Legal
Privacy Policy
Last updated 4 November 2026
This policy explains what AI7x7 (operated by AI4M Labs, Dubai, United Arab Emirates; "we") collects when you use https://ai7x7.net, why, and the choices you have.
What we collect
- Account and request data: first name, last name and email address when you take a free practice exam, request a study guide, sign in or buy a premium package.
- Exam activity: your answers, scores, time taken and domain results for practice exams you sit on AI7x7.
- Purchase data: order references, amounts and payment status. Card details are entered on Stripe's hosted checkout and never reach our servers.
- Consent records: whether and when you agreed to terms and, separately, to marketing email, with a hashed IP address and browser identifier so we can evidence consent.
- Email delivery events: whether a transactional email was sent, delivered or bounced.
- Usage analytics: page views and funnel events (for example "free exam started"). Analytics events never include your name, email or exam answers. If Google Analytics is enabled, IP anonymisation is on.
- Support messages you send through the contact form or by email.
Why we use it
- To run the service you asked for: delivering exam results, guides and premium access (performance of a contract).
- To send transactional email about those things. These are not marketing and are sent even if you did not opt in to marketing.
- To send marketing email only if you ticked the optional marketing box. You can withdraw at any time via the unsubscribe link or your dashboard.
- To keep the service secure, prevent abuse and meet legal obligations (legitimate interests and legal duties).
- To improve content and understand which pages help (legitimate interests, using non-identifying analytics).
Who we share it with
Processors that run the service: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Resend (email) and, if enabled, Google Analytics. Each processes data on our instructions under their own security commitments. We do not sell personal data and do not share it with certification providers.
Retention
Account and exam data are kept while your account exists. Consent and purchase records are kept for as long as we need to evidence consent or meet tax and accounting rules. Analytics events are aggregated and raw rows are deleted after 13 months.
Your rights
You can access, correct, export or delete your data. Account deletion is available from your dashboard and removes your profile, exam history and guide requests; order records required for accounting are retained in anonymised form. To exercise any right, use the dashboard or email support@ai7x7.net. If you are in the EU/EEA or UK, you also have the right to complain to your data protection authority.
Cookies
We use strictly necessary cookies for sign-in sessions. Analytics cookies are set only if analytics is enabled and run in anonymised mode. We do not use advertising cookies.
Security
Data is encrypted in transit, access is role-based with row-level security in the database, answer keys are never exposed to the browser before submission, and download links for guides are signed and expire.
Children
The service is for adults preparing for professional certifications. We do not knowingly collect data from anyone under 16.
Changes and contact
We will post changes here with a new date. Questions: support@ai7x7.net.