Privacy Policy

Effective Date: July 25, 2026
Last Updated: August 7, 2026

This Privacy Policy explains how Seven Technologies, Inc. (“Seven,” “we,” “us,” or “our”) collects, uses, discloses, retains, and otherwise processes personal information in connection with our website, mobile application, AI assistant, agent workflows, generated interfaces, integrations, and related products and services (collectively, the “Services”).

Seven is a consumer AI assistant that helps users delegate tasks, manage projects, generate task-specific interfaces, and interact with accounts or services they choose to connect. Because the Services may process personal or sensitive information that you provide, this Policy explains the information involved, why we use it, who may receive it, and the choices available to you.

Please read this Privacy Policy together with our Terms of Service. This Privacy Policy describes our privacy practices and is not a contract. If you do not agree with this Privacy Policy, do not use the Services.

1. Who We Are

The Services are operated by:

Seven Technologies, Inc.
Address: 2810 N Church St STE 88613, Wilmington, DE 19802
Privacy and Rights Contact: support@sevenapp.ai
Support Contact: support@sevenapp.ai

For purposes of applicable privacy laws, Seven Technologies, Inc. is generally the controller of personal information collected through the Services.

2. Information We Collect

The information we collect depends on the features you use, the permissions you grant, and the information you choose to provide.

2.1 Account and Profile Information

Seven uses passwordless email authentication. We collect your email address and proof that you control it through a sign-in link or code. We may also collect an optional display name, internal account and session identifiers, account timestamps, subscription or entitlement status, assistant profile information, preferences, onboarding choices, and communications with us. Seven does not ask you to create a Seven account password.

2.2 User Content and Task Information

“User Content” means messages, prompts, instructions, task and project details, files, documents, screenshots, images, audio and transcripts, attachments, notes, preferences, forms, drafts, approvals, edits, selections, contacts, email, calendar information, and other content you submit, connect, upload, or make available through Seven. User Content does not include passwords, API keys, recovery codes, OAuth tokens, or other authentication secrets, which are described separately below. Seven also generates interfaces, drafts, summaries, and other output in response to your User Content and instructions (“Output”). User Content and Output may contain personal information about you or other people.

2.3 Connected Account and Browser Data

You may be able to connect third-party services or ask Seven to interact with websites. Depending on the connection or task, Seven may process:

Seven accesses connected services only after you authorize a connection or direct a task that requires the access. The permissions and data available depend on the third-party service and the access you grant. After a connection is enabled, an active task or feature may continue to read connected data or perform background work under the permissions and settings you selected until the task is stopped or the connection is disconnected. A stop or disconnect request may not prevent activity already in flight.

Google Workspace data is subject to the narrower requirements in Section 5. Seven does not continuously crawl or bulk-synchronize a connected Google account. A recurring or background task may access only the Google data reasonably necessary to perform that task under the permissions you granted.

2.4 Agent Activity, Approvals, and Generated Information

We collect and store information about tasks and agent activity, including plans, intermediate outputs, tool or integration use, generated interfaces, action proposals, approval requests, your decisions or edits, task status, retries, errors, audit records, usage records, and system events. Seven may also create preferences, summaries, project profiles, keywords, signals, inferences, or embeddings from your interactions to maintain context and personalize the Services.

This general personalization language does not authorize Seven to create generalized training datasets, cross-user profiles, or persistent generalized embeddings from Google user data. Google user data is handled only as described in Section 5.

2.5 Device, Contacts, Location, Files, Audio, and Notifications

We and our service providers may process device and network information such as device type, operating system, app version, language, time zone, IP address, request identifiers, push token, app state, and diagnostic or error information.

If you enable optional device features, Seven may process:

Device biometric authentication is handled by your device’s operating system. Seven does not receive your fingerprint, face scan, voiceprint, or biometric template from that process.

2.6 Saved Credentials

If you choose to save a third-party password, API key, token, passphrase, recovery code, secure note, or similar secret, Seven processes the secret and related label, username, target service, settings, and usage metadata so it can be stored and used for tasks you request. Seven encrypts the primary stored copy of a saved credential, but saved credentials are not end-to-end or zero-knowledge encrypted. Seven-controlled systems must be able to decrypt and use them, and plaintext working copies may exist while an authorized task is being processed.

2.7 Billing and Subscription Information

If paid features are available, Stripe may process subscription or other payments. Seven does not receive or store your full payment card number through Stripe-hosted subscription billing. We may receive and store customer and subscription identifiers, email address, plan or price identifiers, subscription and entitlement status, billing period, cancellation status, transaction and invoice references, amounts, currency, credits, webhook events, and related metadata needed to provide paid features and reconcile billing.

2.8 Communications and Support Information

We collect information when you contact us, request early access by email, submit feedback, or open a support case, including your contact details, message content, and records of the communication. Authentication emails are delivered through an email service provider, which may receive your email address and delivery information.

Each support case includes baseline diagnostics, which may include technical status, summarized task and usage information, and file metadata, but not file contents. If you choose, you may additionally share task transcripts or runtime logs. We record those choices. Revocation prevents later access through that support case but cannot undo access that already occurred.

2.9 Website and Local Technologies

As of the Last Updated date, the public website does not intentionally use advertising pixels, session-replay software, keystroke tracking, or mouse-movement tracking. Our website host and network providers process ordinary request information, such as IP address, headers, requested page, timestamp, and security logs, to deliver and protect the site. We do not make an assurance about browser extensions or technologies added by third parties outside Seven’s control.

The mobile app uses device storage, secure storage, caches, operating-system services, and mobile software components for authentication, contacts, files, location, camera, audio, notifications, preferences, and other core functions. Seven does not use personal information for third-party targeted advertising.

2.10 Sensitive Information and Information About Other People

Depending on what you provide or connect, Seven may process precise location, saved credentials, private communications, health or financial information, professional or employment information, and other sensitive matters. Seven may also process information about other people contained in contacts, email, calendars, files, messages, or other User Content. Only provide information that you are authorized to provide, and do not use Seven as a substitute for a regulated health, legal, financial, or other professional service.

3. How We Use Information

We use personal information for the following purposes:

4. AI Processing and Providers

Seven asks for your explicit permission before it sends personal information or User Content to the third-party AI providers named below. The consent screen identifies each recipient, the categories of information involved, and the purposes for the transfer. If you decline, Seven blocks AI-provider processing and the affected assistant, voice, semantic-search, and generation features will not operate. While permission is active, Seven’s Privacy & AI settings let you review the current disclosure and withdraw permission. If permission is off, entering an AI feature returns you to the consent screen, where you may choose whether to allow it again. Withdrawal blocks new transfers but cannot recall processing already completed or information already sent while permission was active.

Seven’s current AI-provider recipients are:

For safety and abuse prevention, Seven may include with requests to either provider a stable SHA-256 hash of Seven’s internal user ID. The value does not contain your email address or display name, but it is a pseudonymous account-level identifier that Seven can associate with your account. OpenAI and Anthropic may use it to associate requests with the same account, detect abuse, enforce safety protections, and investigate harmful or fraudulent use.

Routing or retry behavior may cause relevant content to be sent to both providers, but only for the purposes disclosed in the consent screen. Saved credentials are designed to be handled by credential tools rather than included in model prompts. Seven does not authorize OpenAI or Anthropic to use Seven API Customer Content to train generalized models, and Seven does not use Google user data to create, train, or improve generalized AI or machine-learning models.

Seven uses provider business/API services subject to data-protection terms. Seven contractually requires each AI provider to process Seven data only to provide the contracted service or comply with law; apply appropriate security and confidentiality protections; restrict personnel and subprocessors; assist with applicable deletion or rights obligations; and provide a level of privacy protection at least equivalent to the protections Seven describes in this Policy. Provider operational retention, caching, and abuse-monitoring mechanisms can differ. They remain subject to Seven’s purpose limitation, contractual safeguards, account configuration, and applicable law rather than becoming an independent right to use your content.

Seven will not add a new AI-provider recipient or materially expand the data categories or purposes under an existing grant without updating the disclosure version and asking for permission again before the new transfer. A previously accepted disclosure that is no longer current is treated as not authorized until you review and accept the replacement.

5. Google Workspace API Data

This section applies if you connect Google Workspace services to Seven. Seven’s use and transfer of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements. If another section of this Policy conflicts with this section regarding Google user data, this section controls.

5.1 Data and Permissions

Seven requests the following Google permissions:

These permissions can technically expose broad categories of data within the connected account. Seven limits its runtime tools to the bounded operations described above and to information reasonably necessary for your request. Google displays the requested permissions before you decide whether to grant access.

5.2 Use

Seven accesses Google data only after you connect Google Workspace and request a Google-backed feature, or explicitly configure a recurring or background task that requires the access. Seven limits each access to information reasonably necessary to identify and complete that task. Actions that change data are initiated from your instruction and are subject to Seven’s applicable approval controls.

Relevant Google content may be transmitted to Seven’s AI and infrastructure processors only as necessary to provide the same user-facing feature. Seven does not sell Google user data or use it for advertising, creditworthiness, lending, cross-user profiling, or training or improving generalized AI or machine-learning models.

5.3 Storage

Seven encrypts the primary stored copy of OAuth tokens and stores connection metadata so the connection can operate. Seven-controlled systems must decrypt and use the tokens, and working copies may exist during processing. Seven does not treat a Google connection as a general backup or archive, continuously crawl the account, or bulk-import complete Gmail inboxes, Drive accounts, or calendar histories for an independent purpose.

Seven may retain selected messages, attachments, documents, or files, as well as excerpts, summaries, drafts, metadata, task records, Output, approvals, project context, and downloaded copies when they become part of a task or user-visible result. Those copies may remain with your account after the task is completed or the Google connection is disconnected and are not currently subject to a universal post-task expiration period. Retaining a requested task artifact does not authorize Seven to build a standalone database or generalized profile from Google user data.

5.4 Sharing and Transfer

We do not sell Google user data. We transfer Google user data only as permitted by Google’s Limited Use requirements: to processors needed to provide or improve a visible user-facing feature you request; for security purposes; to comply with applicable law; or as part of a merger, acquisition, or sale of assets after obtaining your explicit prior consent where Google policy requires it. Seven does not permit a processor to use Google user data for advertising, generalized AI-model training, or another independent purpose. The general service-provider categories in Section 6.1 do not expand this section.

5.5 Human Access

We do not permit personnel to read Google user data unless you have given and we have documented explicit consent to read the specific data, the data is aggregated and anonymized for permitted internal operations, access is necessary for security purposes such as investigating abuse, or access is required to comply with applicable law. Choosing to share specified information in a support case is one way you may provide consent for support access.

5.6 Disconnecting and Revoking Access

Disconnecting Google in Seven removes the active Seven connection and is intended to prevent new use through that connection. It does not necessarily revoke Google’s upstream authorization, erase historical task records or outputs, remove files already downloaded into your workspace, or recall information already sent to another service or recipient. To revoke the authorization at Google, use your Google account permissions page. To request deletion of Google-derived information held by Seven, delete your Seven account or contact support@sevenapp.ai; the limitations in Sections 8 and 9 apply.

6. How We Disclose Information

We may disclose personal information in the following circumstances:

6.1 Service Providers

We use providers that support cloud hosting and databases, AI models and transcription, email delivery, push notifications, website delivery, mapping and other requested content, security, and billing. These providers may receive the information needed to perform their services. OpenAI and Anthropic receive information only as described in Section 4 after the required permission; Stripe may receive subscription and payment information; email and push providers may receive addresses, device tokens, and message content; and mapping providers may receive query information and location coordinates when you request a location-based feature. Disclosure of Google user data is governed by Section 5.4 and is not expanded by the general service-provider categories in this section.

6.2 Services and Recipients You Direct

When you connect a service, approve an action, or ask Seven to interact with a website or person, we disclose the information necessary to carry out your request. The recipient or third-party service processes that information under its own terms and privacy practices. Actions already sent to a recipient or third party generally cannot be recalled by Seven.

We may disclose information where reasonably necessary to comply with law or legal process; establish, exercise, or defend legal claims; enforce our Terms; protect the rights, privacy, safety, or property of Seven or others; prevent fraud, abuse, or security incidents; or respond to an emergency.

6.4 Corporate Transactions

Personal information may be disclosed in connection with a financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable law. Google user data will be handled as stated in Section 5.4 and will not be transferred as part of such a transaction without the user’s explicit prior consent.

We may disclose information for another purpose with your consent or at your direction.

7. No Sale or Targeted Advertising

We do not sell personal information. We do not use personal information for targeted or cross-context behavioral advertising, and we do not disclose User Content, connected-account data, saved credentials, or task content to advertising networks for those purposes.

8. Retention

We retain information based on the type of information, why we use it, the duration of your account, and applicable legal or operational requirements. The current Services do not apply a single retention period to all information.

Information already delivered to a connected service, recipient, AI provider, payment provider, email provider, push provider, or website generally cannot be recalled by Seven. We may retain a limited record of a deletion or request where needed to demonstrate compliance, prevent fraud, or establish or defend legal claims.

Depending on the feature, you can edit certain account preferences, change device permissions, disable push notifications, disconnect integrations, disable or delete saved credentials, revoke support sharing, manage billing, and delete your Seven account. Seven’s Privacy & AI settings also show the current OpenAI and Anthropic disclosure and let you withdraw permission. Withdrawal immediately marks AI sharing unauthorized and blocks new AI-provider requests through Seven’s consent controls. It also initiates invalidation of the user’s provider credential and suspension of model-capable background runtime work as defense-in-depth measures. It does not recall a request already accepted by a provider or delete Seven’s existing task history. Seven does not currently provide a complete self-service data export or granular deletion control for every task, message, file, contact, memory, inference, embedding, or other derived copy.

To remove a Google connection, open Seven’s connection settings, select Google Workspace, and choose Disconnect. This removes the active connection and Seven’s active OAuth credentials but does not necessarily revoke Google’s upstream authorization. You can separately revoke that authorization through your Google account permissions page. To request deletion of Google-derived information held by Seven, delete your Seven account or contact support@sevenapp.ai. Where an item-specific deletion control is available, you may use it, but granular deletion is not currently available for every retained task artifact or derived copy.

Account deletion first asks Stripe to cancel any active Seven subscription associated with the account, then initiates deletion of the active Seven account and its account-specific workspace. If Seven cannot confirm cancellation of every active subscription, deletion stops and the account remains intact. When completed, deletion removes most active user-linked records. Cancellation stops future subscription renewals but does not automatically refund prior charges. Deletion may not remove information that Seven or a provider must retain for billing, accounting, tax, fraud prevention, security, legal claims, or other legal obligations; information in logs or backups; information already delivered to third parties; or copies held under a third party’s own terms. If subscription cancellation or account deletion cannot be completed through the app, contact support@sevenapp.ai.

Deleting your Seven account automatically cancels any active Seven Stripe subscription before the account is deleted. It does not revoke every authorization at a connected service or undo actions already completed. You may still use Seven’s billing control to manage or cancel a subscription without deleting your account, and you should revoke connected-service access at the provider where appropriate. Unused credits or entitlements may be lost when the account is deleted, except where applicable law requires otherwise.

If you share a Seven-hosted file link, anyone who has the link may be able to access, copy, or redistribute the file without signing in. A shared link may remain available for as long as the underlying file and account remain available and may not have a separate expiration or revocation control. Share links only with people you trust.

10. International Processing

Seven and its service providers may process information in the United States and in other locations where they operate. Those locations may have privacy laws different from those where you live. Where applicable law requires a particular transfer mechanism or safeguard, we will use the mechanism or safeguard required for the relevant processing.

11. Security

The Services use safeguards designed to protect personal information. Some sensitive records are encrypted in Seven’s primary storage, and the Services include access controls and logging. The safeguards that apply can vary by system and type of information.

Seven is not an end-to-end encrypted or zero-knowledge service. Seven-controlled systems must be able to decrypt and process connected-service tokens, saved credentials, User Content, and Output when needed to provide the Services. Not every record or working copy receives the same form of encryption. No system is perfectly secure, and we cannot guarantee absolute security.

You are responsible for protecting your email account, devices, connected accounts, shared links, and approval controls. Contact support@sevenapp.ai promptly if you believe your account or information has been compromised. If a security incident requires notice under applicable law, we will provide that notice.

12. Human Access and Support

Seven operates primarily through automated systems, but Seven-controlled systems and people with systems access are technically capable of accessing personal information. Personnel may access information to provide support you request; secure, maintain, or troubleshoot the Services; investigate fraud, abuse, or security incidents; comply with law; or act with your consent. Access is not limited exclusively to the support-sharing feature. Access to Google user data is subject to the narrower rules in Section 5.5.

Support cases include the baseline diagnostics described in Section 2.8, and you may choose to share task transcripts or runtime logs. Access through the support-case feature is logged. Revoking a case prevents later access through that case but cannot recall information already viewed or copied.

13. Automated Processing and High-Impact Uses

Seven uses automated systems to plan tasks, generate content, make recommendations, and operate tools. Approval requirements vary by feature, action, permission, and credential setting. Some supported actions use an explicit approval flow; other permitted or read-only actions may occur without a new approval prompt. Stopping a task cannot undo a completed action and may not stop a request already in flight to a third party.

Seven is not offered as a system for making legal or similarly significant eligibility decisions about people. Our Terms prohibit using the Services to make or materially support decisions about another person’s employment, credit, housing, education, insurance, healthcare, legal rights, or access to essential services. Do not rely on Seven as a substitute for qualified professional judgment.

14. Children’s Privacy

The Services are for people who are at least 18 years old. We do not offer a parental-consent or dependent-account feature and rely on each user’s representation that they meet the age requirement. If we learn that a person under 18 is using the Services, we may suspend or delete the account and take steps appropriate under applicable law. Contact support@sevenapp.ai if you believe a minor has provided personal information to Seven.

15. Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have rights to request access, correction, deletion, or a portable copy of personal information; restrict or object to certain processing; withdraw consent; appeal a denial; and receive information about our processing. You may also have a right not to receive discriminatory treatment for exercising a privacy right.

To submit a request, contact support@sevenapp.ai from the email address associated with your account where possible. We may request information reasonably necessary to authenticate you and protect the account. An authorized agent may submit a request where applicable law permits, but we may require proof of authority and verification of the consumer. If applicable law gives you a right to appeal a denial, you may appeal by replying to the denial. These email-based processes are separate from the self-service controls described in Section 9.

15.1 California

To the extent the California Consumer Privacy Act applies, the information described in Section 2 may fall within these categories: identifiers; customer-record information; characteristics of protected classifications or education information you choose to include in User Content; commercial information; internet or other electronic-network activity; precise and approximate geolocation; audio, electronic, and visual information; professional or employment information included in User Content or contacts; inferences; and sensitive personal information such as account access information, precise location, private communications, credentials, and health or financial information you choose to provide.

We collect these categories from you, your device, connected services you authorize, payment and app-service providers, and other people who include information in content processed through Seven. We use them for the purposes in Sections 3 through 5 and disclose them to the recipient categories in Section 6. Retention criteria are described in Section 8.

We do not sell personal information or share it for cross-context behavioral advertising. We use sensitive personal information to provide requested features, maintain and secure Seven, and comply with law—not to infer characteristics for advertising. California residents may submit requests to know, access, correct, or delete personal information, or to limit a use of sensitive personal information where that right applies, by using the method above.

Because Seven does not sell personal information or share it for cross-context behavioral advertising, a Global Privacy Control signal does not change the website’s current behavior. If our practices change, we will recognize qualifying opt-out preference signals as required by law.

15.2 Other U.S. States and Jurisdictions

Where another applicable law provides privacy rights, including a right to appeal a denied request or opt out of a covered use, we will honor those rights as required by that law. Seven does not currently sell personal information, use it for targeted advertising, or offer a feature intended to make covered consequential decisions about consumers.

16. Consumer Health Data Privacy Notice

Seven is a general-purpose assistant, not a health or medical service. However, “consumer health data” under some state laws may include health information or health-related inferences that you or another person place in User Content, email, calendar events, contacts, files, images, audio, location context, websites, or connected services.

The categories may include information about a health condition, treatment, medication, mental or physical health, reproductive or sexual health, bodily functions, health services, or precise location that reveals an attempt to obtain health services. Seven receives this information from you, connected services you authorize, other people whose information appears in content you provide, and inferences created from those sources.

We process consumer health data to provide a feature you request, maintain context you choose to provide, secure or support the Services, comply with law, or for another purpose with any consent required by law. Depending on the feature and content involved, it may be disclosed to AI and transcription providers, cloud and database providers, email-delivery or push-notification providers, mapping providers, a connected service, a recipient you direct, or legal and safety recipients described in Section 6. We do not sell consumer health data or use it for advertising.

Where applicable consumer-health law provides rights to confirm processing, access data, receive information about recipients, withdraw consent, delete data, or appeal a denial, submit the request to support@sevenapp.ai. We will process the request as required by applicable law. Withdrawing consent does not affect processing already completed and cannot recall information already disclosed at your direction. Do not use Seven for emergency care, diagnosis, treatment, or as a repository for records subject to specialized healthcare laws unless Seven expressly agrees otherwise in writing.

17. Third-Party Services

Third-party websites, connected services, recipients, app platforms, and other services have their own privacy practices. Seven does not control their processing. Review their terms and privacy notices before connecting an account, sharing information, or approving an action.

The independent terms of a third-party service do not expand Seven’s permitted use of Google user data. Google user data remains subject to Section 5 when it is transmitted to a Seven processor.

18. Changes to This Privacy Policy

We may update this Privacy Policy as the Services or law changes. If a change is material, we will provide notice as required by law. The “Last Updated” date identifies the current version. Seven versions its AI disclosure separately. Adding an AI-provider recipient or materially changing AI data categories or purposes invalidates the prior grant, and Seven will seek permission again before making the new transfer. Before requesting an additional Google permission or using Google user data for a materially different purpose, Seven will update its disclosures and obtain any new consent required by Google policy before beginning that access or use.

19. Contact Us

For questions, concerns, or privacy requests, contact:

Seven Technologies, Inc.
Address: 2810 N Church St STE 88613, Wilmington, DE 19802
Privacy and Rights Contact: support@sevenapp.ai
Support Contact: support@sevenapp.ai
General Inquiries: hello@sevenapp.ai