Privacy Policy

Who we are

Second Dawn helps survivors get nonconsensual intimate images removed from websites by sending legal takedown notices on their behalf. Questions about this policy or your data: nina@seconddawn.ai.

What we collect

Account details: your email address, and your name and profile picture if you sign in with a provider that shares them.

What you ask us to remove: the URLs you submit, the website each one is on, any username you give us, and the status of each request.

Your authorization for us to act as your agent: the agreement text you accepted, your typed signature, the time you signed, and the IP address and browser information recorded when you signed.

A photo ID, if you choose to upload one.

Images you upload for reverse image search, if you use that feature. These are deleted right after the search.

Billing records, if you pay: your Stripe customer and subscription details. We do not store card numbers; Stripe handles payment.

Which partner organization referred you, if you arrived through a partner link.

Your photo ID

Your photo ID is stored in a private storage area. Only you and Second Dawn administrators can access it, and viewing links expire after five minutes. It is used only to verify identity with Trust & Safety teams of official platforms like X.com, Meta, Google.

You can delete your photo ID at any time from your account. It is not deleted automatically.

What we send to websites

Takedown notices are emailed to the website's listed copyright or abuse contact. A notice lists the URLs to remove and is signed by Second Dawn as your authorized agent. Your real name and email address are not included; notices use a placeholder name. Each notice goes to one recipient, with no copies to anyone else.

Website replies come back to Second Dawn. We store them and use an AI service to read them and work out the next step, such as a follow-up.

If a website does not respond, we may send automated follow-ups and ask Google to remove the URLs from search results. Google requests use a Second Dawn placeholder name and contact address, not yours.

Services we use

We share only what each service needs to do its job: Supabase (accounts, database and file storage), Vercel (hosting), Stripe (payments; receives your email and account ID), Mailjet (sending notices), OpenAI (reading website replies to notices), Browserbase (submitting Google removal requests), Abstract API and Hunter (checking that a website's contact email is valid), Cloudflare (email routing and domain lookups), SerpAPI (reverse image search; receives the image link) and Tavily (username search; receives the username).

Images uploaded for reverse image search are stored privately. The search service gets a link that expires after five minutes, and we delete the image as soon as the search finishes.

What we do not do

We do not sell your data. We do not use advertising or analytics trackers. Partner organizations that refer you do not see who signed up; they see only total numbers.

Cookies

We use cookies to keep you signed in. If you arrive through a partner's link, we set one cookie that remembers the partner for about 30 days so your free partner benefits apply when you sign up. We use no other cookies.

How long we keep data

We currently keep your data until you ask us to delete it. We do not yet have an automatic deletion schedule, and you cannot yet delete your account yourself. To delete your account or any of your data, email nina@seconddawn.ai and we will do it.

Your choices

You can ask to see, correct or delete your data at any time by emailing nina@seconddawn.ai. You can delete your photo ID yourself from your account.

Changes

If we change this policy we will update the date at the top of this page.