Legal · Effective 6 October 2026
Privacy Policy.
What we collect on 7am.agency and in the 7am Social Posting app, why we collect it, and how you stay in control. Written plainly, without the legal fog.
We never
Sell, rent or trade personal data.
We collect
Only what you send us, anonymous analytics, and what the app needs to publish.
You can
Ask for access, correction or deletion at any time: hello@7am.agency.
Who we are
7AM Agency (“7:00am”, “we”, “us”) is an independent digital product studio operating at 7am.agency. We are the controller of the personal data described here. This policy covers our website and the 7am Social Posting application (the “App”).
Data from the website
- Messages you send us: your name, email, company and project details when you write to us or book a call. Used only to reply and to prepare a proposal.
- Analytics: we use Google Analytics 4 to understand which pages are visited, from which country and device. It sets cookies and processes your IP address in shortened form. We do not use it to identify you personally.
- Server logs: our hosting keeps standard technical logs (IP, browser, time of request) for security and troubleshooting.
You can block analytics cookies in your browser settings or with the Google Analytics opt-out add-on. The site works fully without them.
7am Social Posting
The App schedules and publishes our own marketing content to social accounts and pages we own or are authorized to manage on Instagram, Facebook, Threads, LinkedIn and X. With permission granted by the account owner, it accesses:
- Basic profile and page information (name and ID of the connected account or page).
- Permission to publish posts, stories and comments to those accounts.
- Basic post-level data returned by the platform, used only to confirm a post went live.
The App does not read private messages or contact lists, does not collect or profile other members’ personal data, and never posts to an account without its owner’s authorization.
Why we process data
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to enquiries, proposals, delivering projects | Contract / steps before a contract |
| Website analytics | Consent, where required; legitimate interest otherwise |
| Publishing our content via the App | Legitimate interest and the account owner’s authorization |
| Security logs | Legitimate interest |
How long we keep it
- Enquiries that do not become projects — up to 24 months, then deleted.
- Client project records — as long as required for accounting and legal obligations.
- App access tokens — only while an account stays connected; removed on revocation.
- Published-content records — while operationally needed, then deleted.
- Analytics data — 14 months (Google Analytics retention setting).
Security
Credentials and tokens are stored server-side with restricted access, transmitted over HTTPS, and never exposed in public pages or client-side code. Access is limited to the people who need it to run the App.
Your rights
You can ask us to:
- Access the personal data we hold about you, or receive a copy of it.
- Correct or delete it.
- Restrict or object to processing, or withdraw consent at any time.
Account owners can revoke the App’s access at any time in Meta Business settings, LinkedIn or X app settings — this stops all publishing and invalidates the stored token. We reply to every request within 30 days. You may also complain to your local data protection authority.
Changes
We may update this policy. Material changes will be reflected in the effective date at the top of this page.
Contact
Any privacy question or request: hello@7am.agency.