Privacy Policy | 7E

Introduction

This Privacy Policy applies to personal data we process when providing the Services. It does not apply to third-party services or websites that we do not control, or to an organization's own privacy practices when it uses the Services with its Users.

"Customer Data" has the meaning given in our Terms of Service and generally means data, content, files, prompts, responses, records, and other information submitted, uploaded, stored, transmitted, generated, or otherwise made available through the Services.

1. Personal Data We Collect

A. Account and contact data

We collect information used to create, administer, and identify accounts and Users, such as name, email address, profile details, profile image, organization name, role, permissions, invitation status, and account settings.

B. Authentication, session, and security data

We process data used to authenticate Users, maintain sessions, secure accounts, prevent abuse, and investigate security events. This may include credential records, linked sign-in providers, verification status, two-factor settings, session identifiers, IP address, user agent, device/browser information, identity verification timestamps, and rate-limit or audit records.

C. Customer Data

We process Customer Data that Customers and Users choose to provide or generate through the Services. Depending on use of the Services, this may include business records, governance and investor-relations information, questionnaire responses, comments, project records, evidence files, documents, images, external contributor contact details and responses, automation prompts, AI inputs and outputs, notifications, and related metadata.

D. Billing and subscription data

We collect and receive billing-related information such as plan, subscription status, invoice details, billing contact information, payment status, and payment processor identifiers. Payment card details are handled by our payment processor; we do not intentionally store full payment card numbers.

E. Communications and support data

We process information in communications with us and through the Services, including support requests, legal or privacy inquiries, transactional emails, notification preferences, delivery metadata, and related correspondence.

F. Usage, device, and log data

We collect technical and usage data to operate, secure, and improve the Services. This may include IP address, browser type, device information, operating system, pages or features used, referring URLs, dates and times of activity, diagnostic logs, performance data, crash reports, and security events.

G. Information from third-party and public sources

We may receive information from third-party services that Customers or Users choose to use with the Services, such as sign-in providers, payment processors, address autocomplete services, and communication providers. Some features may also retrieve or process public information, public company filings, or publicly available web content to provide requested workflows.

2. How We Use Personal Data

We use personal data to provide, maintain, secure, and improve the Services; create and administer accounts; authenticate Users; manage subscriptions and billing; deliver transactional emails and notifications; provide support; run requested workflows and automations; provide AI-assisted features; monitor reliability and performance; prevent fraud and abuse; comply with legal obligations; and enforce our agreements.

We do not sell personal data, and we do not share personal data for cross-context behavioral advertising. We do not use personal data for targeted advertising.

3. AI Processing

Certain Services use AI-enabled features to assist with analysis, summaries, recommendations, drafting, retrieval, automations, search, and related workflows. To provide those features, we may process Customer Data, prompts, uploaded or linked materials, public-source content, context selected by the User or Customer, and generated outputs.

AI-enabled features may rely on service providers that process data on our behalf. We disclose AI processing at this functional level rather than describing internal endpoints or implementation details. Customers and Users are responsible for reviewing AI outputs before relying on them or sharing them.

4. How We Share Personal Data

We may share personal data with the Customer and Users according to account settings, roles, permissions, and Customer instructions. For example, information submitted within a Customer workspace may be visible to other authorized Users in that workspace.

We may also share personal data with service providers and subprocessors that help us provide the Services, including providers for hosting and infrastructure, database and object storage, payment processing, email delivery, security and error monitoring, background jobs, address autocomplete, public-source retrieval, AI-enabled processing, support, analytics, and compliance. These providers are authorized to process personal data as needed to provide services to us. The current list of subprocessors is available on request by contacting privacy@the7e.com.

We may disclose personal data when required by law, legal process, or governmental request; to protect the rights, safety, security, or property of 7E, Customers, Users, or others; to enforce agreements; to professional advisers; or in connection with a merger, acquisition, financing, reorganization, or similar business transaction.

5. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to provide the Services, keep Users signed in, remember preferences, maintain application state, secure the Services, and understand reliability and usage. Blocking necessary cookies or storage may prevent the Services from working correctly.

On our public sign-in and registration pages we use a privacy-first analytics provider (Fathom Analytics) configured so that it does not use cookies, does not store personal identifiers, and does not track individuals across websites or sessions. Any information processed for these analytics is aggregated and used solely to understand page performance and usage trends.

We do not use cookies or similar technologies for targeted advertising.

6. Retention

We retain personal data for as long as reasonably necessary to provide the Services, maintain business and security records, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate operational needs. Retention periods vary based on the type of data, Customer instructions, account status, backup cycles, legal requirements, and security or audit needs.

When personal data is no longer needed, we may delete, anonymize, or de-identify it, subject to legal, security, backup, and operational requirements.

7. Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal data. No internet or storage system is completely secure, and we cannot guarantee absolute security.

Customers are responsible for managing User access, permissions, devices, and credentials within their own organization.

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, export, or object to certain processing of personal data. You may submit a request by contacting privacy@the7e.com. We will respond as required by applicable law.

If your personal data is processed as part of an organization's use of the Services, we may direct your request to that organization or require that the organization respond, because it may control the relevant account and Customer Data.

You may manage certain account information, notification preferences, and security settings within the Services where those controls are available.

9. Jurisdiction-Specific Disclosures

Depending on your location, we may process personal data based on contractual necessity, legitimate interests, consent, legal obligations, or other lawful bases recognized by applicable law. Personal data may be transferred to and processed in the United States and other jurisdictions where we or our service providers operate, using legally recognized transfer mechanisms where required.

For US state privacy laws, including California privacy law where applicable, we provide this Privacy Policy as a notice at collection. We do not sell personal data or share personal data for cross-context behavioral advertising. We do not knowingly process sensitive personal data for the purpose of inferring characteristics about a consumer.

Applicable rights may include the right to know or access personal data, delete personal data, correct inaccurate personal data, obtain a portable copy, opt out of sale or sharing, limit certain uses of sensitive personal data, and be free from discrimination for exercising privacy rights. You may designate an authorized agent as permitted by law, and we may require information needed to verify the request.

10. Children

The Services are business services and are not directed to children. We do not knowingly collect personal data from children under 18. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.

11. Privacy Policy Changes

We may update this Privacy Policy from time to time. When we do, we will publish the updated version and revise the "Last updated" date above. If changes are material, we will provide notice as required by law.

12. Contacting Us

7Environmental Inc.

600 Park Offices Dr., Suite 300

Durham, NC 27713

Privacy Requests and Questions: privacy@the7e.com

Legal Notices: legal@the7e.com

Securing — 7Elive

▸Secure session

› Booting secure session

✓ Connection encrypted end-to-end