Privacy Policy

1. Who we are

7 Pro Labs is the trade name of GKWJ LLC, 1512 Little Wren Ln, Winter Park, FL 32792, United States. We run this website and four software products used by businesses:

For any privacy question, write to info@7prolabs.com.

2. What this policy covers

This policy covers visitors to 7prolabs.com, and all the data our products receive from WhatsApp and Instagram through our Meta app, «Labs by 7Pro», which the four products share. Each product’s own policy describes the rest of that product in detail and applies together with this one.

The businesses that use our products (our customers) decide whose data they process and why. For the data of their own customers, contacts and followers, they are the controller and 7 Pro Labs processes it on their behalf, as their processor or service provider. For our customers’ account and billing data, and for this website, 7 Pro Labs is the controller.

3. Information we collect on this website

• Contact and lead forms: your name, email, phone, company and message, so we can reply to you.
• Event registrations: your name, email, phone, the answers you give and your payment status. Card payments are processed by Stripe; we never see your full card number.
• Business Growth Score: your answers and contact details. The answers are sent to OpenAI to write your report.
• Measurement: Google Tag Manager and Google Analytics use cookies and device identifiers to measure visits and advertising campaigns.
• Technical data: IP address, browser and device information and server logs, used for security and to keep the site running.

We use this information to answer you, run the events you sign up for, send the messages you ask for and improve the website. We do not sell it.

4. Data from WhatsApp and Instagram (Meta Platform Data)

How a business connects. Only an owner or administrator of a business can connect that business’s own WhatsApp Business number or Instagram professional account to one of our products. They do it through Meta’s official flows: Embedded Signup for the WhatsApp Business Platform, and Business Login for Instagram. We never ask for or store Meta passwords. A connection can be removed at any time (see Deleting your data).

What we receive.

• About the connected business account: the WhatsApp Business Account and phone number IDs, the display name, and the business’s message templates with their review status. For Instagram: the account ID, username, name and profile picture. Access tokens are stored encrypted.
• About people who write to the business: their WhatsApp phone number and profile name, or their Instagram username and Instagram-scoped ID. We also receive the messages they send (text, photos, audio, video, documents, reactions and locations), along with delivery and read receipts.
• On Instagram (Rito only): comments left on the connected account’s own posts, the commenter’s username, and the replies the business sends.
• When a business keeps using the WhatsApp Business app on the same number (coexistence), we receive the messages it sends from the app. If the business agrees to share them during signup, we also receive its recent chat history and contacts. These go only into that business’s own workspace.
• Nexo is preparing a Facebook Lead Ads connection, which today is limited to internal testing. When a business turns it on, Nexo receives the Facebook Page ID and name, the lead form IDs, and the answers people submit in those forms.

How we use it. Only to provide the features the business uses:

• to show the business’s conversations and comments in its inbox and link them to its own customer records;
• to send the replies its team writes, and the messages and templates it sets up;
• to run the automations it configures, for example an AI assistant that answers on WhatsApp, or a private message sent to someone who comments a keyword on Instagram (one per comment, within Meta’s limits);
• if the business turns these features on: to transcribe voice messages, read the photos and documents a customer sends, and draft summaries and replies for the team to review;
• to keep the service secure, investigate problems and keep audit records.

What we never do. We do not sell or rent Meta Platform Data. We do not use it for advertising or to build advertising profiles. We do not share it with other customers or with data brokers, and we do not combine it across customers. We do not use it to train AI models. We do not use it for any purpose Meta’s Platform Terms prohibit, such as surveillance or eligibility decisions.

Who else processes it. Only the service providers needed to run each product, under contracts that limit them to that purpose. AI providers process content through their business APIs, whose terms do not allow them to train models on it.

*Only when the business has turned on the feature that needs it. Our application servers are virtual servers rented from Hostinger: in Manchester, United Kingdom, for Rito, Nexo and Prumo, and in São Paulo, Brazil, for Zelo and this website. We also use Resend for email, Stripe for payments, and error-monitoring tools that may see technical logs.

How long we keep it. We keep it for as long as the business keeps its account and the connection, and the business can delete conversations in the product at any time. Disconnecting an account stops new data arriving straight away. After a business closes its account, we delete or anonymise its data within 90 days, unless the law requires us to keep something longer (for example, invoices).

Meta’s role. Meta processes this data as the provider of WhatsApp and Instagram, under its own terms and privacy policy. Meta is not our service provider.

5. Deleting your data

If you are a business using one of our products

• Disconnect the account in the product’s settings (WhatsApp or Instagram). We stop receiving data at once and discard the access token.
• Or remove our app on Meta’s side. On Instagram, go to Settings → Apps and websites, choose «Labs by 7Pro» and remove it. For WhatsApp, remove 7 Pro Labs’ access to your WhatsApp account in your Meta Business settings.
• When you remove the app on Instagram, or ask Meta to delete your data, Meta tells us automatically. We then delete that account’s access token, identifiers and stored comments.
• To delete everything else, such as the conversations and contacts stored in your workspace, delete them in the product, or email us and we will do it for you.

If you wrote to a business that uses one of our products

• That business controls your messages. Ask it directly to delete them; it can do so in our product.
• You can also email us. We will identify the business, pass on your request and help it carry it out.
• On WhatsApp you can block the business’s number at any time. Where the business supports it, replying STOP (or PARAR / SAIR) also stops further messages.

How to ask us. Email info@7prolabs.com with the subject «Data deletion request». Include the product, the business’s name, and the WhatsApp number or Instagram username concerned. We reply within 30 days, and tell you if the law requires us to keep anything.

6. Sharing

We share personal data only in these cases: with the service providers described above and in each product’s policy; with the business that controls the data; when the law requires it; or, under the same protections, as part of a sale or reorganisation of our business. We do not sell personal data.

7. International transfers

GKWJ LLC is based in the United States, and some of our service providers process data outside the European Economic Area. Where European, UK or Brazilian law applies, we rely on adequacy decisions where they exist. Otherwise we rely on the European Commission’s Standard Contractual Clauses or equivalent safeguards.

8. Security

• Encryption in transit (TLS), and access tokens encrypted at rest.
• Each business’s data kept separate by workspace, with access checked on every request.
• Role-based access for our staff, audit logs and backups.

9. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR, Brazil’s LGPD or US state privacy laws), you can ask to access, correct, delete or export your data. You can also object to or restrict its use, and withdraw consent. Write to info@7prolabs.com. If we process your data for a business, we will work with that business to answer you.

You can also complain to your data protection authority: in Portugal the Comissão Nacional de Proteção de Dados (CNPD), and in Brazil the Autoridade Nacional de Proteção de Dados (ANPD).

10. Children

Our website and products are meant for businesses and are not directed at children under 16. We do not knowingly collect their data.

11. Changes

When our practices change, we update this page and the date at the top. We also announce material changes to customers in the products.

12. Contact

GKWJ LLC, d/b/a 7 Pro Labs · 1512 Little Wren Ln, Winter Park, FL 32792, United States · info@7prolabs.com