Privacy Policy

Last updated: August 2026

Sevenfold is a product of Round Pixel Pty Ltd (ABN 82 626 610 400), an Australian company based in Melbourne, Victoria, Australia. For privacy matters, contact privacy@sevenfoldai.com; for other legal matters, contact legal@sevenfoldai.com.

Introduction

Sevenfold (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our platform and services.

Information We Collect

We may collect the following categories of personal information:

  • Account information — name, email address, phone number, business name
  • Usage data — how you interact with the platform, features used, session data
  • Technical data — IP addresses, device type, browser information, operating system, and log files
  • AI interaction records — inputs you provide to AI agents and outputs generated on your behalf
  • Communications data — messages, calls, and interactions processed through the platform on your behalf
  • Payment information — billing details processed securely through our payment provider

How We Use Your Information

We use personal information to:

  • Provide, operate, and improve the Sevenfold platform
  • Process transactions and send related information
  • Respond to customer support requests
  • Send service-related communications
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

We do not use your data to train AI models. See our Trust & Security Center for more detail.

AI Data Commitments

Sevenfold does not use your content, AI interaction records, or any data processed through the platform to train, improve, or develop AI or machine learning models — ours or any third party’s. AI inference is routed only to vetted providers under strict data protection obligations.

Connected Google Services

When you voluntarily connect Gmail or Google Calendar to Sevenfold, we access and process Google user data only after you authorise the connection through Google’s official OAuth permission flow. The data accessed depends on the service you connect and the features you enable.

Gmail data we access. Sevenfold may access email metadata, including senders, recipients, dates and subjects; message and thread content; text attachments; drafts; sent messages; labels; and archive state when required for an enabled feature.

How we use Gmail data. Sevenfold uses Gmail access to read messages, create contextual reply drafts, apply labels, archive messages when requested or enabled, and send emails after user approval or through user-configured automations. The gmail.modify scope is required to read message content and conversation context, create drafts, send approved or automated emails, apply labels, and archive messages. Read-only access cannot create drafts, send emails, or organise messages, while send-only access cannot read the messages needed to prepare contextual replies.

Sevenfold does not mark Gmail messages as read or unread, trash or delete them, use Gmail data for advertising, or use Gmail data to train AI models.

Google Calendar data we access. Sevenfold may access event titles and descriptions, dates and times, attendees, availability, and video-meeting links from the connected user’s primary calendar.

How we use Google Calendar data. Sevenfold uses Google Calendar access for appointment scheduling and meeting assistance. It can view availability and event details; create, reschedule or cancel events; add attendees and Google Meet links; and allow the user to select meetings for Sevenfold’s meeting assistant to join as a notetaker. The calendar.events.owned scope is used because Sevenfold needs to read, create, update and delete events on calendars owned by the authenticated user. Read-only access cannot add confirmed bookings or make requested calendar changes, and Sevenfold does not request permission to manage events on calendars the user does not own.

Sevenfold does not modify calendar-sharing permissions or delete users’ calendars. If the user enables the meeting notetaker, meeting details and content may be processed by Recall.ai so Sevenfold’s meeting assistant can join the meeting and prepare notes.

AI processing and service providers. Selected Gmail or Google Calendar data may be sent to OpenAI solely to generate user-requested or user-configured drafts, summaries, classifications, recommendations, or actions. Recall.ai processes meeting details and meeting content only when the meeting notetaker is enabled. Google user data is not sold, used for advertising, or used to train AI models.

Security of Google user data. Google user data is protected using encryption in transit and at rest, access controls, and workspace isolation that keeps each customer’s data separate. Google OAuth credentials are encrypted independently from customer content and are accessible only to the systems that require them to provide the authorised integration. Internal access follows least-privilege controls and is limited to the systems and personnel necessary to provide the service you have authorised.

Disconnection and revocation. Google OAuth tokens are used only for the connection authorised by the user. Disconnecting a Google integration removes the active connection and stops further access. An encrypted credential may remain in a restricted retry record for up to seven days solely to complete revocation with Google, after which it is erased from that record. Users may also revoke Sevenfold’s access through their Google Account security settings. Disconnecting does not automatically remove drafts, sent messages, labels, calendar events, meeting notes, or other content previously created or retained through an enabled feature.

Retention and deletion of Google-derived data. Google-derived data retained by Sevenfold — including stored email-derived content, calendar-derived information, meeting notes, and AI-generated outputs based on Google Workspace data — follows the retention and deletion periods described under Data Retention below. Users may request earlier deletion where applicable, as described under Your Rights.

Sevenfold’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. These commitments apply to raw Google user data and to information that is derived, aggregated, anonymised, or de-identified from Google user data.

Sevenfold does not use raw or derived Google Workspace API data for advertising, unrelated profiling, determining creditworthiness or eligibility for lending, sale or transfer to data brokers, or the development, improvement or training of generalized AI or machine-learning models.

Connected Social Media and WhatsApp Accounts

When you connect a Meta account (Facebook, Instagram, Threads, or a WhatsApp Business Account) to Sevenfold — for example, to run a Social Media Manager or connect a WhatsApp sender — Sevenfold receives only the data needed to operate the features you enable. This access occurs only after you authorise the connection through Meta’s official login or Embedded Signup flow, and you can revoke it through Meta. If a person messages a WhatsApp sender connected to Sevenfold, we also process that person’s message and phone number so the connected business can receive and respond to the conversation.

Depending on the platform and the features you turn on, Sevenfold may receive:

  • Facebook — Page ID, Page name, Page access token, publishing data (posts, scheduled content, and post status), and, where you enable messaging, direct messages sent to and from the Pages you connect.
  • Instagram — professional account ID, username, profile details, media, publishing status, and, where you enable messaging, direct messages for the account you connect.
  • Threads — account ID, profile details, content, and publishing status for the account you connect.
  • WhatsApp Business — business portfolio and WhatsApp Business Account identifiers; business phone number and Meta phone-number identifier; verified display name; sender, account, quality, and messaging-limit status; encrypted access credentials; message-template content and approval status; and customer communications. Customer communication data may include phone numbers, message text and captions, button or list selections, Meta media identifiers and file details, provider message identifiers, timestamps, and delivery, read, or failure status.

Where you enable messaging features and grant the relevant permissions, Sevenfold reads and responds to direct messages on your connected accounts on your behalf.

How we use WhatsApp data. Sevenfold uses WhatsApp Business data to connect and operate the sender selected by the business, manage and synchronise message templates, receive and organise customer conversations, route inbound messages to the assigned AI Employee, send replies or approved template messages, and track delivery status. When AI replies are enabled, bounded conversation content and conversation summaries may be processed by OpenAI solely to generate the requested reply or maintain conversational context. WhatsApp data is not used to train AI models.

We do not sell your Meta data. Data received from Meta platforms is used solely to operate the features you have enabled and is never sold, rented, or shared for advertising purposes.

Token security. Access tokens issued by Meta are stored encrypted and used only to perform the actions you authorise. They are never exposed to other customers.

Disconnection and deletion. You can disconnect Facebook, Instagram, or Threads from Settings → Integrations in Sevenfold, or revoke Sevenfold through your Meta account settings. For WhatsApp, removing a sender from WhatsApp → Senders stops that sender from routing new conversations through Sevenfold, but it does not deregister the phone number from Meta, delete the WhatsApp Business Account or number, remove Meta’s copies of messages, or automatically erase data already stored by Sevenfold. To request deletion of Meta- or WhatsApp-derived data Sevenfold already holds, see our Meta and WhatsApp Data Deletion page.

How We Share Your Information

We do not sell or rent your personal information. We share information only where necessary to operate the services you request or where disclosure is otherwise permitted or required. This may include:

  • Service providers that support hosting, storage, payments, analytics, security, diagnostics, customer support, AI inference, and enabled meeting features, under contractual confidentiality and data-protection obligations
  • Authorised workspace members where access is necessary to use collaborative workspace features
  • Law enforcement, courts, or regulators where disclosure is required by applicable law or necessary to protect rights, safety, and security
  • A successor organisation in connection with a merger, acquisition, restructuring, or sale of assets, subject to applicable privacy requirements

Google User Data Restrictions

  • Sevenfold accesses Google user data only after the user grants permission through Google’s OAuth flow and only to provide the Gmail or Google Calendar features the user enables.
  • Google user data is shared with service providers only where necessary to provide those enabled features. This includes selected data processed by OpenAI for user-requested or user-configured AI functions and meeting data processed by Recall.ai when the meeting notetaker is enabled. These providers are not permitted to use the data for their own advertising or AI-model training.
  • Sevenfold does not sell or rent raw or derived Google user data, use it for advertising or unrelated profiling, transfer it to data brokers, or use it to determine creditworthiness or eligibility for lending.
  • Sevenfold does not use raw or derived Google user data to develop, improve, or train AI or machine-learning models, including generalized AI or machine-learning models.
  • Human access to Google user data is limited to circumstances where the user gives affirmative permission for support, access is necessary to investigate security or abuse, disclosure is required by law, or the data has been aggregated for permitted internal operations.
  • Users can disconnect Google services in Sevenfold or revoke Sevenfold’s permissions at any time through their Google Account security settings.
  • Google user data will not be transferred as part of a merger, acquisition, or sale of assets without the user’s explicit prior consent where required by the Google API Services User Data Policy.

Data Retention

We retain personal information for as long as necessary to provide our services and comply with legal obligations. Upon cancellation of your account, your data is retained for 30 days before permanent deletion. You may request earlier deletion by contacting us.

Your Rights

Depending on your location, you may have rights to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your personal information
  • Restrict or object to certain processing
  • Data portability

To exercise these rights, contact us at privacy@sevenfoldai.com.

Children’s Privacy

The Sevenfold platform is intended for business use by individuals aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Cookies

We use cookies and similar technologies to operate our website and, with your consent, to understand how it is used. Using the cookie banner on our site, you can accept all cookies, reject non-essential cookies, or manage your preferences by category at any time.

We group cookies into the following categories:

  • Essential cookies — required for the website to function, including remembering your cookie choices and keeping the site secure. These are always active and do not require consent.
  • Website analytics — help us understand how visitors use the site so we can improve it. Our website uses Plausible, a privacy-friendly analytics tool that does not track you across sites and never uses your data for advertising.
  • Marketing cookies — used to measure advertising and campaign performance, including remembering which campaign or ad referred you (for example, UTM tags or ad-click identifiers) so we can attribute sign-ups. These are set only after you accept marketing cookies.

Non-essential cookies do not load until you consent, and your choice is remembered so you are not asked on every visit. You can also control cookies through your browser settings, though disabling certain cookies may affect website functionality.

The platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing any personal information.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a notice on the platform. Continued use after changes are posted constitutes acceptance of the revised policy.

Contact

For privacy-related queries or to exercise your rights, please contact our Privacy Officer at privacy@sevenfoldai.com.