Privacy Notice
Effective: August 2026 — Beta version. Amended 9 August 2026: how to exercise your rights now names privacy@7figs.ai directly, and a general support address is given.
7figs.ai is currently offered as an educational beta. This is the beta version of our Privacy Notice; a small number of items (noted below as being finalized) will be completed before the Service becomes generally available.
Privacy at a Glance
- We collect your information to run your financial plan — nothing else. We do not sell your personal information, we do not share it for advertising, and we do not allow third-party advertising profiling.
- You can opt out of product analytics at any time in Settings.
- You can access, correct, delete, or export your information, subject to the legal record-keeping obligations that apply to a registered investment adviser.
- Some records related to advisory activity must be kept for 7 years by law and cannot be deleted on request during that period.
- We use encryption and access controls to protect your information, and we do not record your screen or keystrokes.
This summary is for convenience; the full notice below controls.
1. Who We Are and What This Notice Covers
This Privacy Notice explains how 7figs.ai, Inc. ("7figs," "we," "us") collects, uses, shares, and protects information about you when you use the 7figs.ai website, applications, and services (the "Service"). It applies to all users — Beta, Trial, Planning (Base Planning), and Advisory (Wealth Management) users — and is incorporated into our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.
A note on our current status. 7figs's SEC investment-adviser registration is pending, and the Service is currently offered as an educational beta. The Regulation S-P / GLBA financial-privacy provisions of this notice apply in full once you enter an advisory relationship (Advisory tier); the general privacy practices described here apply to all users now.
2. Information We Collect
We collect the following categories of information. (California-specific categories and sources are summarized in Section 12.)
a. Identification and account data — your name, email address, and authentication data. Sign-in is handled through our identity provider (Auth0); we do not store your password.
b. Financial planning data (your "Plan") — the information you enter to build your plan: age and household/family details, income, savings, expenses, goals, planned retirement age, expected Social Security, anticipated life changes, risk preferences, and the assets and accounts you enter or connect. This is data you provide and data generated by the Service (projections, scenarios, plan history).
c. Linked financial-account data — if you connect an outside financial account, we receive read-only balances, holdings, and transaction history through our aggregation provider (SnapTrade). See Section 6.
d. AI conversation data — your messages to, and the Service's AI ("Aria") responses.
e. Billing data — for paid plans, payment-method metadata and billing history (payment card details are handled by our payment processor, not stored by us).
f. Operational and usage data — logs, device/browser information, and product-analytics events created as you use the Service (see Section 7). For advisory activity, we also create compliance records required of a registered investment adviser (see Section 10).
Sources. We collect information (i) directly from you, (ii) automatically as you use the Service, (iii) from your connected financial institutions via our aggregation provider, and (iv) from service providers that help us operate the Service.
What we do not collect. We do not record your screen or keystrokes, and product analytics do not include your financial values, conversation content, or personal identifiers (see Section 7). Voice input, if used, is transcribed and the audio is discarded — we do not retain voice recordings.
3. How We Use Your Information
We use your information to:
- provide, personalize, and operate the Service — building your Plan, generating projections, and (for Advisory users) delivering supervised investment advice;
- verify your identity, process payments, and manage your account;
- maintain the books-and-records and supervisory records we are required to keep as an investment adviser;
- secure the Service, prevent fraud and abuse, and debug problems;
- improve the Service in the aggregate (see analytics, Section 7); and
- communicate with you about your account, required disclosures, and, with your consent where required, product news.
We do not use your information for third-party advertising, data brokerage, or profiling unrelated to delivering the Service.
4. How Aria (AI) Uses Your Information
The Service uses artificial intelligence to generate planning content and conversational assistance. To do this, your Plan information and conversation history are sent to our AI model provider (Anthropic) to generate responses. Under our agreement with that provider, your data may not be used to train their models, is not retained beyond what is needed to return the response, and is not disclosed to other parties. Aria is an AI assistant, not a person, and its output is handled as described in the Terms.
5. How We Share Information
We share information only as described here. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- Service providers. We share information with vendors who process it on our behalf under contract (data-processing agreements), only to provide the Service. These include: cloud hosting and storage (AWS), authentication (Auth0), payment processing (Stripe), account aggregation (SnapTrade), our AI model provider (Anthropic), and operational tooling. Market-data vendors (e.g., Morningstar) receive no user data.
- Legal and compliance. We may disclose information to regulators (including the SEC), or in response to lawful requests, subpoenas, or to comply with our legal obligations, and to enforce our Terms or protect rights and safety.
- Business transfers. If we are involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction, subject to this notice.
- With your direction. We share information when you ask us to (for example, connecting an account).
6. Linked Financial Accounts
If you connect an outside account, you authorize us and our aggregation provider (SnapTrade) to access it on a read-only basis to retrieve balances, holdings, and transactions for display and planning. We do not receive the ability to move money or trade, and your institution login credentials are handled by the aggregation provider — we do not seek your account passwords. You can disconnect an account at any time. Your use of the aggregation service is also subject to the aggregation provider's own privacy policy.
7. Product Analytics and Your Opt-Out
We collect pseudonymous product-analytics events (screens viewed, features used, funnel steps, timing, error signals) to understand how the Service is used and to improve it. Analytics events are linked to a pseudonymous identifier — not your name or email — and exclude financial values, conversation content, personal identifiers, and security names. We do not sell this data or use it for advertising.
You can opt out of analytics collection at any time in Settings → Privacy → Analytics. Opting out does not affect the operation of your Plan.
8. Cookies and Similar Technologies
The Service uses cookies and similar technologies that are strictly necessary to sign you in and keep the Service secure and functioning, together with the analytics technologies described in Section 7, which you can opt out of. We do not use cookies for third-party advertising.
9. How Long We Keep Your Information
We keep information for as long as needed to provide the Service and to meet our legal obligations. In summary:
| Information | Retention |
|---|---|
| Account and Plan data (personal/financial) | Kept while your account is active; deleted ~90 days after cancellation or a deletion request, allowing reactivation within that window |
| AI conversation sessions | 90-day rolling deletion |
| Product-analytics events | 2-year rolling retention (pseudonymous) |
| Advisory books-and-records (compliance records) | 7 years, as required of a registered investment adviser — these cannot be deleted on request during that period |
| Billing records | 7 years (recordkeeping obligations) |
Where records are subject to a legal retention obligation, they are retained even if you request deletion (see Sections 10 and 11).
10. Compliance Records and the Right to Erasure
As a registered investment adviser, we are legally required to keep certain records of advisory activity (SEC Rule 204-2; we retain for 7 years). These "books and records" are stored in a tamper-evident, write-once archive and cannot be deleted before the retention period ends, even if you ask us to delete your data.
We designed this archive so that it does not contain your directly identifying personal information in readable form — records reference you through cryptographic identifiers rather than your name or email. When you exercise your right to erasure, we delete your identifying and financial-planning data on the schedule in Section 9 and render the compliance archive non-attributable to you where the law allows, while preserving the record itself as required. We will explain this to you at the time of a deletion request.
11. Your Privacy Rights
Subject to the legal record-keeping limits above, you may:
- Access / know what personal information we hold about you;
- Correct inaccurate information;
- Delete your information;
- Export / port a copy of your information in a portable format; and
- Opt out of product analytics (Section 7). (We do not sell or share your personal information, so there is no sale/share to opt out of.)
How to exercise your rights. Email us at privacy@7figs.ai. We will verify your identity before acting on a request, and we will respond within the time required by applicable law (for California residents, generally within 45 days, extendable once as permitted). Account deletion requests are processed on the ~90-day schedule in Section 9. You may use an authorized agent where the law allows.
Non-discrimination. We will not deny you service, charge you a different price, or provide a different level of service because you exercised your privacy rights.
12. California Privacy Disclosures (CCPA/CPRA)
If you are a California resident, the following supplements the notice above.
Categories of personal information collected in the last 12 months, sources, purposes, and disclosures:
| CCPA category | Examples we collect | Sources | Business purpose | Disclosed to (service providers) |
|---|---|---|---|---|
| Identifiers | Name, email, account/auth IDs | You; Auth0 | Provide the Service; account & security | AWS, Auth0, Stripe |
| Financial information | Assets, holdings, income, goals, transactions | You; your connected institutions (SnapTrade) | Financial planning & advice | AWS, SnapTrade, Anthropic |
| Commercial information | Subscription tier, billing history | You; Stripe | Billing | AWS, Stripe |
| Internet/usage activity | Pages viewed, feature usage, device/browser | Automatic | Analytics & security | AWS |
| Inferences | Plan projections, suitability signals | Generated by the Service | Deliver planning & advice | AWS, Anthropic |
| Audio (voice input) | Transcribed text only (audio discarded) | You | Voice features | AWS |
- Sale/sharing. We do not sell personal information and do not share it for cross-context behavioral advertising.
- Sensitive personal information (SPI). We collect financial-account information to provide the Service. We do not use it to infer characteristics about you or for any purpose beyond providing the Service.
- Your CA rights: to know, delete, correct, and opt out of sale/sharing (not applicable — we do not sell/share), and to limit use of sensitive personal information where applicable. Exercise them as in Section 11. We honor authorized-agent requests as required.
- Retention: as described in Section 9.
13. Security
We maintain a written information-security program with administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest for sensitive data, least-privilege access controls, access logging, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your information occurs, we will notify you and regulators as required by law.
14. Children's Privacy
The Service is intended for users 18 and older and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child has provided us information, contact us and we will delete it.
15. Data Location
We store and process information in the United States.
16. Changes to This Notice
We may update this notice. This notice is version-controlled with an effective date and a summary of material changes, signed off by our General Counsel. For material changes, we will notify you and, where required, ask you to review and re-accept the updated notice before continuing to use the Service. The version you accepted is recorded in our systems.
17. Contact Us
7figs.ai, Inc. — For privacy requests, email privacy@7figs.ai. For general support, email support@7figs.ai. Our mailing address will be provided before the Service becomes generally available.