Privacy Policy

1. Who is responsible

7D24H Group, United Arab Emirates, is the controller of the personal data described here. Privacy contact: support@7d24h.work.

In a private deployment, the customer is the controller of data on its servers and we act only on its instructions under a data processing agreement.

2. What we collect

• Account data: email, display name, avatar, password hash, and the account identifier from Google, GitHub or Apple if you sign in with them. One-time sign-in codes are sent by email.
• Cloud content, only if you use cloud features: workspaces, documents and their history, comments, files, and search indexes built from workspace content.
• AI usage: the model used, token counts and cost for billing. If you use cloud AI chat, the conversation is stored in your account. Prompts sent through our model gateway are not stored there.
• Payment data: orders, subscriptions, invoices and your prepaid credit balance. Card details are handled by our payment provider and are not stored by us.
• Contact-form data: your name, email, message, the page you sent it from, and your IP address and browser details, sent to our team by email. It is not stored in our database; a temporary code made from your IP and email is kept for 30 minutes to limit repeat submissions.
• Usage and diagnostic data, only if you allow it: feature-usage events and crash reports from the desktop apps, linked to your account.
• Technical data: IP address, device and operating-system details, access times, error and security logs.

3. What stays on your device

Each app stores your material on your device by default. Chat-platform bots you connect (for example Telegram or Slack) talk to those platforms directly from your device. Voice dictation sends your audio directly from your device to the speech-recognition service configured in the app (by default ByteDance Volcano Engine), only while you dictate and only after you agree before first use. The phone remote passes messages through our server without storing them.

4. Why we use it, and on what basis

To provide the Services you asked for: accounts, sign-in, sync, collaboration, AI features, billing and support (necessary to perform our agreement with you).

To keep the Services secure and prevent abuse and fraud (necessary to perform our agreement with you), and to meet tax, accounting and other legal obligations (required by law).

With your consent: product news, usage analytics and crash reports, and voice dictation. You can withdraw consent at any time; this does not affect processing already done.

5. AI processing

When you use a model we provide, your prompt and the related content pass through our server to that model’s provider, which processes them to produce the answer under its own terms and data-retention rules. You can ask us at the address in “Your rights” for the current list of providers and their locations.

When you add your own model API key, your app sends prompts directly to that provider; we do not receive them.

We do not use your content to train AI models. AI output does not make decisions with legal or similarly significant effect about you.

6. Who we share it with

Service providers that help us run the Services: our cloud hosting provider (Alibaba Cloud, Dubai) for servers and storage, with email sent from our own mail server; payment providers and app stores; AI model and web-search providers when you use those features; speech recognition when you dictate. They may use the data only to provide their service to us or to you.

Authorities, when UAE law or a lawful order requires it, or when needed to protect rights and safety. We do not sell personal data.

7. International transfers

Our servers are located in Dubai, United Arab Emirates. Some providers, including AI model providers, are located in other countries, such as the United States and China. We transfer personal data abroad only as UAE law permits: to countries with adequate data-protection law, or under contractual safeguards with the provider. For voice dictation, we also ask for your consent before first use.

8. How long we keep it

• Account data: while your account exists.
• Sign-in sessions: up to 15 days.
• Cloud content: until you delete it or your account. Cloud AI chats: while your account exists. Deleted data is removed from backups within a reasonable period.
• AI audit records, if enabled: 90 days (full answers 14 days). Temporary files from document conversion: 7 days.
• Contact-form emails: as long as needed to handle your request.
• Payment and tax records: as long as UAE tax law requires (at least 5 years).
• Security logs: for a limited period, as long as needed to keep the Services secure.

9. Security and data breaches

We use technical and organizational measures such as encryption in transit, access controls and logging. If a breach is likely to harm your privacy, we will notify the UAE Data Office and you as the law requires. Please also protect your devices, passwords and local files.

10. Your rights

Under UAE law you can ask to receive information about our processing; get a copy of your data, including in a portable format; correct or complete it; erase it; restrict or stop its processing; object to decisions based solely on automated processing; and withdraw consent.

You can delete your account in the app (Settings → Account). If you own a team workspace, transfer or delete it first. For other requests, write to support@7d24h.work; we may verify your identity and will reply within 30 days. You may also complain to the UAE Data Office.

11. Cookies and local storage

The website remembers your language choice in a cookie, stores your theme and the time of your last contact message in your browser’s local storage, and sets sign-in cookies only when you sign in. It uses no advertising trackers.

Usage analytics and crash reports in the desktop apps are used only if you allow them; you can change this in Settings.

12. Sensitive data

Do not upload health, biometric or other sensitive personal data about others to cloud features unless you have a lawful basis and any required approvals. Patient health data subject to UAE health-data rules must not be stored in cloud features.

13. Children

The Services are not intended for anyone under 18, except students using them through a supervising institution. If you believe a child has given us personal data, contact us and we will delete it.

14. Changes and contact

We will post updates here and notify you of material changes by email or in the app. Questions, requests and complaints: support@7d24h.work.