Privacy Policy

Last updated: January 7, 2026

1. Introduction

Zero7 ("we", "our", or "us") is an AI-powered marketing platform operated by Heiberg Industries AS. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Name and email address
  • Organization name and details
  • Authentication credentials

2.2 Connected Services Data

When you connect third-party services, we access:

  • Google Analytics: Website traffic data, user behavior metrics, conversion data
  • Google Ads: Campaign performance, ad spend, keyword data, audience information
  • Google Search Console: Search performance, indexing status, site errors
  • Meta Ads: Ad account data, campaign metrics, audience insights
  • Slack: Workspace information for notifications and approvals

2.3 Usage Data

We automatically collect:

  • Log data (IP address, browser type, pages visited)
  • Device information
  • Platform usage patterns

3. How We Use Your Information

We use collected information to:

  • Provide and maintain the Zero7 platform
  • Generate AI-powered marketing insights and recommendations
  • Execute automated marketing workflows and playbooks
  • Send notifications and alerts about your campaigns
  • Process human-in-the-loop approvals for campaign changes
  • Improve and optimize our services
  • Communicate with you about your account

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

  • Service Providers: Third-party services that help us operate (hosting, analytics, AI processing)
  • Connected Platforms: Data flows back to platforms you've authorized (e.g., Google, Meta) for campaign management
  • Legal Requirements: When required by law or to protect our rights

5. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit (TLS) and at rest
  • Secure authentication with multi-factor options
  • Regular security audits and monitoring
  • Access controls and audit logging
  • Data isolation between organizations (multi-tenant architecture)

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time. Connected service data is refreshed periodically and older data may be aggregated or removed based on your retention settings.

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Disconnect integrated services at any time

For EU/EEA residents, these rights are provided under GDPR. For California residents, additional rights under CCPA apply.

8. Third-Party Integrations

Zero7 integrates with third-party services (Google, Meta, Slack, etc.). When you connect these services, you authorize us to access data according to the permissions you grant. Each third-party service has its own privacy policy that governs their data practices.

9. Service Providers

We use the following third-party service providers to operate Zero7:

  • Google Cloud Platform — Cloud infrastructure, database, and application hosting
  • Firebase — User authentication
  • Resend — Transactional email delivery
  • PostHog — Product analytics to understand feature usage
  • OpenAI — AI language model processing
  • Anthropic — AI language model processing
  • Google AI — AI language model processing
  • Firecrawl — Web content crawling for research

These providers process data on our behalf under data processing agreements and are contractually obligated to protect your information.

10. Cookies and Tracking

We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookie settings through your browser. Essential cookies are required for the platform to function.

11. International Data Transfers

Your data may be processed in countries outside your residence, including the United States and European Union. We ensure appropriate safeguards are in place for international transfers.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Continued use of Zero7 after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

  • Email: privacy@zero7.ai
  • Company: Heiberg Industries AS
  • Address: Oslo, Norway