Privacy Policy

1. Who we are

SevenLLM ("SevenLLM", "we", "us") is a workspace that routes your requests to leading third-party AI models. The service is operated by [PLACEHOLDER: legal entity name], [PLACEHOLDER: registered address]. For any privacy question, contact us at info@prosculpt.co.

2. Data we collect

• Account data: your email address and authentication identifiers.
• Workspace data: tenant, team membership, and role.
• Content you provide: files you upload, prompts you submit, and the results we generate.
• Usage data: job type, status, timestamps, token counts, and model used.
• Payment data: processed by Razorpay; we receive billing status and invoices, not full card details.
• Product analytics: collected through PostHog only after you give consent (see Section 9).
• Technical logs: limited diagnostic and security logs (for example IP address and error reports).

3. How we use your data

• To provide the service: run AI jobs, store files, and return results.
• To operate your account, workspace, and billing.
• To keep the service secure and prevent abuse.
• To improve the product through analytics, only where you have consented.

We do not sell your personal data, and we do not use your content to train AI models.

4. Legal basis and consent

Under the GDPR, we rely on performance of a contract (to provide the service), our legitimate interests (security and core product improvement), consent (for non-essential analytics), and legal obligations. Under India's Digital Personal Data Protection Act, 2023 (DPDP), we process personal data on the basis of your consent and for legitimate uses permitted by the Act. You may withdraw consent at any time.

5. AI processing

To fulfil a request, the relevant content is sent to the AI provider that handles it. We pass only what is needed to complete your task. Providers process that content under their own terms; we do not permit your content to be used to train their models where that option is available to us.

6. Sharing and sub-processors

We share data with vetted service providers who process it on our behalf:

• Supabase (database, authentication).
• Cloudflare R2 (file storage).
• Upstash (background job queue).
• Razorpay (payments and invoicing).
• PostHog (product analytics, consent-gated).
• Sentry (error monitoring).
• AI providers (OpenAI, Anthropic, Google, xAI, Meta, DeepSeek, Mistral) to run your requests.

7. International transfers

Your data may be processed in countries other than your own. Where required, we put appropriate safeguards in place for such transfers [PLACEHOLDER: transfer mechanism, for example standard contractual clauses].

8. Retention

We keep account data while your account is active. Uploaded files and results are retained according to your plan's retention window. When you delete content or close your account, we delete or anonymise the associated data within a reasonable period, except where we must retain it to meet a legal obligation.

9. Cookies and analytics

We use only essential storage by default. Non-essential analytics and session insights load through PostHog only after you click Accept on our consent banner. You can decline, and you can change your choice at any time by clearing the consent stored in your browser.

10. Your rights

Subject to applicable law, you have the right to access, correct, and delete your personal data, to restrict or object to certain processing, to data portability, and to withdraw consent. Under the DPDP Act you also have the right to grievance redressal and to nominate another person to exercise your rights. To exercise any right, email info@prosculpt.co and we will respond within the timelines required by law. EU/UK users may also lodge a complaint with their supervisory authority.

11. Grievance Officer (DPDP, India)

In accordance with the DPDP Act and applicable rules, our Grievance Officer is [PLACEHOLDER: name], reachable at info@prosculpt.co. The Grievance Officer addresses data principal complaints within the timelines prescribed by law.

12. Children

SevenLLM is not directed to children. We do not knowingly process the personal data of children below the age set by applicable law [PLACEHOLDER: age threshold] without verifiable parental or guardian consent.

13. Changes

We may update this policy. We will post the new version here and update the date above. Where changes are material, we will provide additional notice.

14. Contact

Questions or requests: info@prosculpt.co, [PLACEHOLDER: registered address].