# Privacy Policy — AutoBlack / American Black **Version:** 1.0 **Effective date:** May 12, 2026 **Data controller:** Seven Global Continental LLC **Privacy contact:** info@sevenglobalcontinental.cloud **General contact:** info@sevenglobalcontinental.cloud **Website / application:** https://sevenglobalcontinental.cloud and the AutoBlack mobile application (the “**Service**”). ## 1. Purpose of this policy This policy describes how we collect, use, retain, and protect personal data when you use the Service (AutoBlack mobile app, associated API/backend, and any websites in the American Black ecosystem). ## 2. Categories of data we may process Depending on how you use the Service, we may process account and authentication data (email address, username, first and last name, phone number and, if you provide it, company name; identity verification via **one-time passcode (OTP)** sent to your email; session credentials such as access and refresh tokens; and, for certain web admin accounts, a **password** stored using appropriate security practices). We may process profile and preferences data: preferred language (for example, Spanish or English) for the interface or communications; preferred distance unit (kilometers or miles); and approximate or formatted **address** and **coordinates** (latitude/longitude) if you use the address feature during registration or in your profile (for example, geocoding on the device or via map services, depending on the product version). We may process vehicle and maintenance data: make, model, submodel, year, license plate; mileage associated with the vehicle or with each service record; service dates, service type or category, parts, or notes you enter; and reminder settings (for example, recurrence or due dates calculated from your data). This information may be personal data because it can be linked to you as the account holder. For push notifications we may process a **push token** identifier for your device (for example, a format compatible with the app platform) and, where applicable, platform (iOS/Android), to send Service-related messages (such as maintenance reminders). If you use a help or diagnostic chat with artificial intelligence, we process the **content of your messages** and any context needed (for example, vehicle data you select) to generate a response; that may involve sending data to **large language model providers** configured in our environment, subject to that provider’s terms. We may also process technical and security data (IP address, app or browser type, timestamps, and **security or error logs** to protect the Service and troubleshoot issues) and aggregated or statistical information that does not directly identify an individual. Email communications may include OTP codes and operational or informational messages related to the Service, in line with product configuration and applicable law (including marketing only where legally permitted and, where required, **opt-in**). ## 3. Purposes and legal bases Purposes include, among others: providing the Service (account creation, vehicles and service history, sync, reminders); security and abuse prevention (rate limiting, fraud prevention, API protection); legal compliance (responding to lawful requests from authorities); product improvement (aggregated analytics, bug fixes); and communications (OTP, important notices about the Service or your account). The specific legal basis (contract, legitimate interest, consent, or legal obligation) depends on applicable law and the processing activity; where consent is required (for example, certain optional data or marketing), we will request it in the interface. ## 4. Retention We keep data for as long as needed for the purposes above and for any statutory retention periods (accounting, claims, etc.). Data from closed accounts may be retained in a restricted form for legally required periods before final deletion. ## 5. Recipients and processors We do not sell your personal data. We may share data with **cloud and infrastructure providers** hosting the database and API; **email providers** to send OTP messages and other emails; **push notification providers** to deliver messages to your device; **AI model providers** when you use the help chat, according to technical configuration; and **public authorities** when required by law or court order. We use contractual safeguards with processors where the law requires them. ## 6. International transfers If servers or vendors (email, AI, push) are located outside the country where you live, an **international transfer** may occur. Where required, we apply appropriate safeguards under applicable law (for example, standard contractual clauses or other recognized mechanisms). ## 7. Your rights Depending on applicable law, you may have the right to **access** your personal data; **rectify** inaccurate data; **erase** data in cases provided by law; **restrict** processing or **object** to it in certain situations; **data portability** for data you provided through automated means; and **withdraw consent** where processing is based on consent, without affecting the lawfulness of prior processing. To exercise these rights, email **info@sevenglobalcontinental.cloud** with your request and, if possible, your account email. We may ask for reasonable information to verify your identity. You may lodge a complaint with the **data protection authority** that applies under the law in your case. ## 8. Security We apply reasonable technical and organizational measures (for example, encryption in transit with HTTPS, access controls, sound practices for passwords and tokens). No system is fully secure; you should also protect your device and credentials. ## 9. Children The Service is not directed at children below the legal age of digital consent applicable in each case. If we learn we have collected children’s data without a proper legal basis, we will delete it. ## 10. Cookies and similar technologies (web) If you use a **website** in the same ecosystem, there may be first- or third-party cookies or local storage (for example, admin session). Details may be provided in a separate cookie notice for that site. The **mobile app** does not use browser cookies in the same way as a website but may use on-device storage for session or preferences. ## 11. Changes to this policy We will publish updates with a new effective date. If a change is material and the law requires additional notice, we will comply (for example, by email or in-app notice). ## 12. Contact **Privacy and rights requests:** info@sevenglobalcontinental.cloud **General inquiries:** info@sevenglobalcontinental.cloud
