Zero7 ("we", "our", or "us") is an AI-powered marketing platform operated by Heiberg Industries AS. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
Name and email address
Organization name and details
Authentication credentials
2.2 Connected Services Data
When you connect third-party services, we access:
Google Analytics: Website traffic data, user behavior metrics, conversion data
Google Ads: Campaign performance, ad spend, keyword data, audience information
Google Search Console: Search performance, indexing status, site errors
Meta Ads: Ad account data, campaign metrics, audience insights
Slack: Workspace information for notifications and approvals
2.3 Usage Data
We automatically collect:
Log data (IP address, browser type, pages visited)
Device information
Platform usage patterns
3. How We Use Your Information
We use collected information to:
Provide and maintain the Zero7 platform
Generate AI-powered marketing insights and recommendations
Execute automated marketing workflows and playbooks
Send notifications and alerts about your campaigns
Process human-in-the-loop approvals for campaign changes
Improve and optimize our services
Communicate with you about your account
4. Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
Service Providers: Third-party services that help us operate (hosting, analytics, AI processing)
Connected Platforms: Data flows back to platforms you've authorized (e.g., Google, Meta) for campaign management
Legal Requirements: When required by law or to protect our rights
5. Data Security
We implement industry-standard security measures including:
Encryption of data in transit (TLS) and at rest
Secure authentication with multi-factor options
Regular security audits and monitoring
Access controls and audit logging
Data isolation between organizations (multi-tenant architecture)
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time. Connected service data is refreshed periodically and older data may be aggregated or removed based on your retention settings.
7. Your Rights
You have the right to:
Access your personal data
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Withdraw consent for data processing
Disconnect integrated services at any time
For EU/EEA residents, these rights are provided under GDPR. For California residents, additional rights under CCPA apply.
8. Third-Party Integrations
Zero7 integrates with third-party services (Google, Meta, Slack, etc.). When you connect these services, you authorize us to access data according to the permissions you grant. Each third-party service has its own privacy policy that governs their data practices.
9. Service Providers
We use the following third-party service providers to operate Zero7:
Google Cloud Platform — Cloud infrastructure, database (Cloud SQL), and application hosting (Cloud Run)
Firebase — User authentication
Cloudflare — CDN and file storage (R2)
PostHog — Product analytics to understand feature usage
Resend — Transactional email delivery
OpenAI — AI language model processing
Anthropic — AI language model processing
Google AI — AI language model processing
Firecrawl — Web content crawling for research
Browserless — Website screenshots for analysis
These providers process data on our behalf under data processing agreements and are contractually obligated to protect your information.
10. Cookies and Tracking
10.1 Cookie Categories
We use the following categories of cookies:
Necessary: Authentication session cookies, CSRF protection, and security tokens. These are required for the platform to function and cannot be disabled.
Preferences: Language selection, theme (light/dark mode), and UI settings.
Statistics: PostHog analytics and Google Analytics to understand feature usage and improve the platform. Data is anonymized where possible.
Marketing: Google Ads and Meta tracking pixels for campaign measurement when you arrive from an advertisement.
10.2 Consent Mechanism
We use a self-hosted consent management platform (c15t, operated by Heiberg Industries AS). When you first visit, a consent banner allows you to accept or reject non-essential cookie categories. Your choice is stored and respected across sessions. You can change your preferences at any time from our Cookie Policy page or directly here:
10.3 Third-Party Cookies
Some cookies are placed by third-party services we use (Google Analytics, PostHog, Google Tag Manager). These services have their own privacy policies governing cookie usage. We use Google Consent Mode v2 to ensure third-party tags respect your consent choices.
10.4 Full Cookie Declaration
For a description of each cookie category and how to change your choice, visit our Cookie Policy.
11. International Data Transfers
Your data may be processed in countries outside your residence, including the United States and European Union. We ensure appropriate safeguards are in place for international transfers.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Continued use of Zero7 after changes constitutes acceptance of the updated policy.
13. Contact Us
For privacy-related questions or to exercise your rights, contact us at: