Confidentiality & Data Protection Agreement (DPA)

1. Purpose of This Agreement

This Agreement describes how 7Qube protects confidential information and ensures that all user data is handled securely, ethically, and in compliance with applicable privacy laws.

This Agreement supplements the privacy commitments already outlined in the primary Legal Notice & Privacy Policy.

2. Personal Data We Collect

To operate 7Qube's conversational AI platform, we collect only the minimum information required, including:

• Email address (mandatory)
• Phone number (optional unless required for security verification)
• Technical data such as device type, session ID, approximate IP region
• Limited platform usage data necessary for performance and safety

Chat data is processed transiently and is not stored or permanently linked to your email or phone number.

3. Confidentiality of User Information

7Qube treats all personal data as strictly confidential. We commit that:

1. We do not sell, trade, or rent your personal information.
2. We do not store conversations permanently; processing is session-based and anonymous.
3. Your email and phone number are never shared with advertisers, external marketers, or analytics companies.
4. Access to user information is restricted to authorized personnel only and monitored through logged access controls.

4. Use of Third-Party Vendors

To provide secure and reliable services, 7Qube uses vetted third-party service providers for:

• AI conversational processing
• Cloud hosting and encrypted data storage
• Email delivery (verification emails, login notices, account notifications)
• Phone number protection and optional SMS-based authentication

All third-party vendors act strictly as data processors, not data controllers. Each vendor is bound by:

• Legally enforceable confidentiality obligations
• Data-processing agreements requiring encryption, restricted access, and breach-notification procedures
• Prohibitions on using your data for advertising, profiling, or independent purposes

7Qube ensures its third-party vendors comply with internationally recognized frameworks such as ISO/IEC 27001 and NIST Cybersecurity Framework requirements for data protection.

5. How Your Email & Phone Number Are Used

Your email and phone number may be used solely for:

• Account creation and login authentication
• Security alerts, password resets, and identity verification
• Platform-related notifications or legal updates
• (Optional) Two-factor authentication (2FA)

7Qube does not use your email or phone for:

• Promotional messaging without your consent
• Targeted advertising
• Behavioral profiling

6. Security Measures

7Qube applies multiple layers of protection, including:

• TLS encryption for all data in transit
• AES-256 encryption for all data at rest
• Strict access controls and administrator MFA
• Intrusion-detection and system-monitoring tools
• Vendor-level encryption and compliance reviews

Despite these safeguards, no online service can offer absolute security. Users engage with 7Qube at their own discretion and risk.

7. Data Retention & Deletion

• Email and phone information are retained only while your account is active.
• Upon account deletion, all identifiers are permanently erased from active and backup systems within the scheduled purge cycle.
• Technical logs are anonymized after 30–90 days.

You may request deletion anytime at hello@oumaa.com.

8. User Rights

Depending on applicable laws, you have the right to:

• Access your data
• Request correction
• Request deletion (“Right to be Forgotten”)
• Restrict or object to certain processing activities
• Request data portability
• Withdraw consent
• File a privacy complaint with your regional authority

9. Confidentiality Obligations of 7Qube Personnel

All 7Qube staff with approved access to limited operational data are required to:

• Sign confidentiality and non-disclosure agreements
• Undergo periodic security and compliance training
• Access data only as needed for platform maintenance or support
• Follow strict internal protocols to prevent misuse or unauthorized disclosure

10. Third-Party Confidentiality Requirements

All 7Qube vendors must:

• Use your data only for performing services requested by 7Qube
• Maintain technical and organizational security controls
• Never move or process data without authorization
• Notify 7Qube of any actual or suspected breach without undue delay
• Delete or anonymize data upon contract termination

11. Breach Notification

In the unlikely event of a data breach affecting your email, phone number, or technical identifiers:

• 7Qube will promptly investigate
• Take corrective action
• Notify affected users and legal authorities where required

12. Updates to This Agreement

7Qube may revise this Agreement to reflect regulatory changes, vendor changes, or enhanced security practices.

Users will be notified by email of material updates at least seven (7) days in advance.