SeventhBiz
Trending now
Tariffs Labor Costs Platform Consolidation AI Workforce Automation Interest Rates Data Center Load AI Capex IRA Incentives FDA Approval Pathway Agentic AI

Legal

Privacy Policy

What we collect when you use SeventhBiz Intelligence, why we hold it, who else touches it, and how to get it out or get it deleted.

Last updated September 30, 2026

1. Who we are and what this covers

SeventhBiz Intelligence (the “Service”) is operated by Bizologie, in partnership with Seventh Scout (“SeventhBiz”, “we”, “us”). This policy covers the Service at this website — the public pages, subscriber accounts, and the emails we send you.

It does not cover the companies we write about. The Service analyses public company disclosures; the executives and companies named in that intelligence are the subject of public filings, not our subscribers, and their information reaches us from the sources described in section 7.

Questions, requests, or complaints: hello@seventhbiz.com.

2. Information you give us

Creating and running an account produces the following:

  • Account — your email address and name. If you set a password we store only an Argon2id hash of it, never the password itself.
  • Google sign-in (optional) — if you sign in with Google we request the openid email profile scopes and receive your email address, your name, and your Google account identifier. We do not receive, and cannot read, your Gmail, Drive, Calendar, or contacts.
  • Profile photo (optional) — stored outside the public web directory and served only through the Service.
  • Billing — your plan, subscription status, renewal date, and the Stripe customer and subscription identifiers. Card numbers are entered on Stripe’s own hosted checkout and never reach our servers. Where sales tax or VAT applies, Stripe also collects the billing address and any tax identifier you enter.
  • Team membership — if you own or join a team subscription, the seat roster and the email addresses invited to it.
  • Preferences — the industries you follow and whether you want the daily digest.
  • Messages — anything you send through the contact form (name, email, company, message) or by replying to our email.

3. Information collected automatically

  • Session — a sign-in cookie (see section 4).
  • Security and audit records — significant account and administrative actions are written to an audit log with the IP address and browser user-agent that performed them. This is how we investigate suspicious sign-ins, credential sharing, and billing disputes.
  • Search entries — the text of searches run on the Service, how many results came back, and the account that ran them. We read these in aggregate to see what subscribers look for and, from searches that return nothing, where our coverage has gaps.
  • Server logs — ordinary web server and application logs, including IP addresses and error traces, kept for operations and security.

We do not build advertising profiles and we do not track you across other websites. We do use Google Analytics and Mouseflow to understand how the public pages are used. These run on the public pages only — never on your account, your dashboard, your searches, or anything showing your own data.

When we advertise in ChatGPT, we use OpenAI’s measurement pixel on the public pages to learn whether those ads bring people to the Service. It records page visits and the reference to the ad you clicked, if you came from one. It does not load on your account pages, it does not load if your browser sends Global Privacy Control or you have opted out on Your Privacy Choices, and it does not load for visitors in the European Economic Area, the United Kingdom or Switzerland.

4. Cookies

The Service sets a session cookie that keeps you signed in. It is strictly necessary: it is marked HttpOnly and SameSite=Lax, is sent only over HTTPS in production, and lasts up to 12 hours or until you sign out. Blocking it makes signing in impossible.

Google Analytics and Mouseflow set their own cookies on the public pages to tell repeat visits apart. They are not used for advertising, and they are not set on the pages where your account information appears.

If you arrive from one of our ads in ChatGPT, OpenAI’s pixel stores the ad-click reference in a cookie (__oppref), and we keep a copy in our own cookie (sb_oppref, HttpOnly, 30 days) so a sign-up days later can still be attributed. Neither is used for anything else, and neither is set when measurement is off for you (see section 3). Opting out sets a cookie of its own (sb_ad_optout, one year) so we remember the choice.

Our pages do load two third-party front-end assets — a web font stylesheet from Google Fonts and the Tailwind CSS runtime from its public CDN. Those providers receive your IP address and browser user-agent as part of serving the file, in the same way any embedded asset does. They set no cookies for us and receive nothing about what you read.

5. How we use it

  • To run your account and show you the intelligence your plan covers.
  • To take payment, manage renewals and seats, and issue receipts and tax documents through Stripe.
  • To send service email you cannot opt out of while your account exists: welcome and verification, password resets, subscription and payment notices, and team invitations.
  • To send the daily industry digest and signal alerts for the industries you follow — optional, and switchable at any time under Account → Following.
  • To remind you, at most twice, if you created an account but have not started your free trial — optional, with an unsubscribe link in each email.
  • To measure our advertising: when someone who arrived from one of our ads in ChatGPT starts a free trial or is first billed, we tell OpenAI, so we can see which ads bring subscribers. Details in section 8.
  • To keep the Service secure: rate limiting, brute-force throttling, fraud and shared-credential investigation, and debugging.
  • To decide what to build and what to cover next, using aggregated search and usage patterns rather than individual browsing histories.

If you are in the EEA or UK: we process account, billing, and service-email data to perform our contract with you; security, audit, and aggregate product analysis rest on our legitimate interest in running a secure and useful service; optional marketing-style email rests on your consent, withdrawable at any time. Advertising measurement is not used for visitors in the EEA, the UK or Switzerland.

6. AI processing — what is and is not sent

The Service is built on large language models. This is the part subscribers ask about most, so it is worth being exact.

What we send to our AI provider is source documents: SEC filings, earnings-call transcripts, and documents our editorial team uploads. What comes back is the structured extraction you see on the site — signals, themes, quotes, deal records — each tied to the filing it came from.

Your personal data is not part of that. Your name, email, billing details, search history, and reading activity are not included in the prompts we send, and no model is asked anything about you. Documents are processed under the provider’s commercial API terms, which do not permit using them to train models.

The Service does not have a chat interface, so nothing you type is forwarded to a model — searches run against our own database.

OpenAI appears in section 8 for advertising measurement only. It plays no part in analysing documents, and nothing described in this section is sent to it.

7. Where the intelligence itself comes from

Filings are retrieved from the SEC’s public EDGAR system. Earnings-call transcripts are licensed from a market-data provider. Some documents — conference presentations, for example — are uploaded by our editorial team.

That content is corporate disclosure. Where it names an individual, it does so because that person spoke on a public earnings call or is named in a public filing. If you believe intelligence on the Service misstates something about you, write to hello@seventhbiz.com and we will check it against the cited source.

8. Who else touches your data

We do not sell personal information. We use a small set of processors, each for one job:

  • Stripe — payments, subscriptions, invoices, and tax calculation. Stripe is the controller of the card data it collects.
  • Google — only if you choose Google sign-in, and only to authenticate you.
  • Anthropic — document analysis, on the terms in section 6.
  • Our hosting and email providers — the servers that run the Service and the mail server that delivers your email.
  • OpenAI — advertising measurement for our ads in ChatGPT, and nothing else. On the public pages its pixel receives what any embedded script does (your IP address, browser user-agent and the page visited) plus the ad-click reference. When someone who arrived from one of our ads starts a free trial or is first billed, our server sends OpenAI that ad-click reference, the event (trial started or subscription created), the plan, and the amount billed. We do not send your name, your email address in any form, your IP address, or your account number with those events, and nothing at all is sent for anyone who did not arrive from an ad.

Under California law, letting an advertising platform’s pixel collect information on our site can count as “sharing” personal information for cross-context behavioural advertising, even though we receive nothing back and build no profiles. We treat it that way: you can opt out at any time on Your Privacy Choices, and we honour Global Privacy Control automatically as the same request.

We also disclose information where the law requires it, to enforce our Terms, to protect the rights or safety of anyone, or as part of a merger or sale of the business — in which case this policy continues to apply until you are told otherwise.

On a team subscription, the team owner can see the seat roster: member names, email addresses, and invitation status. They cannot see an individual member’s searches or reading history.

9. Where your data is held

The Service is hosted in the United States and our team is in Austin, Texas. If you use the Service from outside the United States, your information is transferred to and processed there, under United States law.

10. How long we keep it

  • Account and preference data — while your account exists, and for up to 12 months after cancellation so you can come back to the same account. Delete it sooner by asking us.
  • Billing records — retained for as long as tax and accounting law requires, typically seven years. These survive account deletion; we cannot delete an invoice we are required to keep.
  • Security and audit records — retained for security and dispute investigation, then deleted on a rolling basis.
  • Search entries — kept for aggregate coverage analysis; the reporting we actually use covers a rolling 90-day window, and the link to your account is severed when your account is deleted.
  • Ad-click reference — if you arrived from one of our ads, kept with your account for 30 days from the click to attribute your sign-up, and removed if you opt out.
  • Password reset tokens — only a hash is stored, it expires after 30 minutes, and it is single-use.

11. How we protect it

Passwords are hashed with Argon2id and are not recoverable by us or by anyone with database access. Traffic runs over HTTPS. Session cookies are HttpOnly, Secure, and SameSite=Lax, and the session identifier is regenerated on sign-in. Forms are CSRF-protected, all database access uses prepared statements, sign-in attempts are throttled, and uploaded files are stored outside the public web directory and served only through the application.

No system is perfectly secure. If we discover a breach affecting your personal data we will notify you and any regulator that must be told, within the time the law allows.

12. Your rights and choices

You can do these yourself, signed in:

  • Change your name, email, password, and profile photo under Account.
  • Turn the daily digest on or off, and change which industries you follow, under Account → Following.
  • Manage, downgrade, or cancel your subscription through the Stripe billing portal linked from Account → Subscription.
  • Opt out of advertising measurement on Your Privacy Choices (linked in every page footer), or by turning on Global Privacy Control in your browser.
  • Stop trial reminder emails with the unsubscribe link in any of them.

Write to hello@seventhbiz.com to request a copy of your data, a correction, or deletion of your account. We answer within 30 days and delete what we are not legally required to keep. There is no charge, and asking costs you nothing else — we will not degrade or price your service differently for exercising a right.

Depending on where you live you may also have the right to object to or restrict certain processing, to data portability, to withdraw consent, and to complain to your data protection authority. Under California law: we do not sell personal information; we may “share” it for advertising measurement as described in section 8, which you can opt out of at any time; and we do not use or disclose sensitive personal information beyond providing the Service.

Service email — receipts, security notices, subscription changes — continues while your account is open, because it is how we run the account. Optional email carries an unsubscribe path.

13. Children

The Service is a professional research product sold to businesses. It is not directed at anyone under 18, and we do not knowingly collect their information. If you believe a minor has created an account, tell us and we will remove it.

14. Changes to this policy

When this policy changes we update the date at the top of the page. If a change materially affects how we handle your personal data we will email account holders before it takes effect.

15. Contact

Privacy questions and requests: hello@seventhbiz.com, or through the contact form. We are based in Austin, Texas.

Something here unclear? Ask us.

Privacy Policy · Terms of Service