Privacy Policy

Effective date: October 2, 2026

This Privacy Policy explains what Second Coffee, LLC ("Tessamonials," "we," "us") collects and how we handle information in Tessa, our hosted AI interview service at tessamonials.com. It covers Customers who run interviews and Participants who answer them, through an invitation, a shared link, or a website widget.

This policy applies to the hosted service we operate. An organization running the software on its own infrastructure is responsible for that installation's privacy practices.

1. Who controls interview information

The Customer that runs an interview controls its purpose and who in its company can access the results. We process the interview information on that Customer's behalf. We separately use account, operational, and security information to run and protect the service.

Participants do not typically have an account. You can contact the Customer or [email protected] about your interview information. If you have a withdrawal receipt, include it with your request so we can identify the consent record.

2. What we collect and why

• Customer accounts. Email addresses, available profile information, sign-in information, company membership, roles, and interview settings. We use these to authenticate Customers, manage access, and provide support.
• Invitations and participant details. A Customer may provide your name, email address, company, and background for an interview. We also keep identity details you choose to share, such as your name, title, or company. We use them to deliver invitations and provide context for the interview.
• Interview content. Typed answers, voice transcripts, feedback choices, ratings, private notes, findings, draft testimonials, revisions, and consent choices. We use this content to conduct the interview, show you its notes and drafts, and provide results to the Customer.
• Technical information. Interview identifiers, the page where an embedded interview takes place, timestamps, authentication and delivery events, and operational and error records. These support interview continuity, email delivery, abuse prevention, and troubleshooting.

We send sign-in codes, interview invitations, and service notices. We do not use Customer interview content to train our own AI models. Tessamonials does not sell personal information or share it for cross-context behavioral advertising.

3. Voice, text, and AI processing

You can participate by voice or text where the interview offers those options. Choosing voice uses your microphone and creates a recording at our voice provider so we can obtain a transcript. Runtime-side audio recordings are deleted after transcript import. We do not publish a Participant's raw audio recording.

Tessa uses AI to generate interview replies, notes, findings, and testimonial drafts. Relevant interview text and the Customer's interview instructions are sent to the AI provider for that processing. AI output may contain mistakes; a draft does not itself authorize publication.

Our current service providers include Cartesia for voice interviews and transcripts, Anthropic for AI processing, Amazon SES for email delivery, and Fly.io for hosting. These providers process the information needed for their part of the service. Provider-side processing, retention, and deletion follow their applicable terms and our arrangements with them; deleting information in Tessa does not promise immediate deletion from every provider system. Contact [email protected] for current provider details.

4. Consent and public testimonials

Participating is voluntary. You can decline an interview, choose text instead of voice where available, or end the conversation. Customers are responsible for obtaining the recording permissions required for their interviews. Our Participant Consent Notice explains the choices presented to Participants.

A testimonial can be used only after you approve its saved content. You choose whether it may carry your approved name and other attribution or be used anonymously. You can also decline testimonial use. Anonymous attribution applies to the public testimonial; the private interview may still contain information that identifies you.

Approving a testimonial also permits us to keep the associated transcript, private notes, participant details, findings, and revisions until you withdraw consent. The Customer can choose whether to show an approved testimonial on its public testimonials page. Raw transcripts and private notes are not published on that page.

5. How long we keep information

• Interviews with active testimonial consent. We keep the approved testimonial and its associated transcript, private notes, participant details, findings, and revisions until consent is withdrawn or the content is deleted at an authorized request. The campaign's ordinary retention deadline does not erase an interview while that consent remains active.
• Interviews without active testimonial consent. Interview content follows the campaign's configured retention period. New campaigns default to 90 days. At the deadline, sensitive content becomes unavailable and is erased by our scheduled deletion process.
• Audio. Runtime-side recordings are deleted after transcript import, rather than being kept for the life of a testimonial.
• Account and operational records. We keep account information while needed to provide the account, and limited operational, security, and financial records while needed for their purposes or applicable obligations. Company setup conversations are account configuration work and remain available until an authorized deletion request; they do not follow participant interview expiry.

Withdrawal removes the testimonial from Tessa's public display and erases its approved content and the associated sensitive interview data from active storage. We keep minimal records of the consent choice, its dates, withdrawal, and deletion so we can honor the withdrawal and prevent deleted interview data from being recreated.

Deleting the underlying interview at a Customer's request can preserve the approved consent copy and its withdrawal record, while removing the private interview data. Withdrawing consent also erases that approved copy.

Deletion from active storage does not immediately remove routine backups or copies already held by a Customer or a provider. Those copies have separate retention and deletion processes. If a Customer has published or copied your testimonial elsewhere, ask that Customer to remove those copies too.

6. Who can access information

Authorized members of the Customer's company can review its private interview results according to their permissions. Connected applications act within the access the Customer grants them. An approved testimonial is public only when the Customer makes its page public and chooses to show it.

We and our service providers access information as needed to provide, support, and secure the service. We may disclose information to comply with applicable law or valid legal process, address fraud or security incidents, protect rights or safety, or establish or defend legal claims. Information may also transfer as part of a merger, acquisition, or similar business transaction involving Second Coffee, LLC.

7. Cookies and security

We use cookies and browser storage for sign-in and interview continuity. We do not use these for behavioral advertising.

We use authentication, company access controls, encryption for sensitive stored fields, and operational monitoring to protect information. No online service can guarantee absolute security. Report suspected account or company-access problems to [email protected].

8. Your requests and choices

You can request access, correction, or deletion of your information by contacting the Customer or [email protected]. To withdraw testimonial consent, contact the Customer or us and include your withdrawal receipt if you have one. We may need to verify your identity or coordinate with the Customer before completing a request. Depending on applicable law, you may have additional rights, and an authorized agent may submit a request on your behalf. We do not unlawfully discriminate against people for exercising applicable privacy rights.

Customer accounts are for people aged 18 or older. Customers must obtain any required parental or guardian permissions before interviewing a minor. We do not independently verify Participants' ages. Contact us if you believe a minor's information was collected improperly.

Second Coffee, LLC operates in the United States. Information is processed in the United States and in countries where our providers operate. The service is intended for users in the United States.

9. Updates and contact

We may update this policy as the service or our obligations change. We will update the effective date and provide notice of material changes where appropriate.

Questions and privacy requests: Tessamonials, Second Coffee, LLC, 3559 Mt Diablo Blvd #393, Lafayette, CA 94549, [email protected].

See our Terms of Service and Participant Consent Notice.