We collect your email, the addresses you look up, and what you bought. We do not sell personal information, and we have never done so. Analytics do not load at all until you accept them. You can ask for a copy of your data or its deletion by email, and we will action it within 30 days.

• Account details. Your email address, and your name if you sign in with Google. We use magic links and optional Google sign-in, so most accounts have no password for us to store.
• What you look up. The addresses, concepts and neighbourhoods you request reads for, the answers you give in the intake questions (such as how many restaurants you have opened before), and the reads and watches you save. These are the product working, and they are tied to your account.
• Purchases. What you bought, when, and for how much. Stripe handles the payment itself — card numbers never reach our servers.
• Email activity. Whether a report or digest we sent was delivered, and whether it bounced, so we can tell a broken address from an uninterested reader.
• Technical records. Standard server logs, and — when something breaks — an error report containing the message, the page you were on and your browser's user-agent string. These go into our own database, not a third-party monitoring service.
• Usage analytics, only with consent. Which pages and features get used. Nothing is sent, and the analytics library is not even loaded, unless you accept analytics in the banner. Decline and it stays off; the product works the same either way.

We do not ask for and do not want financial account details, government identifiers, or any of the special categories of data — health, biometrics, precise geolocation of a person, and so on. Please do not send them to us.

To run the product and give you what you asked for; to take payment and keep tax records; to send the emails you signed up for; to keep the service secure and debug it when it breaks; and, in aggregated and de-identified form, to improve the model. Where the law requires a lawful basis, ours is performing our contract with you, our legitimate interest in operating and securing the service, your consent for analytics and for non-essential email, and compliance with legal obligations for records we must keep.

We use a small number of vendors to run the product. They process data on our instructions, and none of them is permitted to use it for their own purposes. This is the real list, verified against our own code:

Parts of this product use Google Maps Platform services (Places data), and your use of those parts is also subject to Google's Terms of Service and Privacy Policy. Where a figure is derived from Google data we say so and attribute it to Google.

We may also disclose information if the law requires it, or to protect our rights or someone's safety. If we are ever compelled to hand over customer data, we will tell the affected customer unless we are legally barred from doing so.

We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are used in California law.

Account data and saved reads stay while your account is open, because a saved read losing its history would defeat the point of saving it. Purchase records are kept for seven years for tax and accounting. Error reports and server logs are kept for up to 12 months. Analytics events are kept according to our Mixpanel project's retention setting. When you ask us to delete your account we anonymise rather than delete purchase records — the amount and date survive, your identity does not — because we are required to keep the financial record.

Wherever you live, you can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, or ask us to stop sending you non-essential email. If you are in California, that includes your rights under the CCPA as amended by the CPRA — to know, to delete, to correct, and to opt out of sale or sharing, which is moot here because we do neither. We will not discriminate against you for exercising any of them.

How: email hello@use2ndsight.com from the address on your account and say what you want. We will confirm receipt and complete it within 30 days. There is no charge. We are building self-serve export and deletion into the account page; until that ships, email is the route and it works.

Every marketing or digest email we send carries an unsubscribe link. Transactional email — a report you bought, a magic link, a receipt — is part of the service and does not.

We use browser storage for the things the product cannot work without: keeping you signed in, remembering your analytics choice, and holding a read you started before you signed in so it is not lost at the sign-in step. If you accept analytics, Mixpanel sets its own identifiers. We do not run advertising trackers and there are no third-party ad cookies on this site.

How we protect data is described on our Security page, along with how to report a vulnerability. No system is perfectly secure; if a breach affects your personal information we will notify you and the relevant authorities as required, including under Illinois' breach notification law, without unreasonable delay.

This is a tool for commercial real estate and restaurant businesses. It is not intended for anyone under 18 and we do not knowingly collect data from children. Our servers and vendors are in the United States; if you use the product from elsewhere, your data is processed there.

If we change this policy materially — a new vendor, a new category of data, a new purpose — we will update the date at the top and email active accounts. The version history matters here, so we will not rewrite the past silently.