About Us
Privacy Policy
Second Brain Privacy Policy
Effective October 15, 2026
Second Brain is a private application operated by Chris Clark for his own personal and professional knowledge management. This policy describes the application’s handling of connected-account information. It does not describe unrelated website analytics or other services available through chris-clark.com.
Information accessed
With account authorization, Second Brain may access Google Drive files and metadata; Gmail messages, headers, attachments, and labels; and Google Calendar calendars, events, attendees, and associated metadata. It also uses account identifiers to verify that each connection belongs to the intended account.
Google access is read-only. The application does not request permission to send email, modify or delete source files, or create, change, or delete calendar events.
Purpose and current development status
Information is used to provide private archiving, retrieval, organization, summaries, relationship and commitment tracking, and analysis across personal and professional activities.
As of this policy’s effective date, the implemented Google integration authorizes accounts and verifies access. Bulk collection, recurring synchronization, and AI analysis are planned features.
Storage and retention
Authorization credentials are stored locally on the operator’s Mac. Planned archives, indexes, and reports will be stored on storage controlled by the operator, including an external drive.
Collected records may be retained for ongoing knowledge management and historical analysis until the operator deletes them or applicable retention obligations require otherwise. Historical copies may remain after a source record is changed or deleted. Deleting a source record does not automatically delete archived copies, indexes, summaries, or backups.
AI processing and service providers
When AI analysis is enabled, selected content may be transmitted to OpenAI through its API to generate private summaries, answers, and analysis for the operator. Processing will be subject to the provider’s applicable terms and retention controls; local storage does not mean all processing occurs locally.
Google-derived data will not be used or supplied for training or improving generalized or non-personalized AI or machine-learning models. Provider settings and agreements must support that restriction before Google-derived content is submitted.
Information is not sold, used for advertising, or published as part of this application. Transfers are limited to those needed for the application’s disclosed functions, expressly authorized by the account holder, or required by law, consistent with applicable Google policies.
Google API Limited Use
Second Brain’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements.
Security and access
The application uses Google OAuth authorization rather than collecting Google account passwords. Access credentials are restricted locally, and Google access is limited to read-only permissions. Credentials and account content are not intentionally displayed on the public information pages.
Revocation and deletion
Account holders can revoke Second Brain’s access through their Google Account’s third-party connections settings. Revocation stops future authorized access but does not automatically erase previously collected information.
Requests concerning access, correction, or deletion of retained data may be sent to chris@clark.law. Deletion may require removal from archives, indexes, generated outputs, and backups, subject to applicable retention obligations.
Changes and contact
This policy will be updated as the application’s actual data practices change.
Operator: Chris Clark
Contact: chris@clark.law