Privacy Policy
This policy explains what personal data Second Eye collects when you use getsecondeye.com, why we collect it, who we share it with, and the rights you have over it. We keep data collection to the minimum needed to give you a useful photo critique.
1Who we are
Second Eye ("we", "us") is an AI photography-critique service operated by LOUJU SA, based in France. For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for the personal data described in this policy.
If you have any question about this policy or your data, contact us at hello@getsecondeye.com.
2What we collect
| Data | When | Why |
|---|---|---|
| Your email address | When you create an account or sign in | To create your account and send you sign-in links |
| Your pseudo and your email preference | When you set up or edit your account | To run your account and respect your choice about marketing emails |
| Your plan and usage (number of critiques used this period) | As you use the service | To apply your monthly allowance |
| The photo you upload | When you request a critique | To analyse the image and generate your feedback. Never stored by us (see section 3) |
| Image metadata (EXIF): camera settings such as aperture, shutter speed, ISO and focal length | Read in your browser when you upload a photo | To give the critique useful technical context. GPS location is never sent or stored |
| Optional details you type (photo type, shooting conditions, creative intent) | When you request a critique | To tailor the feedback |
| Your critiques: a small thumbnail, the critique text, scores, photo type and title (your file name) | After each critique | To provide your critique history |
| Basic usage and device data (pages viewed, actions taken, approximate region, browser type) | While you use the site | To understand and improve the product |
| Server logs (including IP address) | Automatically, on every request | Security and reliability |
We do not ask for, or intentionally collect, any special-category data (such as health, political or biometric information). Please avoid uploading photos whose main purpose is to reveal such information about identifiable people.
3Photos and critiques
- What we process: your photo, resized in your browser, analysed in memory and sent to Anthropic (our AI provider) to generate the critique. It is never stored by us: not in our database, not in our file storage, not in our logs.
- What we keep: a thumbnail (256 px maximum on the longest side, WebP or JPEG, re-encoded in your browser so that all metadata, including GPS location, is removed), the critique text, the scores, the photo type and the title, linked to your account.
- Why: to provide your critique history. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).
- How long: until you delete the critique or your account. Deletion is immediate and includes the thumbnail.
- Who can see it: only you. Thumbnails sit in a private storage area that only your account can read. They are never used for analytics or to train AI models.
- Our AI provider: Anthropic processes your photo under its commercial terms, which do not allow it to train its models on your data. We recommend not uploading images you would not be comfortable sharing with a third-party processing service.
4Why we're allowed to use your data (legal bases)
- To run your account and provide the critiques and history you ask for: performance of our contract with you (Art. 6(1)(b) GDPR).
- To send you photography tips and product news by email: your consent, given by ticking the box when you create your account or by switching it on in your account page. It is off by default, and you can withdraw it at any time.
- To measure and improve the site, and keep it secure: our legitimate interest in running and improving a reliable service, balanced against your privacy.
5Who we share it with
We do not sell your data. We share it only with the service providers ("processors") that make Second Eye work:
- Supabase (hosted in the EU): stores your account, your critiques and their thumbnails, and handles sign-in.
- Netlify: hosts the website and runs the functions that process your requests.
- Anthropic: provides the AI model that analyses your photo and returns the critique.
- Brevo: sends sign-in emails and, if you opted in, our newsletter.
- PostHog (EU region): product analytics.
- Stripe: will process payments once paid plans open. We never see or store your card details.
Each provider processes your data only on our instructions and under a data-processing agreement.
6International transfers
Some of our providers (including our AI provider, and analytics if not on an EU region) process data outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by an appropriate safeguard such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
7How long we keep it
- Uploaded photos: never stored by us; held in memory only while the critique is generated.
- Account data, critiques and thumbnails: until you delete them or delete your account.
- Marketing emails: until you unsubscribe or switch the option off in your account.
- Analytics data: kept for 24 months, then deleted or anonymised.
- Server logs: kept for a short period for security, then deleted.
8Your rights
Under the GDPR you have the right to: access the data we hold about you; correct it; delete it; restrict or object to its use; receive it in a portable format; and withdraw any consent you gave, at any time, without affecting processing carried out before withdrawal.
You can change your email preference and delete your account yourself, at any time, from your account page. Deleting your account immediately erases your profile, your critiques and all your thumbnails. To unsubscribe from emails, you can also use the link in any email we send. To exercise any other right, email us at hello@getsecondeye.com. If you are unhappy with how we handle your data, you can lodge a complaint with the French data-protection authority, the CNIL.
9Local storage & cookies
To keep you signed in, we store a session token in your browser's local storage. It is strictly necessary for your account to work and is removed when you sign out. Our analytics provider may set limited storage to measure usage; where required, we will ask for your consent first. Nothing we store is used to track you across other websites.
10Children
Second Eye is not directed at children. If you are under 15, please do not use the service or submit any personal data without the consent of a parent or guardian.
11Changes to this policy
We may update this policy from time to time. When we do, we will change the "last updated" date above, and for significant changes we will make a more visible notice on the site.