Last Updated: 10 May 2026
SecondDesk is a trading name of Bravo Importing Pty Ltd (ABN: 78 638 732 555). We build compliance reports for Australian trades. To do that, we need to handle your data. This policy explains what we collect, where it goes, and how long we keep it. We keep it simple because you don't have time to read legal fluff.
When you use SecondDesk, we collect:
We only use your information to:
We do not onsell your data to third parties. We do not use your logbooks, photos, voice memos, or client information to train AI models — ours or any third party's.
SecondDesk uses AI tools to help draft your compliance reports and remedial works summaries from the evidence your technicians upload. Every AI-drafted output is reviewed by an authorised SecondDesk team member before it is provided to you.
The AI services we use process your data under enterprise terms that prohibit your data being used to train AI models, ours or anyone else's.
Our full Responsible AI practices — what AI does, what it doesn't do, how we handle errors, and how we align with the National AI Centre's guidance — are at seconddesk.com.au/responsible-ai.
Parts of the software stack we use to process your reports are hosted on servers located outside of Australia. By using SecondDesk, you agree to your data being processed overseas to generate your reports. We take reasonable steps to ensure overseas providers handle your data consistently with the Australian Privacy Principles.
Note: If you service government, health, or critical infrastructure contracts that mandate strict Australia-only data sovereignty, tell us before you sign up so we can confirm if we are the right fit.
Once a completed report is emailed to you, it belongs to you. It is your responsibility to file it for your own compliance records — Australian fire safety standards typically require building owners to retain inspection records for at least 7 years.
We use industry-standard encryption to protect your data while it's being uploaded and processed. However, no digital system is 100% bulletproof. We protect your data the same way we protect our own business records, but you use the service at your own risk.
If you want to see exactly what information we hold about you, or if you want us to delete your account and wipe your data before the standard 90-day window, just ask. We will action deletion requests within 7 business days and provide written confirmation once your data has been purged from our systems.
We maintain encrypted database backups of our systems for disaster recovery purposes. These backups follow the same 90-day retention policy as our primary systems — any data deleted under Section 5 or Section 7 is also removed from backups within the same window.
If you have questions about this policy or how we handle your data, email the founder directly at hello@seconddesk.com.au.