Second Summit
Who our service providers are
Last reviewed October 19, 2026. We update this list when we add or change a provider.
To run Second Summit we use other companies to process some data for us. This page lists them by purpose, with what each one receives. They act on our instructions, under their own terms and privacy commitments. The Privacy Policy explains what we collect and your choices. Questions: support@secondsummit.ai.
AI image provider: Google (Pro look only)
- What it receives: when you use Pro look and agree on the consent screen, the photo you send (and up to three more photos of you if you add them) and the request, which is a fixed set of choices you make: outfit colour, backdrop, light and skin retouch. We also send your photo to the same provider for the photo check that runs before Pro look.
- What it keeps: a copy of your request and the result for up to 55 days, to check for misuse.
- How it uses it: it says it does not use them to improve its products.
- Deleting it: we cannot delete that copy. We delete our own copy of your photo as soon as your picture starts being made, and the finished picture when you download it, and at the latest within an hour. See the Headshot photo policy.
- The free headshot editor (Clean up) does not use this provider: your photo stays in your browser.
AI text providers: Anthropic
- What it receives: the text needed for each AI feature you use, for example your resume and a job description to produce scores, tailored resumes and cover letters, the answers you give Trail Notes to help write a draft of your personal page, and the text of a question when you ask for a drafted answer.
- Terms: it handles that text under its own commercial terms and privacy policy. We do not sell it or use it for advertising.
Voice for AI Advisors: OpenAI (only if you use hosted voice)
- What it receives: your spoken question, to turn it into text, and the reply text, to turn it into speech. We do not store audio. This applies only when the hosted voice is turned on and you use it.
Email delivery: Resend
- What it receives: your email address and the text of the emails we send you (account emails, the monthly data brief if you subscribe, headshot tips if you ask for them), and, if you use the application address, the mail sent to it.
Payments: Stripe
- What it receives: your payment details when you buy. Stripe handles them on its own page, so your card details never reach us. We receive the fact that you paid and the amount.
Hosting and database: Netlify and Supabase
- Netlify hosts the site and runs our server functions. Supabase stores your account and content and handles sign-in with a password. They store and process your data on our behalf.
Sign-in, if you choose it
- Google, Microsoft, LinkedIn and Apple provide "Continue with ..." sign-in. We receive only the basic profile they share for sign-in.
Job data
- We receive public job postings from employers' career pages and licensed job-data services. Searches are made from our servers using job titles and places only, shared across users, and never include your name, resume or other personal data.
Notifications and analytics
- Apple delivers push notifications to the iPhone app if you turn them on.
- Google Analytics counts visits to our public marketing pages (not the app) when it is switched on, and Google Fonts serves the typefaces on some pages.
We update this list when we add or change a provider, and note material changes in the Privacy Policy.