Privacy Policy

Who we are

Nucleus is operated by Second Team [TO CONFIRM: full legal entity name and registered address]. We are the data controller for the personal information described here. For any privacy question, or to exercise your rights, contact hello@thesecondteam.com.

What we collect

Account information: the email address you give us, and optionally your first name and company name, when you join the pilot or sign in.

Business context you provide: the website address, documents, and answers you give us so we can build your business context. This may include information about your offers, customers, pricing, and how you work.

Usage and technical data: basic logs and a session cookie needed to keep you signed in, plus standard request information (such as IP address and browser type) used to operate and secure the service.

We do not ask for or intentionally collect payment card information — the pilot is free.

How we use it

To provide the service: to turn what you give us into clean, structured business context, to store it in your own private space, and to hand that context to the AI tools you connect when they request it.

To communicate with you: to send the confirmation link when you join, and service messages about your account and the pilot. We do not sell your information or use it for third-party advertising.

To support and secure the service: to investigate problems you report, prevent abuse, and keep the service running.

To improve Nucleus: only from anonymized, aggregated patterns across businesses — never your actual content, and never in a way tied to you.

AI processing of your context

When you connect an AI tool (such as Claude, ChatGPT, or Cursor) and it asks for your context, we pass the relevant context to that tool over the connection you set up. Processing also uses the Anthropic API to structure and serve your context.

We do not use your content to train AI models, and our AI processing providers are contractually bound not to train their models on it either.

Who we share it with (subprocessors)

We use a small set of trusted providers to run Nucleus, each handling data only on our instructions: Cloudflare (database and file storage), Anthropic (AI processing), Resend (transactional email), and our application hosting provider. [TO CONFIRM: keep this subprocessor list current as the stack changes.]

We may disclose information if required by law, to enforce our terms, or to protect the rights and safety of our users and the public. If Nucleus is ever involved in a merger or acquisition, we will let you know before your information becomes subject to a different privacy policy.

How your data is isolated and secured

Every company gets its own private store. Your context is never mixed with another company’s, and the only thing that can read it is the AI connection you set up.

Data is encrypted in transit and at rest. No one on our team has standing access to your content; if we ever need to look — only to fix a problem you have reported — it is with your explicit, logged permission.

How long we keep it

We keep your information for as long as your account is active or as needed to provide the service. You can ask us to delete your account and its data at any time by emailing hello@thesecondteam.com; self-serve export and delete are on the way. We may retain limited records where required by law.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these, email hello@thesecondteam.com and we will respond within a reasonable time.

The improvement-from-patterns described above is on by default and you can ask us to switch it off. Self-serve controls for access history, export, and deletion are coming.

Cookies

We use a single essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

International transfers

Your information may be processed in countries other than your own, including where our providers operate. Where required, we rely on appropriate safeguards for those transfers. [TO CONFIRM: data-residency and transfer-mechanism details with counsel.]

Children

Nucleus is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

Changes to this policy

We may update this policy as Nucleus evolves. If we make a material change, we will let pilot users know before it takes effect. The date at the top shows when it was last updated.

Contact

Questions about privacy? Email us at hello@thesecondteam.com.