Privacy Policy

This policy explains what Seven7 collects when you apply, why it is collected, how it is stored, who can see it, and what you can ask us to do with it. It is written to be read, not skimmed past.

1. What we collect

When you create an account and apply, Seven7 collects:

• Your email address and password. The password is stored only as a hash by our authentication provider; Seven7 staff never see it.
• Your names — first name, second name and surname, as they appear on your identification document.
• Your WhatsApp number, stored in international format.
• An image of your identification document that you upload.
• An image of your signature that you upload.
• The date and time you submitted your application and accepted these terms.

Seven7 does not collect biometric data. Seven7 does not capture, process, compare or store facial images or facial templates, and contains no camera or facial-recognition functionality of any kind.

2. Why we collect it

• Your names and identification document are used to verify that you are who you say you are. This is the entire purpose of the application.
• Your signature is compared by a member of staff against the signature on your identification document.
• Your WhatsApp number is stored so that a Seven7 staff member can contact you personally after your application has been reviewed.
• Your email address is used to sign you in and to send account emails such as confirmation and password resets.

3. How it is stored

Your details are held in a Postgres database with row level security enabled. Every table is deny-by-default: a query can only return rows the signed-in account is explicitly allowed to see.

Your identification document and signature are held in private storage buckets. They have no public address. They cannot be reached by guessing a URL, by an unauthenticated request, or by another applicant. When an authorised staff member opens a document for review, the system generates a signed link that expires after a short period.

4. Who can see it

• You can see your own details and your own application and payment records. You cannot see anybody else’s.
• Seven7 verification staff can open applications and the documents attached to them, in order to make a decision.
• Seven7 payment staff can see payment records.
• Seven7 administrators can see the above and can grant or revoke staff roles.

Actions that change an application or a payment are written to an audit log recording which staff member did what, and when.

Seven7 does not sell your information and does not share it with advertisers. Your information is processed by our infrastructure providers (database, storage, authentication and hosting) purely to run this service.

5. WhatsApp

Seven7 has no connection to WhatsApp. There is no WhatsApp integration, no automated messaging, and no bot. Your number is stored in the database so that a staff member can read it and message you themselves. Every message you receive from Seven7 was typed by a person.

6. How long we keep it

Application records and the documents attached to them are retained while your application is under review and for as long as you participate in the Seven7 programme, so that decisions remain traceable. If you ask us to delete your account, we will delete your personal details and your uploaded documents, except where we are required to retain a record for legal or accounting reasons.

7. Your rights

You may ask Seven7 to:

• tell you what information we hold about you;
• correct information that is wrong;
• delete your account and your uploaded documents;
• provide a copy of the information you gave us.

Once an application has been submitted it is locked so that staff review a fixed record. If something in it is wrong, contact us and quote your application reference.

8. Security

Access is controlled at the database level rather than only in the application, so a bug in a page cannot expose another applicant’s record. Documents are private by default. Credentials with elevated access are held server-side only and are never sent to your browser.

No system is perfectly secure. If you believe your account has been accessed by someone else, change your password and contact us immediately.

9. Contact

For any privacy question, or to exercise a right above, contact Seven7 at support@seven7.example. See also the Terms and Conditions.