Privacy

SecondMindOS is operated from Ontario, Canada, and is responsible for the account-linked personal information described on this page. Connected providers process information for their stated service and may also have independent legal duties. Contact support@secondmindos.app for privacy questions or requests. The public mailing address is SecondMindOS, 197 Yonge Street, Suite 201 #1009, Toronto, Ontario M5B 0C4, Canada.

The workspace stores saved conversations, webpages, PDFs, files, and notes. Saved knowledge also includes findings extracted from source content, such as summaries, insights, decisions, and action items. These records, the source links, and search indexes stay in the browser profile by default. SecondMindOS does not save content from private browsing windows.

SecondMindOS processes account and selected workspace information to provide requested features and perform the service agreement. It uses consent for optional analytics and for actions you direct through connected services. It uses legitimate business interests, where permitted and balanced against individual rights, to secure the service, prevent abuse, diagnose failures, and improve reliability. It also processes records when required for tax, accounting, payment, consumer-protection, or other legal obligations.

Extension data can leave the device when you choose an account-linked feature, run an action for a connected integration, send a request to cloud AI, or submit support information. The public website can also send usage and account events when analytics is configured.

Transmitted data depends on the action and can include account and authentication information, the source or context selected for a cloud request, a source page address, or the data selected for a hosted feature. Review the selected provider and context before sending. Technical diagnostics are optional and exclude raw workspace content.

SecondMindOS uses service providers to host the application, manage accounts and synchronized storage, process billing, and deliver transactional email. Google and GitHub provide optional sign-in. When you choose managed AI, the selected context is sent to the configured OpenAI or Anthropic API. Deferred integrations do not receive account-linked data until they are separately enabled.

Raw and derived workspace content included in account sync is encrypted at rest and protected in transit with TLS. Hosted sync is not end-to-end encrypted with the backup passphrase; authorized SecondMindOS services can read synchronized content to provide the requested account features.

Product configuration settings are stored in service-readable form rather than receiving a separate application-encryption layer. Subject to the analytics choices available to you, these settings may be used to understand how features are used and improve SecondMindOS. Encryption at rest and account access controls still protect the underlying stored records. Saved workspace content is not used for behavioral analytics or to train AI models.

Cloud backup contents receive separate on-device encryption before upload and need the original passphrase for restoration on another device. Readable backup metadata and data sent to a deliberately selected integration remain subject to the destination provider's controls.

To save a copy of a workspace, select the workspace on Home, then open Settings → Workspace → Import and Export and click Download Backup. Import Backup restores a previously downloaded workspace JSON file. These JSON files are not encrypted by the Drive backup passphrase; store JSON backups privately.

You can delete local records in the extension and disconnect services in the integration settings. For help deleting account-linked data, contact support. Hosted OAuth tokens are stored server-side in encrypted form and are not included in the extension source code.

Local capture, search, and workspace storage do not require an account. Account sign-in uses a secure hosted identity service and a browser session. Hosted features use the account identifier to enforce access and plan limits.

Stripe processes paid checkout and billing. Account-linked billing records include customer and subscription identifiers, plan status, and billing dates. Signing out or uninstalling the extension does not cancel a subscription or delete hosted records.

Support receives the information you choose to send, such as the email address, problem description, and screenshots. Review reports before sharing; remove private messages, credentials, and unrelated personal information.

Contact support to ask about access, correction, or deletion of account-linked information. Describe the account and request without sending passwords or API keys. SecondMindOS support may require proof of account ownership before changing the records.

SecondMindOS accepts privacy requests from users worldwide through the same support path. Depending on local law, you may have rights to know or access personal information, correct it, receive a portable copy, delete it, restrict or object to processing, withdraw consent, or appeal a decision. SecondMindOS does not sell personal information or use it for personalized advertising, and exercising a privacy right does not result in discriminatory treatment.

A request can be limited when identity cannot be verified or when a record must remain for security, fraud prevention, accounting, tax, dispute, or other legal obligations. The response will explain the applicable limitation. You may also contact the privacy or data protection authority that applies where you live.

Waitlist registration stores the submitted email address, selected plan or feature, and any optional feature or workflow request in the hosted database. The email provider delivers confirmation and launch messages. Email confirmation does not create a paid subscription. Every waitlist email includes an unsubscribe link, and the stored opt-out preference prevents further waitlist messages.

When PostHog analytics is configured, website usage events use a random identifier. Server-side account and billing events can use the account identifier, and a signed-in session can link earlier usage to that account. These events help SecondMindOS assess which features and signup steps work. Analytics payloads exclude conversation text, email addresses, page query strings, and integration credentials.

SecondMindOS's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. SecondMindOS does not sell user data, use user data for personalized advertising, or use saved workspace content to train AI models. When a user deliberately sends selected content to a third-party AI provider, that provider processes the request under its own terms and privacy controls.

Local data stays until deletion of the local records, clearing of the browser profile, or removal of the extension. Deactivating an account cancels an attached paid subscription and starts a 90-day recovery window. Account-linked hosted data is permanently deleted after that window unless the user reactivates first. A confirmation email states the scheduled deletion date and reactivation path. Billing records and unsubscribe preferences may need to stay for accounting or to honor email choices. Disconnecting a provider stops future access but does not delete previously approved copies in that provider.

Exported files and backups stay in the selected storage location until deletion. Connected providers apply separate privacy and retention terms; sensitive content may be processed or stored outside the original device or country.

When information crosses borders, SecondMindOS relies on provider contracts and available lawful transfer mechanisms. The providers and countries involved depend on the feature you choose. Contact support for information about the transfer safeguards relevant to your account.