Second Summit

Privacy Policy

Effective October 8, 2026

This is the beta version of our policy. We will update it as the service grows, and tell you about material changes.

Second Summit ("we", "us") helps people find jobs and prepare applications. This policy explains what we collect, why, who handles it, and your choices. Questions: support@secondsummit.ai.

What we collect

• Account: your email address and a password (stored only as a salted hash by our authentication provider), or your Google account email and name if you sign in with Google. We receive only the basic profile that Google shares for sign-in.
• What you give us: your resume text; the job titles, cities, remote preference, seniority levels, salary minimum and career goals you enter; your survey answers for cover letters; jobs you add by paste or link; and the status, notes and ratings you set on jobs.
• What we create for you: match scores and reasons, tailored resumes, cover letters, ATS keyword reports, skills-gap and insight summaries.
• Usage and billing: when you use AI features (type, time, size and cost, used to enforce daily limits), error logs, and subscription status. Payment card details are handled by our payment processor; we never see full card numbers.

Sign-in suggestions

If you use "Want a different way to sign in?" on the sign-in page, we record the option you chose (and any text you type under Other) with the date. It is not linked to an account or email address. We keep a one-way scrambled form of your network address for about a day's worth of rate limiting to stop abuse.

What we do not collect

We do not read your email, connect to your accounts on other sites, or access LinkedIn, Indeed or similar accounts. We do not sell your data and do not use it for advertising.

How we use it

To run the service: find and score jobs for you, generate the documents you ask for, keep your history, limit abuse and cost, send account emails (confirmation, password reset, trial and billing notices), and fix bugs and improve the product.

Who handles it (service providers)

• Supabase (database and sign-in) and Netlify (hosting and server functions) store and process your account and content.
• Google provides sign-in if you choose "Continue with Google".
• Anthropic (AI model provider) receives the text needed for each AI request, for example your resume and a job description, to produce scores and documents. It handles that text under its own commercial terms and privacy policy.
• Resend sends account emails. Stripe processes subscription payments.
• Job data providers: we receive public job postings from employers' career pages and licensed job-data services. Searches are made from our servers using job titles and places only, shared across users, and never include your personal data.

These providers act on our instructions under their own terms and privacy commitments.

Job postings

Postings come from employers' public job boards and licensed data services and are shown with a link to the original posting. They are not your personal data.

Retention and deletion

We keep your content while your account is active. You can delete individual jobs and documents in the app, and delete your account to remove your profile, resume, jobs and documents from our systems within 30 days. Backups age out on their normal schedule. Usage logs without content may be kept for security and accounting.

Your choices and rights

You can access, correct, export or delete your data in the app or by contacting us. California and other US state residents may have additional rights to know, delete and correct personal information and to opt out of sale or sharing; we do not sell or share personal information for advertising, and we will not treat you differently for using these rights.

Security

Per-user access rules in the database keep each person's data private to their account; data is encrypted in transit; secrets are kept on the server. No system is perfectly secure; tell us at support@secondsummit.ai if you find a problem.

Children

The service is for people 18 and older and is offered in the United States only.

Changes

We will post changes here and update the effective date; material changes will be emailed.

Back to Second Summit · Privacy Policy · Terms of Service

More from us: Punch List, the shared to-do list that fills itself in · BookWard, a book tracker that learns why you like what you like