Privacy Policy

Last Updated: 18 June, 2026

At SecondBrain, we value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, process, and protect your information when you use our website, application, and AI-powered productivity services.

1. Google API Scopes & OAuth Integration

SecondBrain integrates directly with your Google Account (Gmail and Google Calendar) using official Google OAuth 2.0 credentials.

Our service requires specific Google API scopes to function:

Gmail Scopes

  • Read emails
  • Search emails
  • Draft emails
  • Send emails
  • Organize and manage mailbox content

Google Calendar Scopes

  • View calendar events
  • Create and manage events
  • Synchronize schedules
  • Assist with meeting planning

Important Data Usage Policy:

SecondBrain does not sell, share, or use Google Workspace data for advertising purposes. Additionally, data obtained through Google Workspace APIs is not used to develop, improve, or train generalized artificial intelligence or machine learning models.

2. Information We Collect

We collect only the information necessary to provide our services.

Account Information

Name, Email address, Profile image (if provided), and Authentication details processed through Clerk.

OAuth Credentials

To access Gmail and Google Calendar on your behalf, we store OAuth access credentials securely. These credentials are encrypted in transit and at rest.

Usage Information

Feature usage statistics, API usage counts, error logs, and service performance metrics to help maintain reliability and enforce service limits.

3. How We Use Your Information

Your information is used solely to:

  • Provide and maintain your SecondBrain workspace
  • Authenticate your account
  • Connect to Gmail and Google Calendar
  • Enable AI-powered email and scheduling assistance
  • Improve application reliability and security
  • Respond to support requests

4. Data Sharing and Third Parties

We do not sell, rent, or trade your information. Your information may be processed by trusted service providers required to operate the platform:

Google Services

Used directly for Gmail and Google Calendar integrations.

AI Providers

When you use AI-powered features, limited contextual information may be processed by AI providers such as OpenAI solely to fulfill your request. We do not permit AI providers to use your data for model training.

Infrastructure Providers

Hosting, database, authentication, and security providers used to operate the platform.

5. Data Security and Deletion

We implement reasonable technical and organizational safeguards to protect user data.

You may revoke Google access at any time through your Google Account security settings. You may also request deletion of your account and associated data by contacting us.

6. Contact Information

For privacy questions, account deletion requests, or concerns regarding this Privacy Policy, please contact:

Email: sameerbhagtani0@gmail.com