This Privacy Policy describes how Second Life Software LLC (“Second Life Software,” “we,” “us”) collects, uses, and protects information across our website at secondlifesoftware.com and our application (the “App”), including financial account data connected through Plaid. Questions or requests: info@secondlifesoftware.com.
1. Information we collect
Website visitors
- Contact and booking details you submit through our contact or book-a-call forms: your name, email address, phone number, project details (which may include budget range, your role, project timeline, and urgency), and requested call dates.
- Cookies and analytics data collected by Google Analytics, subject to your consent choice (see “Cookies and analytics” below).
- Basic usage and security data (such as pages visited and approximate region) collected by our hosting infrastructure for security and performance.
App users
- Account information: your name and email address, used to authenticate you (via Google Firebase Authentication) and control access. We never see or store your password in plain text.
- Financial account data connected through Plaid (described in full below).
- Data you enter in the App: budgets, debts, subscriptions, notes, and related records.
2. Financial data connected through Plaid
The App uses Plaid Inc. to let users connect their own bank, credit card, and loan accounts. When you connect an account through Plaid Link:
- You authenticate directly with your financial institution through Plaid. We never receive or store your banking username or password.
- Access is read-only. We retrieve account balances, transaction history, recurring transaction summaries, and liability details (such as interest rates, minimum payments, and due dates) solely to display your finances back to you and power budgeting, debt-payoff, and subscription-tracking features. We do not initiate payments or transfers, and we cannot move money.
- Consent: accounts are connected only when you choose to connect them, through Plaid Link’s own consent flow. You may disconnect an account at any time.
- Deletion: when you disconnect an account or ask us to delete your data, we revoke our access with Plaid (removing the Plaid Item) and delete the associated financial data from our systems within 30 days.
Plaid’s handling of your data is described in the Plaid End User Privacy Policy.
3. How we use information
- To provide and operate the App’s features (balances, budgets, debt tracking, subscription management, reports, and reminders you configure).
- To respond to inquiries and scheduling requests from the website, including sending a booking confirmation and notifying our team of a new inquiry.
- To secure our systems, prevent abuse, and debug problems.
We do not sell personal information, and we do not share it with third parties for their marketing. We do not use connected financial data for advertising, credit decisions, or any purpose other than showing you your own information and the features you ask for.
4. Cookies and analytics
Our website uses Google Analytics (provided by Google, via Firebase) to measure site traffic and understand how visitors use the site. This uses cookies and similar identifiers. We present a cookie-consent banner and use Google Consent Mode: for visitors in the EU/UK, analytics cookies default to denied until you consent. You can decline analytics on the banner, and you can clear or block cookies in your browser at any time. The App itself (behind login) does not use advertising or analytics cookies beyond what is required to keep you signed in.
5. Service providers
We share data only with the processors required to run the service, each bound by their own security and privacy obligations:
- Plaid Inc. — financial account connectivity (described above)
- Render — application and database hosting (data encrypted in transit and at rest)
- Google — Firebase Authentication (sign-in); Google Calendar (scheduling booked calls); Google Analytics (website traffic measurement, consent-gated)
- Twilio — SMS booking confirmations, reminders, and notifications
- Resend — transactional email: booking confirmations, new-inquiry notifications to our team, and the reports/reminders a user enables
- OpenAI — AI-assisted features (described below)
When you opt in on the booking form, the project description you provide may be summarized by OpenAI. In the App, AI-assisted planning features process relevant financial summary data — both when you invoke them directly and on schedules you configure (for example, weekly reports and text summaries, and monthly property-value estimates, which send property addresses to a web-search-enabled model). This data is used only to generate your results and is not used by us to train models.
6. Security
- All traffic is encrypted in transit with TLS 1.2 or higher; there is no non-HTTPS access path.
- Stored data, including financial data received from Plaid, is encrypted at rest (AES-256) in our managed database.
- Access to the App requires authentication with a unique named account; reads and writes are gated by role-based access control, and access to production infrastructure is protected by multi-factor authentication and least-privilege practices.
- Our practices are documented in an internal Information Security Policy, reviewed at least annually.
7. Data retention and deletion
We keep personal and financial data only while the associated account is active or as needed to provide the service. When an account or connected financial institution is removed — or on request — associated data is deleted within 30 days, and Plaid access is revoked. Business records we are legally required to keep (such as invoices and tax records) are retained for the legally required period. Backups age out on our hosting provider’s rotation schedule.
8. Your rights
You may request access to, correction of, or deletion of your personal information at any time by emailing info@secondlifesoftware.com. We will respond within 30 days. Depending on where you live, you may have additional rights under applicable privacy laws (such as the California Consumer Privacy Act); we honor such requests regardless of residency.
9. Children
Our website and App are not directed to children under 13 (or the higher age required in your jurisdiction), and we do not knowingly collect their information.
10. Changes to this policy
If we make material changes, we will update this page and its effective date. Continued use of the website or App after changes take effect constitutes acceptance of the updated policy.
11. Contact
Second Life Software LLC · Atlanta, Georgia, USA
info@secondlifesoftware.com