SecondLook Public Service Privacy Notice — 2026-09-06.1

Model training and improvement
Effective September 6, 2026, Edgecase Systems does not use customer-submitted review content or generated reviews to train, fine-tune, or improve AI models. Processing content to answer the requested review is distinct from training.

Submitted business context
SecondLook processes your goal, proposed action, authority, facts, constraints, uncertainties, and reasoning to provide the review. Selected common personal-data and credential patterns are redacted before model processing and decision storage; this is limited pattern matching, not anonymization or a guarantee that sensitive information is removed. Submit only the context needed for the review.

Substantive input and generated review retention
Decision records retain substantive submitted fields and generated review fields separately from replay records. There is currently no automatic deletion deadline for these decision records: they may remain stored indefinitely unless separately deleted. Generated review reasons, risks, missing information, and any constraint-resolution content can themselves contain submitted business context. The seven-day replay window does not delete these decision records.

Replay and operational records
The operational idempotency/replay window is seven days. Replay records include request identity/hash, lifecycle state and the completed response for recovery; the saved response contains generated review content. Expiration cleanup is request-driven rather than immediate at the deadline, and unresolved reserved commercial cases can delay cleanup. Do not treat the replay window as a promise that all content is deleted after seven days.

Payment and service records
Separate payment, accounting, reconciliation, remediation and bounded operational metadata support service integrity, payment processing, exact replay, accounting/compliance, and failure or refund verification. They include correlation identifiers, payment amounts and states, payment-evidence identifiers, and coarse declared/observed country and region. Commercial accounting and remediation records are retained independently of replay; no fixed deletion deadline is currently specified. These records are not a separate model-training dataset.

Processors
Cloudflare processes service traffic and stores decision and replay records in D1. Workers AI receives the prepared review context to generate the review. Cloudflare states that Workers AI Customer Content is not used to train models or improve Cloudflare or third-party services without explicit consent: https://developers.cloudflare.com/workers-ai/platform/data-usage/ . This processor policy does not remove the SecondLook storage described above. The Coinbase CDP facilitator receives payment/protocol data when settlement is attempted; substantive review context is processed by Workers AI.

SecondLook does not store IP addresses or precise location as part of its geography policy, does not sell personal data, and does not use submitted data for targeted advertising.

Do not submit private keys, seed phrases, credentials, or unnecessary sensitive personal information. If you require a fixed deletion deadline for business context, the current retention behavior may not meet your requirements. Contact support before submitting it; contact is not a promise of automated deletion.

Support: https://secondlook.edgecasesystems.workers.dev/support