), analytics, email delivery, and customer support tools, under contractual confidentiality obligations.
- AI Model Providers. Where features are powered by third-party AI providers, relevant Customer Content may be processed by those providers to deliver the feature, subject to their data-use commitments.
- Connected Third-Party Services. If you connect a third-party service, we exchange data with it as needed to provide the integration you requested.
- Legal and Safety. When we believe disclosure is required by law, or necessary to protect the rights, safety, or property of SecondPage, our users, or others.
- Business Transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of the transaction.
We may add or change the service providers and AI model providers we use at any time. We require providers to protect your information and to use it only to provide services to us.
4. Data Retention
We retain personal information for as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and comply with legal obligations. We may retain aggregated, de-identified, or anonymized data indefinitely. Following account termination, we may delete Customer Content 30 days after termination. Free-plan content may be taken offline and deleted sooner under the retention schedule described in our Terms of Service. Export anything you need before cancelling. Page view reports are kept for 90 days for Pages published by Starter organizations and up to 400 days for Pages published by Pro and Custom organizations, then deleted.
5. Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect information. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials. If we learn of a security incident affecting your personal information, we will notify you and any relevant authorities as required by applicable law.
6. Your Choices and Rights
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at help@secondpage.cc. We will respond as required by applicable law and may need to verify your identity. If your request concerns a Page published by a SecondPage customer, or Customer Content a customer uploaded, please contact that customer first, as described under Content Published by Our Customers above.
Organization Accounts. If you use the Service through an organization, its administrators can access and manage the Customer Content and account information in that organization, including yours, and may respond to requests about that data.
Marketing. You may opt out of marketing emails via the unsubscribe link in any message.
California Residents. If you are a California resident, you may have rights under the CCPA/CPRA, including the rights to know, delete, and correct, and the right not to be discriminated against for exercising those rights.
EEA/UK Users. If you are in the EEA or UK, our legal bases for processing include performance of contract, legitimate interests (such as improving and securing the Service), consent where required, and legal obligations. You may have the right to lodge a complaint with your supervisory authority.
Washington Residents. Washington residents may have additional rights with respect to certain categories of data under Washington law.
7. Children
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
8. International Transfers
We are based in the United States, and information is processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your jurisdiction. By using the Service, you understand your information may be transferred to and processed in the United States.
9. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will provide notice by email or in-product before the changes take effect. The "Effective Date" above reflects the latest revision. Continued use of the Service after changes take effect constitutes acceptance.
10. Contact Us
J3C Consulting LLC, doing business as SecondPage
help@secondpage.cc