Privacy Policy

1. Who we are

SEVN Works Pty Ltd (“SEVNworks”, “we”, “us” or “our”) is an Australian company. We design websites and build the AI workflows behind them.

This policy explains how we handle personal information when you use:

• our website at www.sevnworks.com
• the Studio planner: the tool on our homepage that drafts a plan from your description of a business problem, and the reviewed and expert plans that can follow it
• our project enquiry forms
• the six SEVN product concept websites and their demo workspaces (SEVN Flow, Spaces, Vital, Design, Forge and Table)

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Questions about this policy go to our Privacy Officer at privacy@sevnworks.com.

2. The short version

• We collect what you choose to give us: your email address, your description of the problem, your answers and your enquiry.
• Our AI provider, OpenAI, reads your description and answers to draft your plan. It does not receive your email address.
• We do not sell your information. We do not use analytics, advertising or tracking tools.
• The demos use fictional data. Anything you change in a demo stays in your browser and resets every day.
• You can ask to see, correct or delete your information at any time.

3. What we collect

3.1 When you draft a plan

The Studio planner is open to invited businesses that have an access code. When you use it, we collect:

• your email address, and whether you tick “A person from SEVNworks can follow up about it”
• your description of what is getting in the way of your business
• your answers to any follow-up questions
• the plan that is drafted, its readiness score and a record of each step in its progress
• if you ask for a reviewed or expert plan: who makes the decision, the agreed price, scope and “done when” list, any changes you ask for, and any reason you give for declining
• if you accept a paid plan: when you accepted it and the amount due

We also keep technical records for each plan, such as how many AI requests it used. The planner does not ask for your name or phone number, and it does not accept file uploads.

3.2 When you send a project enquiry

Our “Start a project” and “Talk to SEVNworks” forms collect:

• your name and email address
• your phone number, if you give it, and how you would like us to reply
• your business type and, if you give it, your business name
• what you want to change, the tools you use now and anything else you tell us
• any plan from the planner that you choose to attach

3.3 When you email us or book a call

We keep the emails you send us and our replies. If you book a call through our booking page, we receive the details you give the booking service, such as your name, email address and the time you choose. We may also take notes during the call.

3.4 When you use the demos

The demo workspaces run on fictional data. What you change is saved only in your browser. We cannot see it, and it is not sent to us. Please do not enter real personal, health or customer information into a demo.

One demo feature works differently. On the SEVN Table concept website, “Fill in my brief” sends the event description you type to OpenAI, so it can pull out the details. We do not store or log that text. Sending the Table event brief only shows a simulated confirmation. Nothing reaches us.

3.5 Technical information

When your browser loads our pages, our hosting provider, Netlify, receives standard technical information. This includes your IP address, your browser type and the pages you request. We use it only to run and protect the website.

The planner does not store your IP address with your plan. The SEVN Table smart brief holds your IP address in memory for up to 10 minutes, only to limit repeated requests.

Some pages load fonts from Google Fonts or code from jsDelivr. Your browser connects to those services directly, so they receive your IP address.

3.6 Information we do not want

We do not ask for sensitive information, such as health information. Please do not put it in a plan description or an enquiry. The same goes for passwords, access keys and bank details.

If you describe your customers or staff, share only what is needed, and only if you are allowed to share it.

4. How we collect it

We collect most information directly from you: when you type it into the planner or a form, or when you email or talk to us. Some technical information is collected automatically when your browser loads our pages. If you book a call, we receive your booking details from our booking service.

You can browse the website and use the demos without telling us who you are. You can email us a general question without giving your full name. To draft a plan, or to get a reply to an enquiry, we need an email address.

5. Why we collect it

We use your information to:

• draft, review and deliver your plan, and email you a copy
• reply to your enquiry and talk with you about your project
• prepare quotes, do the work you approve and send invoices
• follow up about your plan, but only if you ask us to
• keep track of enquiries and plans as part of running our business
• keep the website and planner working, secure and free from misuse
• meet our legal, tax and accounting obligations

We do not sell personal information. We do not use it for advertising. We do not use your plans or enquiries to train AI models.

We only use your information for another purpose if you agree, or if the law allows it.

6. AI processing and human review

6.1 What our AI provider sees

When you draft a plan, we send your description, your answers and the plan so far to OpenAI. OpenAI runs the AI models that draft and check the plan. Comments you make on the plan later may also be sent, if the AI updates it.

Your email address is kept separate. It is not sent to OpenAI.

We ask OpenAI not to store the AI’s responses. Under OpenAI’s terms for business customers, it does not use this data to train its models by default. It may keep the data for a limited time to detect misuse.

While drafting, the AI may also look up our own demo services, which hold fictional sample data. Those look-ups run on our own servers and keep nothing you send.

6.2 What a person sees

• Draft plan: the free draft is prepared and checked by AI. A person does not review it before you see it. When it is ready, a person at SEVNworks receives a notice with your email address, your description and the plan.
• Reviewed plan: AI drafts the plan. Then a SEVNworks expert checks, edits and approves it before it is sent to you. The plan records the expert’s name or email address as its reviewer.
• Expert plan: an expert works the plan out with you and writes it. The planner makes no AI requests for an expert plan.

If the AI cannot finish a plan, or its own check fails, the plan is paused for a person to look at.

SEVNworks staff review and manage plans in our staff admin. Only named administrators can see customers’ email addresses there.

6.3 Automated decisions

AI drafts and scores plans. It does not make decisions about you. A person sets every price and quote, and nothing is charged unless you accept it.

7. Who we share it with

We share personal information only with service providers that help us run SEVNworks, and only what they need. Each one handles it under its own terms and privacy policy.

• Netlify hosts our website and runs the server code for the planner and our enquiry forms.
• Our database provider stores plans, project enquiries and their records in a PostgreSQL database.
• OpenAI runs the AI models that draft and check plans, and the SEVN Table smart brief.
• Resend delivers our plan, quote and notice emails, the confirmation of an enquiry you send and our notice of it, and the sign-in links for SEVNworks staff.
• Notion holds our list of enquiries and plans. We copy plans that have an email address, and project enquiries, into it. An entry can include your name, email address, phone number, business name, the problem you described, and your plan’s status and price.
• Our booking service, if you book a call. The booking link may pass on your email address and plan reference, so you don’t have to type them.
• Our email and business software providers, which store the emails we send and receive, and our invoices.
• Google Fonts and jsDelivr, which deliver fonts and code to your browser on some pages.

We may also share information with our professional advisers, such as lawyers and accountants. We will share it when the law requires or allows it. If our business is sold, we may pass it to the buyer, who must handle it in line with this policy.

8. Overseas disclosure

Most of our service providers are based overseas. Netlify, OpenAI, Resend and Notion store or process data mainly in the United States, and may also use other countries. Our database provider may store data in Australia or in the United States. Netlify, Google Fonts and jsDelivr deliver content from servers around the world.

Before we disclose personal information overseas, we take reasonable steps to make sure the recipient handles it in line with the Australian Privacy Principles. For example, we choose established providers whose terms include data protection commitments.

9. Cookies and browser storage

We do not use analytics, advertising or tracking cookies. We do not run analytics tools on the website.

9.1 The planner cookie

When you enter your access code, we set one cookie, called studio_customer. It keeps you signed in to the planner for up to 8 hours, so you can see your own plans and no one else’s. It holds a random code, not your name or email address. Your browser sends it only to the planner, and scripts on the page cannot read it.

9.2 The staff cookie

SEVNworks staff sign in to our staff admin with a single-use link emailed to their @sevnworks.com address. Each link works once, within 15 minutes. Signing in sets a cookie called studio_staff, which keeps the staff member signed in for up to 12 hours. Like the planner cookie, scripts on the page cannot read it.

9.3 Session storage

While a tab is open, your browser keeps:

• the reference of the plan you are working on, so the page can show it again if you reload
• a plan you have chosen to attach to an enquiry
• a copy of the enquiry you just sent, for the confirmation page

Your browser deletes these when you close the tab.

9.4 Local storage

The demo workspaces save your changes in your browser’s local storage, on your device. Every day at 03:00 Sydney time they return to their sample data. You can reset them sooner on the demo page. Some concept pages also remember a view you chose, or a draft you asked them to keep.

We cannot see any of this. You can clear it in your browser settings at any time.

10. Emails and marketing

We send emails that are part of the service you asked for:

• a copy of your draft plan
• your quote, your finished plan and your invoice, if you choose a paid plan
• replies to your enquiries and emails

We follow up about a plan only if you tick “A person from SEVNworks can follow up about it”, or if you ask us to contact you. Each follow-up will say who we are. You can tell us to stop at any time by replying, or by emailing hello@sevnworks.com.

We do not send newsletters or other marketing emails. If we start, we will ask for your consent first, as the Spam Act 2003 requires. Every marketing email will include an unsubscribe link, and we will act on an unsubscribe request within 5 working days.

11. How long we keep it

We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires. After that, we delete it or de-identify it. As a guide:

• Draft plans and enquiries that don’t lead to work: up to 2 years after our last contact with you.
• Plans, quotes and records for paid work: up to 7 years after the work ends, because Australian tax and company law require us to keep business records.
• Planner sign-in: the cookie expires after 8 hours.
• Staff sign-in links: we keep the staff member’s email address and when the link was used for 1 day, so a link cannot be used twice.
• Demo data: stays in your browser until it resets or you clear it. We never receive it.
• SEVN Table smart brief text: we do not keep it.

You can ask us to delete your plan or enquiry sooner. We will, unless the law requires us to keep it.

12. How we protect it

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, change or disclosure. For example:

• our website and planner use encrypted (HTTPS) connections
• plans are stored in a password-protected database
• the planner needs an access code
• staff sign in to our admin with a single-use emailed link, and only @sevnworks.com addresses can sign in
• your email address is kept out of what the AI sees
• the private links in our emails are signed, so they cannot be guessed
• only SEVNworks staff who need it can see plans and enquiries, and only named administrators can see customers’ email addresses

No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires.

13. Access, correction and deletion

You can ask for a copy of the personal information we hold about you. You can also ask us to correct it, delete it or stop contacting you. Email privacy@sevnworks.com.

We may need to confirm who you are first. We will respond within 30 days, and there is no charge.

If we refuse a request, we will tell you why in writing and how to complain, unless the law says we can’t. If we don’t agree to a correction, you can ask us to keep a note with the information saying you believe it is wrong.

14. Complaints

If you are worried about how we have handled your personal information, email privacy@sevnworks.com and tell us what happened. We will acknowledge your complaint within 7 days and aim to give you our answer within 30 days.

If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

15. Children

SEVNworks is a service for businesses. It is not meant for children, and we do not knowingly collect personal information from anyone under 18. If you think a child has given us personal information, email privacy@sevnworks.com and we will delete it.

16. Changes to this policy

We may update this policy when our services or the law change. We will post the new version on this page with a new effective date. If a change is significant, we will also tell the people whose email address we hold, where practical. You can ask us for earlier versions.

Our Terms and Conditions explain the terms for using our website and services.

17. Contact us

If you have a question about this policy or your personal information, contact our Privacy Officer.