Privacy
What we collect, and what we do not.
This policy describes exactly what happens to the information you send us, in plain language and without the boilerplate.
What we collect
For an assessment enquiry, we collect only what you type into the form: your name, work email, company name, website, what you sell on, rough company size, the systems an order passes through, and the description of what last broke.
We do not run analytics, advertising or session-recording software on this site. There are no tracking cookies. We do not build a profile of you, and we do not buy or sell contact data.
Why we collect it
To reply to your enquiry and, if you go ahead, to scope and deliver the work. That is the only purpose. We do not add you to a marketing list, and we will not email you about anything else unless you ask us to.
Who processes it
Resend delivers assessment enquiries to us as email. Our hosting provider, Vercel, processes the requests needed to serve the site. If shared abuse protection is enabled, it stores only short-lived anonymous request counters. We do not store enquiries in a customer database.
This site does not send anything you type here to an AI model. Where an automation we build for a client uses one, that is named, scoped and agreed in the engagement contract rather than covered by this policy.
How long we keep it
Enquiry emails are kept for up to 24 months so we can pick up a conversation you started earlier, then deleted. If you become a client, engagement records are kept for as long as we are legally required to keep business records.
Client data during an assessment or build
An assessment installs nothing and changes nothing. No agent, no collector, no plugin. Where read-only access to a tool helps, we ask for viewer access only, never anything that can move money, use it solely to produce your assessment, and ask you to revoke it once the work is delivered.
Order and operational records you share with us are used only to size and design the monitoring, and are deleted at the end of the engagement unless you ask us to keep them for a build.
A build needs more than read-only access, and order data and logs contain personal data about your customers. What is accessed, which model processes it, where it runs and how long anything is retained is agreed in writing before the build starts, never assumed.
Your rights
You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email us and we will action it. Deletion requests are honoured within 30 days unless we are legally required to keep something.
Contact
Questions about this policy, or a request about your data, go to hello@secondframe.co. Secondframe operates from Vancouver, Canada.