Privacy Policy

• Visitors to 7avenue.com and any subdomain we operate.
• Individuals who contact us, submit forms, or subscribe to our communications.
• Clients engaged in branding, video, web, marketing, and AI systems projects.

A separate, supplementary privacy policy applies to 7AVENUE’s internal financial operations application, which connects to linked financial institutions through Plaid. See plaid.7avenue.com/privacy.

Depending on how you interact with us, we may collect:

• Contact details — name, email, company, phone number, and message content submitted through contact or proposal forms.
• Project and engagement data — materials, briefs, feedback, and deliverables shared during active client engagements.
• Usage and analytics data — IP address, browser type, device, referrer, pages viewed, and approximate location, collected through standard web analytics.
• Cookies and similar technologies — used to maintain site preferences, measure performance, and improve user experience.

• Respond to inquiries and provide the services you request.
• Deliver client projects and communicate about engagements.
• Operate, secure, and improve our website and services.
• Send operational and, with your consent, marketing communications.
• Meet legal, regulatory, and contractual obligations.

We do not sell your personal information.

We share information only with:

• Service providers that operate our infrastructure — including Vercel (SOC 2 Type II) for hosting, Supabase (SOC 2 Type II) for encrypted database storage, Google Workspace for communication, ClickUp for project management, and payment processors such as Stripe. Each processes data only on our behalf under written agreements.
• Professional advisors (legal, tax, accounting) bound by confidentiality.
• Legal authorities, only when legally compelled by subpoena, court order, or valid regulatory request.

We apply industry-standard security controls:

• All data in transit is encrypted with TLS 1.3.
• Sensitive credentials are encrypted at rest with AES-256.
• Access to production systems is restricted to authorized personnel and protected by phishing-resistant multi-factor authentication (biometrics, passkeys, hardware keys).
• Credentials and secrets are stored outside cloud-synced directories and never committed to source control.

• Contact form submissions: up to 24 months after last contact.
• Client engagement data: retained for the duration of the engagement and up to 7 years thereafter to satisfy tax, accounting, and legal requirements.
• Analytics data: aggregated and retained for up to 26 months.
• Operational logs: 90 days. Security audit logs: 12 months. Operational backups: 30 days.

You may request deletion of your personal information at any time by emailing hello@7avenue.com. Requests are acknowledged within 48 hours and fully processed within 30 days, subject to legal retention obligations.

Depending on your jurisdiction, you may have rights to:

• Access a copy of the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information.
• Withdraw consent and unsubscribe from marketing communications.
• Object to processing or request restriction of processing.
• Data portability, where applicable.

To exercise any of these rights, email hello@7avenue.com.

This policy is designed to comply with:

• The Connecticut Data Privacy Act (CTDPA).
• Other U.S. state privacy laws where applicable, including the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), and the Colorado Privacy Act (CPA).
• The EU General Data Protection Regulation (GDPR), where applicable.

Questions, requests, or concerns:

7AVENUE LLC
Connecticut, United States
hello@7avenue.com