Privacy Policy

Effective Date: March 22, 2026

SecondDesk AI Inc. (“SecondDesk,” “we,” “us,” or “our”) operates the website seconddesk.ai and the SecondDesk platform (the “Service”). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. Information We Collect

a. Account Information

When you sign up or log in using Google OAuth, we receive your name, email address, and profile picture from your Google account. We do not receive or store your Google password.

b. Usage Data

We collect information about how you interact with the Service, including pages visited, features used, search queries, and timestamps.

c. Recruiter & Sourcing Data

The Service allows healthcare recruiters to search and manage physician and clinician profiles. Profile data is sourced from publicly available registries (such as the NPPES/NPI Registry) and other lawful data sources. We do not collect protected health information (PHI) as defined by HIPAA.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Facilitate recruiter sourcing and candidate matching
• Communicate with you about the Service
• Monitor usage and prevent abuse

3. Third-Party Services

We use the following third-party services to operate the platform. Each processes data in accordance with their own privacy policies:

• Google — authentication (OAuth 2.0)
• Vercel — hosting and deployment
• Supabase — authentication and database
• MongoDB Atlas — data storage
• Anthropic — AI-powered features

4. Data Sharing

We do not sell your personal information. We may share data only in the following circumstances:

• With third-party service providers as described above, solely to operate the Service
• If required by law, regulation, or legal process
• To protect the rights, safety, or property of SecondDesk, our users, or the public

5. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data by contacting us.

6. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission or storage is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information. To exercise these rights, contact us at the email below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

9. Contact Us

If you have questions about this Privacy Policy, contact us at:
Email: privacy@seconddesk.ai