1. Early access
SecondDesk is in early access and free while we build it. A new account opens a desk with sample data, and connectors to real mail, chat and calendars roll out over time. Until you connect an account, nothing is read from it.
The live demo uses made-up names, messages and numbers. Changes you make in the demo or in your desk are kept in your own browser (local storage). Clearing site data resets them.
2. What SecondDesk reads
Once connectors are available, SecondDesk reads only what you connect, at the access level shown on each connection:
- Mail, chat messages and mentions from the accounts you connect
- Calendar events and meeting transcripts
- Documents in folders you choose
- Device status from the Desk Companion
3. Account information
When you create a desk we keep your email address and name to sign you in. There are no passwords. You sign in with a passkey or an email link.
4. What is stored
We store the summaries, drafts, tasks and settings needed to run your desk. Raw message content is kept for the retention period you set (default 30 days) and then deleted. Recordings and transcripts follow your recording consent setting.
6. Email processing
Sign-in links and codes are sent by email. When email delivery is enabled, we use Resend to send them, and Resend receives your email address and the message. Until it is enabled, links are shown on screen and nothing is emailed.
7. First-party event logs
We log a small set of product events, such as page views, button clicks and sign-up steps, on our own servers to learn which pages help people get started. The logs contain the page path and the event name. They contain no message content and are not shared with advertisers.
8. Analytics
We use Vercel Web Analytics and Vercel Speed Insights on the website. They are cookieless: they count aggregate page views and measure page performance (load speed and similar timings), and they do not set cookies or follow you across other sites. We use them to see which pages help people get started and to keep the site fast.
They are not used for advertising, and nothing from your desk, such as messages, drafts or meeting content, is sent to them.
9. Subprocessors
These providers process data on our behalf to run SecondDesk:
| Provider | What it does |
|---|---|
| Vercel | Hosting, server logs, cookieless analytics. |
| Supabase | Accounts, passkeys and sign-in sessions (United States). |
| Resend | Sign-in email, when email delivery is enabled. |
Vercel
Hosting, server logs, cookieless analytics.Supabase
Accounts, passkeys and sign-in sessions (United States).Resend
Sign-in email, when email delivery is enabled.
10. What SecondDesk never does
- Send, submit, pay or delete anything without your approval in Review
- Speak or type as you in a live meeting
- Enter your passwords or credentials, on your computer or anywhere else
- Sell your data
11. Recording and consent
When the Stand-in joins a meeting it is labeled as a notetaker and posts a notice in the meeting chat. Your workspace policy decides whether participants are asked first, only told, or not recorded at all. Meetings with external guests or sensitive topics always need your individual approval.
13. Your choices
You can export or delete your workspace data, change retention, disconnect any account and turn any automation off from Settings and the Admin Console. Disconnecting stops reading immediately.
14. Contact
For privacy questions, use the contact page. The owner will confirm a dedicated privacy address before general availability.