Privacy Policy

Protecting your personal data is of particular importance to us at Seven AI GmbH. In this privacy policy, we comprehensively inform you about the processing of personal data when using our platform Seven Assistant. We place great value on transparency and data minimization.

General Information and Hosting

When you use our platform, various personal data is collected. This is partly data that you actively provide to us – for example, during registration or when uploading documents. Additionally, technical data is automatically collected by our IT systems as soon as you access the website. This primarily includes server log files containing information such as browser type, operating system, IP address, and the time of the server request. The collection of this data is strictly necessary for the technical operation and security of the servers and is based on Art. 6(1)(f) GDPR.

Seven Assistant is operated on the infrastructure of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. Our server locations are exclusively in Germany. We have concluded a data processing agreement (DPA) with Hetzner Online GmbH to ensure that your data is processed strictly according to instructions and in compliance with European data protection standards.

Special Aspects of AI Processing

A key feature of Seven Assistant is the analysis and creation of learning content using artificial intelligence. To ensure the highest level of data protection, we exclusively use self-hosted AI models. Unlike many other providers on the market, your inputs (prompts) or uploaded documents are not transmitted to external AI interfaces (such as OpenAI or Microsoft). All processing takes place locally on our secured servers in Germany. This is done for the purpose of contract fulfillment pursuant to Art. 6(1)(b) GDPR. Important for you: Your data is expressly not used by us to train or optimize the underlying AI models for other users. Biometric voice cloning features are not offered.

Payment Processing

Billing for our services is currently primarily conducted via SEPA bank transfers or direct debits. For this purpose, we process the information necessary for payment, such as your name, bank details (IBAN), and the invoice amount, based on Art. 6(1)(b) GDPR. Please note that we intend to integrate the payment service provider Stripe in the near future. Once this integration is completed, we will update this privacy policy to inform you about the changed data flows and the corresponding legal bases.

Error Monitoring

To keep our platform stable, we run our own error monitoring system on our servers. When a technical error occurs in the app or the backend, we store the error type, the error message, the technical stack trace, the time, the app version, platform and browser information, the page that was open and, if you are signed in, your user ID. Credentials and tokens in addresses and additional details are masked before storage, and IP addresses are not stored in this error database. Chat messages, documents and inputs are not deliberately collected. We delete individual error reports after 30 days and counters without personal data after 180 days. If you delete your account, your user ID is removed from the error reports.

For serious server errors, a notification may also be sent by email to an internal address. It is sent through our own mail server and may contain technical request data such as the IP address. Nothing is passed on to third parties. The processing is based on our legitimate interest in error-free operation pursuant to Art. 6(1)(f) GDPR.

Analytics Tools and Tracking

We have deliberately decided not to use any analytics tools (such as Google Analytics or Matomo) or advertising tracking cookies. We want to create a learning environment that respects your privacy and avoids unnecessary data analysis.

Your Rights

You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to rectification, restriction, or deletion of this data. If the data processing is based on consent, you may revoke it at any time with effect for the future. Furthermore, you have the right to data portability and the right to lodge a complaint with the competent supervisory authority. For all data protection-related inquiries, please contact our support at support@digitallearning.gmbh or directly our Data Protection Officer.