Privacy Policy

Effective date October 5, 2026

1Introduction

This Privacy Policy explains how Second Derivative LLC (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit our website at secondderivative.io, contact us, or otherwise deal with us in the course of business (together, the “Services”).

Second Derivative LLC is located at 8 The Green, Ste B, Dover, DE 19901. If you have questions about this policy, contact us at privacy@secondderivative.io.

Personal information we handle on behalf of our clients while providing services to them is governed by our agreements with those clients, not by this policy.

2Information we collect

We collect information you give us, information collected automatically when you use the Services, and limited information from third parties.

CategoryExamplesSource
Contact informationName, email, phone, company, job title when you fill out a form or email usYou
CommunicationsYour messages and inquiries, and anything you include in themYou
Business contact informationContact details of people at our clients, vendors, and partners, and records of our dealingsYou or your employer
Usage dataPages viewed, links clicked, referring site, time on siteAutomatically
Device and log dataIP address, browser type, operating system, approximate location based on IPAutomatically

Our website does not offer accounts or online payments, so we do not collect passwords or payment card information through it.

3How we use information

We use personal information only for the purposes below. If you are in the EU, UK, or a similar jurisdiction, the right column shows our legal basis.

PurposeLegal basis (GDPR / UK GDPR)
Respond to your inquiries and requestsLegitimate interests; steps before entering a contract
Provide our services and manage our business relationship with you or your employerPerformance of a contract; legitimate interests
Operate, maintain, and secure the websiteLegitimate interests
Understand how visitors use the website and improve itLegitimate interests
Detect and prevent spam, fraud, and abuseLegitimate interests
Comply with law and enforce our termsLegal obligation; legitimate interests

We do not use personal information for automated decision-making that produces legal or similarly significant effects on you.

We keep correspondence only as long as needed to respond and for legal or tax records.

4How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only in these cases:

  • Service providers. Vendors that help us run our website and business, such as web hosting, email, and customer relationship management tools. They may use the information only to provide services to us. We can provide a list on request.
  • Legal requirements. When required by law, subpoena, or court order, or to protect the rights, safety, or property of us or others.
  • Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
  • With your consent. When you ask us to share information, for example to introduce you to a partner.

5International data transfers

We are based in the United States and store data in the United States. If you are outside that country, your information will be transferred to and processed there.

When we transfer personal information from the EU, UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism.

6Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you and get a copy
  • Correct inaccurate information
  • Delete your information
  • Restrict or object to certain processing, including direct marketing
  • Receive your information in a portable format
  • Withdraw consent at any time, where we rely on consent
  • Opt out of the sale or sharing of personal information (we do not sell or share it)

To exercise these rights, email privacy@secondderivative.io. We will verify your identity and respond within the time the law requires, usually 30 days (GDPR) or 45 days (US state laws). We will not discriminate against you for exercising your rights. You may use an authorized agent where the law allows.

If you are in the EU or UK, you may also complain to your local data protection authority.

7Children’s privacy

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

8Changes to this policy

We may update this policy from time to time. We will post the new version here and update the effective date. If changes are material, we will post a prominent notice on our website before they take effect.

9Contact us

For questions or requests about this policy or your personal information, contact:

Second Derivative LLC
8 The Green, Ste B
Dover, DE 19901
privacy@secondderivative.io