Privacy Policy
Last updated: February 12, 2026
Secnd ("Service") is operated by Secnd ("Company", "we", "us"). This Privacy Policy explains what data we collect, why, and how we protect it. We keep this straightforward — no legal fog.
1. What We Collect
| Data Type | What & Why |
|---|---|
| Account info | Email, name, business name — to create and manage your account. If you use Google sign-in, we receive your Google profile name and email. |
| Business data | Settlement reports, order files, SKU data you upload — to run anomaly detection, P&L analysis, and reconciliation. This is the core of what we do. |
| Usage data | Pages visited, features used, timestamps — to improve the product and fix bugs. We use Sentry for error monitoring. |
| Device info | Browser type, screen size, IP address — for security and to make the interface work properly. |
What we don't collect: We don't collect payment card details directly (handled by payment processors), we don't track you across other websites, and we don't buy data about you from third parties.
2. How We Use Your Data
We use your data to provide the Secnd service: analyzing your settlement data, detecting overcharges, calculating P&L, and generating reports. We also use it to maintain your account, send service-related communications, monitor for errors, and improve our algorithms.
We do not use your individual business data for advertising. We do not sell your data. Period.
3. Data Storage & Security
Your data is stored on Supabase (hosted on AWS infrastructure) with row-level security policies ensuring strict tenant isolation — your data is only accessible to your account. All data is encrypted in transit (TLS) and at rest.
Our backend runs on Render with environment-level secrets. Authentication uses Supabase Auth with JWT tokens. Google OAuth follows Google's security standards.
We implement reasonable security measures to protect your data, but no system is 100% secure. If we ever discover a data breach affecting your account, we'll notify you within 72 hours.
4. Third-Party Services
We use the following third-party services that may process some of your data:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database & authentication | Account info, uploaded business data |
| Google OAuth | Sign-in | Email, name (only if you choose Google sign-in) |
| Vercel | Frontend hosting | IP address, browser info (standard web logs) |
| Render | Backend hosting | API requests (authenticated) |
| Sentry | Error monitoring | Error logs, stack traces (no business data) |
Each service operates under its own privacy policy. We only share the minimum data necessary for each service to function.
5. Data Retention
We keep your data for as long as your account is active. If you delete your account, we'll remove your data within 30 days, except where required by law to retain records (such as for tax or legal compliance purposes).
Anonymized, aggregated analytics data (no individual seller identification) may be retained indefinitely to improve our detection algorithms.
6. Your Rights
You have the right to:
Access — Request a copy of your personal data. Correct — Update inaccurate information. Delete — Request deletion of your account and data. Export — Download your uploaded data. Withdraw consent — Revoke any consent you've given, which may limit Service functionality.
To exercise any of these rights, email contact@secnd.co. We'll respond within 30 days.
7. Cookies
Secnd uses essential cookies only — for authentication (keeping you logged in) and session management. We don't use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie banner needed because we only use what's strictly necessary.
8. Children's Privacy
Secnd is a business tool for e-commerce sellers. We don't knowingly collect data from anyone under 18. If we discover we've collected data from a minor, we'll delete it immediately.
9. Indian Law Compliance
We comply with India's Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Your financial business data is treated as sensitive personal data and protected accordingly.
10. Changes to This Policy
We'll update this policy as our practices evolve. Material changes will be communicated via email or through the Service. The "last updated" date at the top always reflects the current version.
11. Contact
Privacy questions or data requests? Email contact@secnd.co.
Secnd
India