Privacy
DRAFT This page is a draft and will change. Last updated [date].
This page says, in plain words, what we keep about you, who can see it and how to have it removed.
What we keep
- Your account: name, email and time zone. Your password is handled by Supabase, our database service; we never see it.
- Booking requests: the time, any focus tags, your note and the images you upload.
- My studio: the works, images, series, statements, bios and CV files you add.
- Reviews you post, shown with your first name and last initial, or “Anonymous” if you choose.
- Mentor profiles: name, role, bio, portrait and work images. These are public once a profile is published.
Who sees what
- A booking’s note and images: only you and that session’s mentor. Images open through links that expire after a few minutes.
- Works you send from My studio as a selection: only that session’s mentor, and only until 30 days after the session ends.
- My studio is private to you. Nobody else sees it unless you send a selection, and Second Look admins can’t see studio files.
- Your email is never shown on the site.
Where it’s stored
- Supabase holds the database and uploaded files. Vercel hosts the website.
- Stripe handles card details once payments are switched on. Card numbers never reach Second Look.
- Google Calendar: only for mentors who connect it. We read when they’re busy (start and end times only) and add confirmed sessions to a separate Second Look calendar.
- Resend will send our emails once email is switched on.
What we don’t do
We don’t sell your information or use it for ads. There is no tracking beyond basic page analytics.
Cookies
One cookie keeps you logged in. Your browser also remembers whether you closed the notice banner and the time zone you last picked. Nothing else.
Seeing, exporting or deleting your data
Email [contact email] to get a copy of your data or to delete your account. You can already download your My studio works as a CSV file from My studio.
Changes
If this page changes, the date at the top changes too.