Privacy policy.

Who we are

Second Shift builds company brains for service businesses. We're based in Miami, Florida. In this policy, "we" means Second Shift and "you" means anyone who visits this site or contacts us.

Questions about your information go to Mac Earle at mac@trysecondshift.com or (206) 856-2703.

Two kinds of information

This policy covers two things, and we treat them differently:

• Information about you that you give us through this site, email or a call.
• Your company's data that we connect when we build your brain. That is covered by our signed agreement with your company and by the commitments on our Your data page. Section 05 sums it up.

What we collect on this site

• When you book a call. Our "Talk to us" buttons open our booking page on cal.com. Cal.com collects your name, email and anything you type there, and sends it to us so we can hold the call. Cal.com's own privacy policy covers how it handles that.
• When you use the "Rather we reach out?" form. The form opens the same booking page with your details filled in. This site doesn't store what you type.
• When you email, call or text us. We keep what you send so we can reply and keep a record of our conversation.
• When you browse. This site is hosted on Cloudflare, which handles basic technical data like your IP address and browser type to deliver the site and protect it from attacks. We don't use advertising or tracking cookies.

How we use it

• To reply to you and hold the calls you book.
• To work with your company if you become a client.
• To keep the records any business keeps, like emails and agreements.

We don't sell your information. We don't use it to train AI.

Your company's data

When we build a brain for your company, we handle your company's data under our signed agreement and these commitments:

• Single-tenant. Your brain doesn't share a database, storage or index with any other client.
• US-hosted. AI requests run in the US only.
• Encrypted with AES-256 at rest and TLS 1.2 or higher in transit.
• Never used to train AI. We use AI providers only under business terms that don't train on your data.
• Read-only to start. You choose what we connect and can turn any of it off.
• Access by role. Only the people building your brain get in, and only to what setup or a fix needs.
• We tell you within 8 hours of finding any security incident that touches your data.
• If we part ways, you choose: we hand over all access, or delete your data and confirm it in writing.

The full detail, with sources, is on our Your data page.

Who we share it with

We share information only with the companies that help us run our service, and only for that purpose.

• Your company's data: the companies listed on our Your data page. They are Railway, Supabase, Amazon Web Services (including Amazon Bedrock), Anthropic, OpenAI, Google Workspace, GitHub and Sentry.
• Your contact details: cal.com for bookings, Google Workspace for email, and Attio, where we keep track of our conversations.

We may also share information if the law requires it.

How long we keep it

• Information about you: as long as we need it to reply, work with you and keep business records.
• Your company's data: for as long as we work together. After that, we hand it over or delete it, your choice, and confirm in writing.

Your choices

You can ask us to show you, correct or delete the information we hold about you. Email mac@trysecondshift.com. We'll respond within 30 days.

Children

This site is for businesses. It isn't meant for children, and we don't knowingly collect information from anyone under 13.

Changes to this policy

If we change this policy, we'll post the new version here and update the date at the top.