Privacy policy
Last updated: 3 November 2026
SecondHost is a private short-stay hosting tool operated by Jeff O’Kane for managing accommodation, bookings and guest communications. Contact jeffokane@btinternet.com with questions about this policy or your information.
Information we process
SecondHost processes property and calendar information, guest names, booking references, stay dates, party sizes and guest messages. It also processes host account details, approved property guidance, saved reply drafts and operational records needed to run the service.
Google and Gmail access
Connecting Gmail is optional and requires the account holder’s Google consent. SecondHost requests Gmail read-only access to find relevant booking confirmations and guest correspondence, match them to stays, and display booking details and messages to authorised hosts. This permission does not allow SecondHost to send, edit or delete Gmail messages. The app stores encrypted Google credentials to maintain the authorised connection and can check for relevant emails on a schedule.
Relevant imported booking details, message content and identifiers may be stored in SecondHost for matching, duplicate prevention and host review. Read-only Gmail permission permits reading mailbox data; it is not limited by Google to booking emails, although SecondHost’s import searches target booking-related correspondence.
How information is used and shared
Information is used to organise stays, update guest details, coordinate cleaning, provide guest assistance and prepare replies for host review. When a host requests an AI reply or refinement, relevant guest-message content, stay information and property guidance may be sent to OpenAI to produce the draft. Other AI features may process the information provided to them. Hosts should avoid submitting unnecessary sensitive personal information.
Service providers process information as needed to supply hosting, database, authentication, AI and enabled messaging services. SecondHost is hosted on Render. Authorised hosts can access information within their assigned scope; cleaner views and enabled cleaner notifications use the stay information needed for that work. Information may also be disclosed when required by law.
Google user data is not sold or used for advertising. It is not used to train general-purpose AI models. SecondHost’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and retention
Imported booking records, messages and drafts remain in the application until removed by the operator, including after Gmail is disconnected. Operational logs and service-provider backups may have separate retention periods. Contact the operator to request access, correction or deletion of information; necessary legal or operational records may need to be retained.
Disconnecting and deleting information
Use Disconnect Gmail in SecondHost to remove its stored Google connection credentials. You can also revoke SecondHost’s permission through Google Account connections. Disconnecting stops future access through that connection; it does not delete previously imported records. To request deletion of those records, email the contact above and identify the relevant account or booking without sending passwords or access tokens.
Security and changes
SecondHost uses HTTPS, restricted dashboard access and encrypted storage for saved Gmail credentials. No online service can guarantee absolute security. This policy will be updated when the service’s data practices change.