/

Privacy Policy

Last updated: 9 May 2026

Data controller

V7.dk · CVR DK-36554436 · Lejrvej 17, 3500 Værløse, Denmark.
Contact for all data requests: info@v7av.com

What we process

  • Marketing performance data — Google Ads campaign metrics, GA4 traffic, Search Console queries.
  • Integration credentials — OAuth refresh tokens for connected Google Ads, GA4, and Search Console accounts.
  • Agent decision logs — every proposal, Council vote, BOB synthesis, and Fireman pause.
  • Account data — user names, emails, role assignments.
  • Audit logs — authentication events, configuration changes, manual overrides.

Purpose & legal basis

We process this data to operate the platform — autonomous AI marketing optimisation for managed clients — under contractual necessity (GDPR Art. 6(1)(b)) and legitimate interest in service operation and audit (Art. 6(1)(f)).

Storage & transfer

Primary data store: Supabase (EU region). Transactional traffic stays within the EU/EEA. Sub-processors operating outside the EU (Anthropic, Google Cloud APIs) process data under EU Standard Contractual Clauses.

Retention

  • Operational data (campaign metrics, agent decision logs, audit logs): 24 months.
  • Financial logs (billing, invoices, transactions): 7 years, per Danish accounting law (Bogføringsloven).
  • OAuth tokens & credentials: deleted immediately on integration disconnect.
  • Account data (names, emails): retained until account closure + 30 days.
  • GDPR Art. 17 deletion requests override all of the above; deletion completes within 30 days.

Your rights

Under GDPR you have the right to:

  • Access the data we hold about you (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Request erasure (Art. 17)
  • Restrict or object to processing (Art. 18, 21)
  • Data portability (Art. 20)
  • Lodge a complaint with the Danish Data Protection Agency (Datatilsynet)

Email info@v7av.com to exercise any of these. We respond within 30 days.

Sub-processors

  • Anthropic — AI model inference (Claude family).
  • Supabase — primary data store, authentication, edge functions (EU region).
  • Google Cloud — OAuth and Google Ads / GA4 / Search Console APIs.
  • Lovable — application hosting and deployment.
  • Cookie-Script.com — cookie consent management.

Cookies

See our cookie policy for the categories used and how to change your preferences.