Privacy Policy

---

Privacy Policy 

Last Updated: March 8, 2026

2ndThoughts ("we," "us," "our") operates the website https://2ndthoughts.ai and the associated SEQUITUR service (collectively, the "Service"). We are committed to protecting your privacy and handling any personal information we collect responsibly.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding that information. By accessing or using the Service, you agree to the practices described in this policy.

We collect information in the following categories:

a. Information You Provide Directly

• Account information (name, email address, password, company name, job title) when you register, sign in, or request access
• Contact information when you reach out via forms, email, or support
• Uploaded or connected data when using SEQUITUR (HR records, performance metrics, engagement surveys, sales data, operational logs, etc.) — this may include personal data about your employees, customers, or other individuals
• Payment information (handled by third-party processors — we do not store full card details)
• Communications, feedback, or support tickets

b. Automatically Collected Information

• Device and browser data (IP address, browser type/version, operating system, device identifiers)
• Usage data (pages visited, features used, time spent, referring URLs, SEQUITUR queries and interactions)
• Log data and security/event logs

c. Cookies and Similar TechnologiesWe use cookies, web beacons, and similar tools for authentication, analytics, and site functionality. You can manage preferences via your browser settings. Our demo and public pages use limited analytics cookies; logged-in enterprise usage may involve more persistent session cookies.

We use collected information to:

• Provide, maintain, and improve the Service (including SEQUITUR's natural-language querying and AI inference)
• Authenticate accounts and provide customer support
• Process subscriptions/payments (if applicable)
• Analyze usage trends and service performance
• Send service-related communications (security alerts, updates, feature announcements)
• Detect, prevent, and investigate fraud, abuse, or security incidents
• Comply with legal obligations
• With your consent — send marketing communications (you can opt out at any time)

Important — Customer Data Processed in SEQUITURData you upload or connect to SEQUITUR is processed solely to answer your queries and generate insights. We do not use your customer data to train general-purpose models, improve public AI models, or for purposes unrelated to providing the Service to you unless you explicitly opt in to optional improvement programs (if offered in the future).

We do not sell personal information. We share information only in limited circumstances:

• Service providers — cloud hosting (e.g., AWS, Azure), analytics (limited), payment processors (Stripe, etc.), email delivery, support tools — all bound by strict data protection obligations
• AI inference providers — if SEQUITUR uses third-party LLM APIs for query understanding or generation, only anonymized/prompt-engineered portions are sent (no raw datasets)
• Business transfers — in connection with merger, acquisition, or sale of assets
• Legal requirements — to comply with law, respond to subpoenas/court orders, protect rights/safety
• With your consent — or at your direction (e.g., sharing a dashboard/report)
• 
  

Data is primarily stored in the United States. If you access the Service from outside the US (especially the EEA, UK, or Switzerland), your information may be transferred to and processed in the US, a jurisdiction that may not offer the same level of protection as your home country. We use appropriate safeguards (e.g., Standard Contractual Clauses where required) for such transfers.

We keep personal information only as long as necessary:

• Account data — while your account is active + a reasonable period after termination
• Usage logs — typically 12–24 months for security/analytics
• Customer-uploaded data in SEQUITUR — retained while needed for your active use; deleted upon account termination or at your request (subject to backup recovery windows of up to 30–90 days)

Depending on your location, you may have rights to:

• Access, correct, or delete your personal information
• Opt out of certain processing (including marketing)
• Withdraw consent where processing is consent-based
• Request restriction or portability (in some jurisdictions)
• Lodge a complaint with a supervisory authority

California Residents (CCPA/CPRA): You have the right to know what personal information we collect/use/share, request deletion, and opt out of any "sale" or "sharing" (we do not sell or share for cross-context behavioral advertising).

To exercise rights: Contact us at privacy@2ndthoughts.ai. We may require identity verification.

We implement reasonable technical and organizational measures to protect your information (encryption in transit/rest where appropriate, access controls, regular security reviews). However, no system is completely secure — please use strong passwords and protect your account credentials.

Our Service is not directed to individuals under 16 (or 13 in some jurisdictions). We do not knowingly collect personal information from children. If we learn we have collected such data, we will delete it.

We may update this policy from time to time. Changes will be posted here with an updated "Last Updated" date. Material changes will be notified via email or prominent notice on the Service.

If you have questions about this Privacy Policy or our data practices, contact:

Email: privacy@2ndthoughts.ai Address: 2ndThoughts (physical address if required in your jurisdiction — otherwise omit)

Thank you for trusting 2ndThoughts with your data.