// privacy

Privacy

Last updated: 13 October 2026 · Version 2

1. Controller and contact
2. Hosting and server logs
3. Language selection
4. Cookies and consent
5. Statistics and marketing services
6. Cookie list
7. Contact by email
8. Newsletter and email
9. The 7brain app
10. Your rights
11. Changes

1. Controller and contact

The controller responsible for processing your data is:

7Cloud AG
Bahnhofstrasse 19
9100 Herisau, Switzerland
Phone: +41 71 577 46 30
Email: info@7cloud.ai

For any data protection questions, contact us at info@7cloud.ai.

This policy applies to the website 7brain.wtf and the 7brain app at app.7brain.wtf. It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

2. Hosting and server logs

The website and app are run by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Whenever a page is requested, Vercel processes technically necessary details in server logs: IP address, date and time, URL requested, referrer, browser type and operating system. This serves only to deliver the website and keep it stable and secure.

• Legal basis: our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).
• Retention: the hosting provider deletes the logs after a short time, at the latest after 30 days.
• Third country: Vercel is certified under the EU-US Data Privacy Framework (and its Swiss extension); standard contractual clauses also apply under the data processing agreement.

Fonts: all fonts are hosted on our own server. No Google Fonts or other fonts are loaded from third-party servers.

3. Language selection

We choose the language of the home page based on the country our hosting provider derives from your IP address (Germany, Austria, Switzerland: German, otherwise English). We do not store this country. If you use the language switch, we store your choice in the cookie lang so that the page opens in that language next time. The legal basis is our legitimate interest in an understandable website (Art. 6(1)(f) GDPR); the cookie is strictly necessary for the service you requested (§ 25(2) no. 2 TDDDG).

4. Cookies and consent

We always set necessary cookies (language, your cookie choice). Everything else – statistics and marketing – is only loaded if you explicitly consent. Before that, no tracking script is loaded and no request is sent to third parties. Nothing is pre-selected.

• Consent tool: we built the cookie banner ourselves; it runs on our server and sends nothing to third parties.
• What is stored: your choice per category, the date and the version in the cookie 7b_consent in your browser, for 12 months. After that, or when we add new services, we ask again.
• Revoking and changing: at any time with effect for the future via the “Cookie settings” link at the bottom of every page. If you revoke, we delete the cookies of the services concerned and reload the page.
• Google Consent Mode v2: for Google services everything is set to “denied” by default; only your consent unlocks the respective category.
• Legal basis: for statistics and marketing your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); for necessary cookies § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

5. Statistics and marketing services

The following services may be used on the website. A service is only loaded if we have activated it and you have consented to its category. You can see which services are currently active at any time in the cookie settings. We measure page views as well as clicks on “See a demo” (as a lead) and “Open app” (as a contact).

For all services: the legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can revoke at any time in the cookie settings. Where data goes to the USA, we rely on the EU-US Data Privacy Framework (and its Swiss extension) if the provider is certified, otherwise on the European Commission’s standard contractual clauses.

5.1 Google Analytics 4 (statistics)

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA.
• Purpose: understanding how the website is used (page views, clicks, source, device).
• Data: shortened or unstored IP address, cookie identifiers, pages and events, approximate location, device and browser.
• Third country: USA – Data Privacy Framework (Google LLC is certified).
• Retention: event data for at most 14 months; cookies see the cookie list.
• Opt-out: cookie settings; also the browser add-on; Google privacy policy.

5.2 Google Ads (marketing)

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, USA.
• Purpose: measuring whether our Google ads lead to enquiries (conversion tracking) and showing relevant ads.
• Data: cookie identifiers, click IDs from ads, pages and events, IP address, device and browser.
• Third country: USA – Data Privacy Framework.
• Retention: up to 90 days (_gcl_au), advertising cookies up to 13 months.
• Opt-out: cookie settings; Google ad settings.

5.3 Meta Pixel (marketing)

• Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Meta Platforms, Inc., USA.
• Purpose: measuring the success of our ads on Facebook and Instagram, audiences for ads. We are jointly responsible with Meta for the collection and transfer (Art. 26 GDPR); Meta is solely responsible for further processing.
• Data: cookie identifiers, pages and events, IP address, browser and device information; Meta may link this to your Meta account.
• Third country: USA – Data Privacy Framework (Meta Platforms, Inc. is certified).
• Retention: cookies up to 90 days.
• Opt-out: cookie settings; Meta ad settings; Meta privacy policy.

5.4 TikTok Pixel (marketing)

• Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
• Purpose: measuring the success of our ads on TikTok and audiences for ads.
• Data: cookie identifiers, pages and events, IP address, browser and device information.
• Third country: transfers outside the EEA (including the USA) based on standard contractual clauses.
• Retention: cookies up to 13 months.
• Opt-out: cookie settings; TikTok privacy policy.

5.5 Pinterest Tag (marketing)

• Provider: Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; Pinterest, Inc., USA.
• Purpose: measuring the success of our ads on Pinterest and audiences for ads.
• Data: cookie identifiers, pages and events, IP address, browser and device information.
• Third country: USA – Data Privacy Framework or standard contractual clauses.
• Retention: cookies up to 1 year.
• Opt-out: cookie settings; Pinterest privacy settings; Pinterest privacy policy.

5.6 Snapchat Pixel (marketing)

• Provider: Snap B.V., Keizersgracht 165, 1016 DP Amsterdam, Netherlands; Snap Inc., USA.
• Purpose: measuring the success of our ads on Snapchat and audiences for ads.
• Data: cookie identifiers, pages and events, IP address, browser and device information.
• Third country: USA – Data Privacy Framework or standard contractual clauses.
• Retention: cookies up to 13 months.
• Opt-out: cookie settings; Snap privacy policy.

5.7 Klaviyo (marketing)

• Provider: Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA.
• Purpose: recognising which pages interested visitors view, to tailor emails and measure their effect; sign-up forms where used.
• Data: cookie identifier, pages visited and events, IP address, browser; email address only if you give it to us yourself.
• Third country: USA – Data Privacy Framework (Klaviyo, Inc. is certified) or standard contractual clauses.
• Retention: cookie up to 2 years.
• Opt-out: cookie settings; Klaviyo privacy notice.

You can also find general settings for interest-based advertising at youronlinechoices.eu.

6. Cookie list

A service’s cookies are only set if it is activated and you have consented. Lifetimes as stated by the providers; they may change.

7. Contact by email

If you write to us, for example via “See a demo”, we use your details only to answer your enquiry (Art. 6(1)(b) and (f) GDPR). We delete them once the enquiry is settled and no retention obligations apply.

8. Newsletter and email

If we offer a newsletter or email updates and you sign up, we send them via Klaviyo (provider see 5.7). We use double opt-in: you are only subscribed after confirming by email. We store your email address, the time of sign-up and confirmation, and whether and when emails are opened or links clicked. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email or by writing to info@7cloud.ai; we then remove your address from the list.

9. The 7brain app

7brain connects only to the services you approve yourself and starts with read-only access. 7brain changes nothing in your accounts without your explicit approval. The legal basis is our contract with you (Art. 6(1)(b) GDPR).

Shopify

• Orders and products: amounts, quantities, discounts, refunds, dates, shipping country, product and stock data.
• The names and email addresses of your customers are not stored.

Meta Ads and Google Ads

• Campaigns, ad sets and ads, ad spend, and the conversions and metrics reported by the platform.
• We do not read personal data of people who have seen your ads.

Klaviyo

• Statistics on campaigns and flows (for example sends, opens, clicks, revenue) and how they are set up.
• No recipient data: no names, no email addresses, no profiles.

Other connections

Other services (for example Slack) are only connected if you actively do so. We then process only the data needed for that function, for example the messages you send to Sevi.

Your account

• Name, email address, role and company of the people who use 7brain, and login data.
• What you type in the chat with Sevi, and your approvals. These are stored so that 7brain can reply and keep learning for your company.

What we use the data for

Solely to give you, as a shop owner, analyses, alerts and recommendations: profit calculation, checks of ads and email flows, stock alerts, tasks and reports. We do not sell data, do not pass it on for advertising purposes and do not build profiles of your customers.

AI analysis

For analyses and answers, we send the data required to providers of AI models who work on our behalf. These providers may use the data only for the analysis. Your data is not used to train AI models.

Where the data is stored

The app runs on Vercel (hosting) and Neon (Postgres database). Hosting providers in the EU/USA under data processing agreements. Where data is transferred to countries without an adequate level of data protection, we rely on the Data Privacy Framework or on standard contractual clauses. Data is transmitted encrypted (HTTPS).

Google data

7brain’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention

We keep app data for as long as your 7brain account exists and you use the connections. After cancellation or at your request, we delete it unless statutory retention obligations prevent this.

Deleting data and revoking access

You can ask us at any time to delete your data – including data we have received via Meta (Facebook, Instagram), Google, Shopify or Klaviyo:

• Email info@7cloud.ai with the subject “7brain data deletion” and the name of your company or shop.
• We will confirm the deletion by email.
• You can also revoke 7brain’s access at any time directly in Shopify, Meta, Google Ads or Klaviyo. After that, 7brain reads no new data.

10. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Under the Swiss FADP you have in particular the right to information, correction, deletion, data disclosure and transfer, and to object.

To exercise these rights, write to us at info@7cloud.ai.

Complaints: you can complain to a data protection supervisory authority – in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern, edoeb.admin.ch), in the EU the authority in your place of residence, place of work or the place of the alleged infringement.

11. Changes

If 7brain or the services we use change, we will update this policy. The version published here applies. Last updated: 13 October 2026, version 2.

Questions? info@7cloud.ai · Imprint