This explains what we collect, why, who else touches it, and how to get it deleted. We have tried to write it in the same plain language as the rest of the site.

1. Who is responsible

Bravus Ltd, is the data controller for thesecondlook.ee. Contact us about anything in this policy at [email protected].

2. The important part: what you send us to check

The thing you send us for a check is the most sensitive data we handle. It is usually a screenshot, a link or a message, and it often contains someone else's personal information: a sender's name, a phone number, an email address, a profile, a photo.

We use it for one purpose, which is to run your check and produce your report. We do not sell it. We do not use it to advertise to you. We do not use it to build a profile of the person in it.

Please send only what the check needs. If you send us something you should not have, email us and we will delete it.

3. What we collect

Your email address, so we can create your account, send your sign-in link, and send you your report.

What you submit for a check: uploaded images, pasted links, pasted text, and the report we generate from them.

Purchase information: what you bought, when, the amount, and a payment reference. Card details are handled by our payment processor and never reach our servers.

Basic usage and technical data: IP address, browser and device type, pages viewed, and timestamps, collected through ordinary server logs and analytics.

Anything you tell us directly, such as the contents of an email you send to support.

We do not ask you for special category data (health, religion, politics and so on) and you should not send it to us unless it is genuinely part of the thing you are asking us to check.

4. Why we use it, and our legal basis

What we do Why Legal basis (GDPR) Run your check and deliver your report It is the service you bought Performance of a contrac tCreate and secure your account, send sign-in links To give you access to what you paid for Performance of a contract Take payment and prevent fraud To get paid and to stop abuse Contract, and our legitimate interests Keep the service working, debug, and improve it To run a reliable product Legitimate interests Answer your emails To support youContract, and legitimate interests Send marketing emails To tell you about the service Consent, or legitimate interests for existing customers. You can opt out at any time Meet legal and accounting duties We have to Legal obligation

5. Who else processes it

We do not sell your data and we do not share it for anyone else's marketing. We may also disclose data if the law requires it, or to establish or defend legal claims.

6. Where that happens we rely on the appropriate safeguards, normally the European Commission's Standard Contractual Clauses. Ask us and we will tell you which apply.

7. How long we keep it

What you submitted for a check: 180 after the check, then deleted.

Your reports and account: while your account is open, and for 180 after your last activity, so you can come back to your reports.

Purchase and tax records: for as long as accounting law requires, normally seven years.

Server logs: a short period for security and debugging.

You can ask us to delete your account and its contents sooner. See section 8.

8. Your rights

Wherever you live, you can email [email protected] and ask us to show you your data, correct it, or delete it. We will not charge you and we will not make it difficult.

If you are in the EU or UK

You have the right to access your data, to have it corrected, to have it erased, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. We will respond within one month. You also have the right to complain to your data protection authority.

If you are in California

You have the right to know what personal information we collect and why, to request deletion, to correct it, and to not be discriminated against for exercising those rights. We do not sell or share your personal information as those terms are defined by the CCPA and CPRA, so there is nothing to opt out of. You can still make a request using the address above.

9. Cookies and analytics

We use cookies and similar technologies to keep you signed in, to remember your preferences, and to understand how the site is used. Some of these are necessary for the site to work. You can block or delete cookies in your browser settings, though the site may not work properly without the necessary ones.

10. Advertising

We advertise this service, including on Meta platforms, and we use advertising and measurement tools that set cookies or similar identifiers so we can see whether our ads work. Those providers receive technical data such as your IP address and the pages you visited. They do not receive the content you submit for a check. This site is not part of, or endorsed by, Meta.

11. Security

Submissions are stored in private storage that is not publicly readable, access is restricted, and traffic is encrypted in transit. No system is perfectly secure, so if a breach affects your data we will tell you and the relevant authority as the law requires.

12. Children

The service is not for children. We do not knowingly collect data from anyone under 16, and you must be 18 to buy. If you believe a child has given us personal data, email us and we will delete it.

13. Changes

If we change this policy in a way that materially affects you, we will say so on this page and update the date at the top. Older versions are available on request.

14. Contact

Bravus Ltd. Email [email protected].