7GenEdu

Privacy Policy

Last updated: April 2026

This Privacy Policy describes how Seven Hills Iowa LLC ("Company," "we," "us," or "our") collects, uses, and protects your personal information when you use 7GenEdu.com ("Site").

1. Data Controller

Seven Hills Iowa LLC is the data controller for personal information collected through the Site. For privacy-related inquiries, contact us at support@7genedu.com.

2. Information We Collect

2.1.1 Information You Provide

  • Account registration data (name, email address, password)
  • Profile information (country, school/organization)
  • Payment information (processed by Paddle — we do not store credit card details)
  • Communications you send to us (support emails, feedback)
  • Newsletter subscription preferences
  • Cookie consent preferences

2.1.2 Information Collected Automatically

  • Usage data (pages visited, printables downloaded, time spent on site)
  • Device information (browser type, operating system, screen resolution)
  • IP address and approximate geographic location
  • Cookies and similar tracking technologies (see our Cookie Policy)

2.1.3 Information Collected Through AI Features

When you use AI-powered features on the Site, we may collect:

  • AI Inputs: Text, prompts, preferences, and selections you provide when interacting with AI features (e.g., content customization requests, learning preference selections).
  • AI Conversation History: Records of your interactions with AI-powered tools, including questions asked and responses generated, to improve your experience and provide continuity.
  • AI Usage Metadata: Technical data about your AI interactions, including timestamps, feature used, response times, and interaction patterns.

Our AI features are powered by third-party providers including Anthropic, OpenAI, and Google. These providers process your AI inputs solely to generate responses and are contractually prohibited from using your data to train their models. We use zero-retention API configurations where available.

2.1.4 Information from Third Parties

  • OAuth/Social Login Providers: When you sign in using Google, Apple, Facebook, or X (formerly Twitter), we receive basic profile information (name, email address, profile picture) as authorized by you during the login flow. We do not receive your password from these providers.
  • Paddle (Payment Processor): Paddle shares transaction data with us including purchase confirmations, subscription status, billing country, and refund/chargeback notifications. Paddle acts as the merchant of record and handles all payment card data directly.

2.3 Legal Bases for Processing (GDPR/UK GDPR)

We process your personal information on the following legal grounds:

  • Contract Performance (Art. 6(1)(b)): Processing necessary to provide our services, manage your account, process subscriptions, deliver digital content, and fulfill our contractual obligations to you.
  • Legitimate Interest (Art. 6(1)(f)): Processing necessary for our legitimate interests, including improving the Site, analyzing usage patterns, preventing fraud, ensuring security, and providing customer support. We balance these interests against your rights and freedoms.
  • Consent (Art. 6(1)(a)): Processing based on your freely given, specific, informed consent — including marketing communications, analytics cookies, advertising cookies, and optional AI feature usage. You may withdraw consent at any time without affecting the lawfulness of prior processing.
  • Legal Obligation (Art. 6(1)(c)): Processing necessary to comply with applicable laws and regulations, including tax reporting obligations, responding to lawful requests from authorities, and maintaining records required by law.

2.4 How We Use Your Information

  • To provide, maintain, and improve our services
  • To process subscriptions and payments via Paddle
  • To send transactional emails (account confirmations, download receipts)
  • To send marketing newsletters (with your consent; unsubscribe anytime)
  • To personalize content recommendations
  • To power AI features and improve AI-generated content quality
  • To analyze usage patterns and improve the Site
  • To detect, prevent, and address fraud or technical issues
  • To comply with legal obligations

2.5 International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. When we transfer personal data outside the EU/EEA or UK, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs): We rely on the European Commission's Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) as the primary transfer mechanism for data sent to countries without an adequacy decision.
  • UK International Data Transfer Agreement/Addendum: For transfers from the UK, we use the UK IDTA or the UK Addendum to the EU SCCs as approved by the ICO.
  • Supplementary measures: Where required by the circumstances of the transfer, we implement additional technical and organizational safeguards (e.g., encryption, pseudonymization, access controls).

You may request a copy of the relevant transfer safeguards by contacting support@7genedu.com.

2.6 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

  • Account Data: Retained while your account is active, plus 30 days after account deletion to allow for account recovery and resolve any pending issues.
  • Transaction Records: Retained for 7 years after the transaction date to comply with tax and financial reporting obligations.
  • Analytics Data: Anonymized after 26 months. Once anonymized, data can no longer be linked to an individual.
  • Email Communication Logs: Retained for 2 years from the date of communication, then deleted.
  • Download History: Retained while your account is active. Anonymized upon account deletion.
  • Reviews and Ratings: Retained while the associated printable is available. Anonymized upon account deletion (review content may persist without identifying information).
  • AI Conversation Data: Retained for 90 days to provide conversation continuity and improve service quality, then automatically and permanently deleted.

2.7 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements.
  • Right to Restriction: Request that we limit the processing of your personal data in certain circumstances.
  • Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format (JSON). You may request that we transmit this data directly to another controller where technically feasible.
  • Right to Object: Object to processing based on legitimate interests or direct marketing at any time.
  • Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.
  • Right to Non-Discrimination (CCPA): We will not discriminate against you for exercising any of your privacy rights.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email support@7genedu.com. We will respond to your request within 30 days. In complex cases, we may extend this by an additional 60 days with notice.

2.8 Jurisdiction-Specific Disclosures

California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with additional rights:

  • We do NOT sell your personal information, and we have not sold personal information in the preceding 12 months.
  • We do NOT share your personal information for cross-context behavioral advertising.
  • You may designate an authorized agent to exercise your rights on your behalf. We may require verification of the agent's authority.
  • For categories of personal information collected, purposes, and third-party disclosures, see Sections 2.1 through 2.5 above.

US State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Indiana (INPA), and Tennessee (TIPA) may have similar rights to access, correct, delete, and port their personal data under their respective state privacy laws. To exercise these rights, contact support@7genedu.com.

EU/EEA (GDPR)

  • Data Controller: Seven Hills Iowa LLC is the data controller for all personal data processed through the Site.
  • Data Protection Officer (DPO): support@7genedu.com
  • Supervisory Authority: You have the right to lodge a complaint with the data protection authority in your EU/EEA member state.
  • See Section 2.3 for legal bases, Section 2.5 for international transfers, and Section 2.7 for your rights.

UK (UK GDPR + Data Protection Act 2018)

  • Data Controller: Seven Hills Iowa LLC.
  • DPO Contact: support@7genedu.com
  • Supervisory Authority: The Information Commissioner's Office (ICO) — ico.org.uk
  • UK residents have the same rights as described in Section 2.7 above, enforceable under the UK GDPR and Data Protection Act 2018.

3. Data Sharing and Third-Party Services

We do not sell your personal information. We share data with the following categories of third parties only as necessary:

  • Paddle — Payment processing and subscription management (merchant of record)
  • Supabase — Database hosting and authentication
  • Google Analytics (GA4) — Site analytics (with your consent)
  • PostHog — Product analytics (with your consent)
  • Google AdSense — Advertising on free-tier pages (with your consent)
  • Email service providers — Transactional and marketing emails
  • Cloudflare — CDN, security, and file storage
  • AI Providers (Anthropic, OpenAI, Google) — AI feature processing (see Section 2.1.3)

For a complete list of sub-processors, see our Sub-Processor List.

4. Children's Privacy (COPPA Compliance)

7GenEdu is designed for adults (parents, teachers, guardians) to use on behalf of children. We do not knowingly collect personal information from children under 13 without verified parental consent.

If we learn that we have inadvertently collected personal information from a child under 13, we will delete that information promptly. See our COPPA Children's Privacy Policy for full details.

5. Cookies

We use cookies and similar technologies for essential site functionality, analytics, and advertising. You can manage your preferences through our cookie consent banner. See our Cookie Policy for details.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), secure authentication, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Site at least 30 days before they take effect.

8. Contact Us

For privacy-related questions or to exercise your rights: