Privacy Policy
This policy explains what personal data Second Eye collects when you use getsecondeye.com, why we collect it, who we share it with, and the rights you have over it. We keep data collection to the minimum needed to give you a useful photo critique.
1Who we are
Second Eye ("we", "us") is an AI photography-critique service operated by [YOUR NAME OR REGISTERED ENTITY], based in France. For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for the personal data described in this policy.
If you have any question about this policy or your data, contact us at [privacy@getsecondeye.com].
2What we collect
| Data | When | Why |
|---|---|---|
| The photo you upload | When you request a critique | To analyse the image and generate your feedback |
| Image metadata (EXIF), which can include camera settings and, in some cases, GPS location | Read from your photo when you upload it | To give the critique useful technical context |
| Optional details you type (photo type, shooting conditions, creative intent) | When you request a critique | To tailor the feedback |
| Your first name and email address | When you choose to unlock the PDF export | To deliver the export and, with your consent, send occasional tips |
| Basic usage and device data (pages viewed, actions taken, approximate region, browser type) | While you use the site | To understand and improve the product |
| Server logs (including IP address) | Automatically, on every request | Security and reliability |
We do not ask for, or intentionally collect, any special-category data (such as health, political or biometric information). Please avoid uploading photos whose main purpose is to reveal such information about identifiable people.
3Your photos: what happens to them
When you upload a photo, it is resized in your browser and sent to our AI processing provider solely to generate your critique. We do not save your uploaded photos on our own systems after the critique is produced, and we do not use your photos to train our own models. Your photo is processed by our provider (see section 5) under their terms; we recommend not uploading images you would not be comfortable sharing with a third-party processing service.
4Why we're allowed to use your data (legal bases)
- To provide the critique you ask for — the processing is necessary to deliver the service you actively request.
- To send you photography tips and product news by email — your consent, given via the tick-box when you unlock the PDF. You can withdraw it at any time (see section 8).
- To measure and improve the site, and keep it secure — our legitimate interest in running and improving a reliable service, balanced against your privacy.
5Who we share it with
We do not sell your data. We share it only with the service providers ("processors") that make Second Eye work:
- Netlify — hosts the website, runs the analysis function, and stores the name and email you submit through the unlock form.
- Anthropic — provides the AI model that analyses your photo and returns the critique.
- PostHog — provides privacy-focused usage analytics. If you have not installed PostHog, remove this line and the analytics rows above.
- [YOUR EMAIL PROVIDER — e.g. MailerLite / Kit] — stores your email address and sends the newsletter, once you have connected one. Add it here before you start emailing subscribers.
Each provider processes your data only on our instructions and under a data-processing agreement.
6International transfers
Some of our providers (including our AI provider, and analytics if not on an EU region) process data outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by an appropriate safeguard such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
7How long we keep it
- Uploaded photos: not retained by us once the critique is generated.
- Name and email: kept until you unsubscribe or ask us to delete them.
- Analytics data: kept for [e.g. 12 months], then deleted or anonymised.
- Server logs: kept for a short period for security, then deleted.
8Your rights
Under the GDPR you have the right to: access the data we hold about you; correct it; delete it; restrict or object to its use; receive it in a portable format; and withdraw any consent you gave, at any time, without affecting processing carried out before withdrawal.
To unsubscribe from emails, use the link in any email we send. To exercise any other right, email us at [privacy@getsecondeye.com]. If you are unhappy with how we handle your data, you can lodge a complaint with the French data-protection authority, the CNIL.
9Local storage & cookies
To make the site work, we store two small values in your browser: one remembering that you have unlocked the PDF export, and one counting how many critiques you have run. These stay on your device and are not used to track you across other websites. Our analytics provider may set limited storage to measure usage; where required, we will ask for your consent first.
10Children
Second Eye is not directed at children. If you are under 15, please do not use the service or submit any personal data without the consent of a parent or guardian.
11Changes to this policy
We may update this policy from time to time. When we do, we will change the "last updated" date above, and for significant changes we will make a more visible notice on the site.