a7i.aiWhat we handle, why we need it and the choices you have.
This notice covers the a7i.ai website and service. “We” means the team operating a7i.ai. Business registrations are planned in the United States, United Kingdom and Philippines; the legal operator details and business addresses are being finalised. Contact support@a7i.ai for privacy questions.
We handle account details, such as your name, email address and sign-in information; content you submit or create, such as chats, documents, media and apps; and settings, connection records, usage and payment references. Service and security logs can include technical information about requests, devices and errors.
If an organisation provides your workspace, it may control membership, shared content and settings. Ask its administrator about its policies and access. Its responsibilities for the information it puts into the service are separate from ours.
Where data-protection law requires a legal basis, the relevant basis depends on the activity: providing the service you requested, legitimate interests in operating and securing it, legal obligations, or consent where required. You can withdraw consent without changing the lawfulness of earlier processing.
Relevant messages, attachments, retrieved passages and tool results may be sent to the model provider used for your request. Tools can also send information to a connected service. Processing and retention depend on the provider, account terms and configuration. Choosing a cloud model is not the same as processing everything on your device.
The service uses your content to provide requested features, including retrieval and workspace memory where enabled. This is different from training a general-purpose model. Do not assume that every third-party model has the same training or retention policy; check the provider terms for your chosen configuration. See service providers.
Private chat skips the application’s conversation-content storage paths and suppresses content-bearing logs from the private run. Operational usage information may remain. Tools can still save documents, images and other results, and providers can still process the request. Read the private-chat explanation before relying on it for sensitive work.
When enabled and authorised, Google sign-in supplies identity information, and Google connections can read information needed for supported Gmail, Drive or Calendar tasks. Available actions depend on the connector and its permissions; connecting an account does not mean every action is supported. Information returned in a shared conversation can be visible to its participants.
Our use and transfer of Google API data must follow the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it for advertising or use it to train general-purpose AI models. Human access is limited to the circumstances permitted by that policy, such as your consent, security investigations or legal requirements.
Disconnect a service in the app’s connection settings, and remove access in your Google Account permissions if needed. Disconnecting does not erase copies already saved in chats or documents.
Hosting, model, payment and other service providers receive information needed for their role. People you share with can see the content made available to them. Information may also be disclosed where law requires it or to address security incidents and protect legal rights. A business transfer may require transfer of relevant records, subject to applicable obligations.
Hosting and model-processing locations can differ. Providers may process information outside your country. Business registration in a country does not mean your data stays there. For an organisation with location restrictions, confirm deployment regions, provider terms and any required transfer arrangements before use.
Workspace content is generally kept to support the service until removed through its controls or a deletion request. Account deletion does not remove every shared record or third-party copy. Billing, audit, security and recovery records may remain for their operational or legal purpose. Exact periods depend on the record and deployment; a single verified retention schedule is not yet published. Contact us for the schedule applicable to your workspace.
You can manage connections, review sharing, export supported account data and request deletion. Depending on applicable law, you may also request access, correction, restriction or portability, object to processing, withdraw consent, or complain to a relevant data-protection authority. These rights can have exceptions. We may need to verify your identity and will handle requests within applicable legal time limits.
Email support@a7i.ai with “Privacy request” and your workspace address. Do not include passwords or access tokens. See data deletion and browser storage.
The service is not presented as a children’s service. If you believe a child has supplied personal information without appropriate authority, contact us. Do not upload regulated or highly sensitive information unless your workspace arrangement and provider settings are suitable for it.
We will update this page as the service and business arrangements change and provide additional notice where required. The date above identifies this version. Our Security page describes product protections without promising that every optional control is enabled.