7 Cups Privacy Policy

Effective Date: June 9, 2026

7 Cups (“7 Cups,” “we,” “us” and “our”) provides virtual mental health care services intended to increase access to emotional and social support, and to promote early detection of mental health symptoms (“Services”). Privacy is extremely important to us, so we have taken several steps to protect your information and put you in control.

This privacy policy (“Privacy Policy”) describes how we collect, use, disclose and store Personal Information you provide to us through the website and mobile application tools (collectively “Sites”) that provide the Services). We may provide additional “just-in-time” disclosures or additional information about our Personal Information collection, use and sharing practices. These notices may supplement this Privacy Policy, clarify our privacy practices in the circumstances described, or provide you with additional choices about how we process your Personal Information.

PLEASE REVIEW THIS PRIVACY POLICY CAREFULLY. By accessing, visiting, or using our Services, you acknowledge this Policy, and agree to our Terms of Service (the “Terms”). If you are not comfortable with any part of this Privacy Policy or do not agree with the Terms, please immediately discontinue access or use of our Services. If you have questions about this Privacy Policy, you can contact us at privacy@7cups.com.

You can click on the following links to go directly to the corresponding sections of this Privacy Policy.

1. Personal Information We Collect
2. How and Why We Collect Your Personal Information
3. Cookies and Similar Tracking Technologies
4. Why We Collect Your Personal Information
5. How We May Disclose Your Personal Information
6. Security of Your Personal Information
7. Retention
8. Links to Other Sites
9. Children’s Data
10. Your Choices
11. International Transfer
12. Notice to Individuals in the European Economic Area, the United Kingdom and Switzerland
13. California and US State Privacy Rights
14. Changes to This Policy
15. Contact

1. Personal Information We Collect

The types of Personal Information we obtain about you depends on how you interact with us and our Services. When we use the term “personal information,” we are referring to information that identifies, relates to, describes, or can be associated with you. Personal Information that has been anonymized is no longer personal information as it cannot be associated with a specific individual. The following are the categories and specific types of Personal Information that we may collect depending on the Services you use:

Basic Identifying Information including your full name, e-mail address, phone number, date of birth, username or other similar identifiers.
Device Information and Other Unique Identifiers including device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, or similar unique identifiers.
Internet or Other Network Activity including browsing or search history and information regarding your interactions with our Sites, emails, or advertisements.
Geolocation Data including information that permits us to determine your general location, such as if you manually provide location information or enable your mobile device to send us such information. We use your IP address to identify your country and state of residence to apply relevant privacy protections and regional regional restrictions.
Payment Information including credit or debit card numbers.
Health and Medical Information including information you choose to provide about your health and medical history while using or communicating through the Services.
Demographic Data Including age, gender, race, ethnicity, some of which may include characteristics of protected classifications under U.S. state or federal law.
User Content, such as your communications with us.
Audio and Visual Information including photographs, images, videos, and recordings of your voice when you use our Services.
Inferences drawn from or created based on any of the information identified above.
Sensitive Personal Information. 7 Cups only collects sensitive Personal Information, as defined by applicable privacy laws, for the purposes allowed by law or with your consent. 7 Cups does not collect or process information that is considered to be sensitive Personal Information for the purpose of inferring characteristics about you.

2. How We Collect Your Personal Information

We collect Personal Information about you from various sources. For example, we collect and obtain Personal Information:

Directly From You

Without providing your Personal Information you may not access Services through 7 Cups, contact or correspond with us, other users, therapists or other health care providers via the Services, or utilize the therapy exercises and programs available on the Services.

Account Setup. When you sign up for an account with us, we ask for and collect Personal Information such as your name, a valid email address, phone number, birthdate and address. We need this information to provide you with the Services.
Uploaded Images and Content. The content you upload, whether from your own device or from a cloud-based hosting service, including any data, text, graphic, image, audio and audio-visual files, might include personally identifiable information. The content that you upload will be accessible to others. This includes but is not limited to profile pictures, images added to forum posts and GIFs embedded in forum posts.
Paid Services. If you purchase paid services, such as therapy or other upgrades, Personal Information such as billing name, address and credit card payment information will be collected to process payment.
Listener and Therapist Applicants. If a visitor wishes to apply to be a Listener or Therapist on 7 Cups’ Listening Platform, the visitor will be required to submit Personal Information as requested. Any Personal Information supplied by or on behalf of a visitor for purposes of becoming a Listener or Therapist will be maintained by 7 Cups. Please note that 7 Cups may have additional privacy terms that apply to Listeners or Therapists. Such terms will be made available when an applicant applies to be a Listener or Therapist or otherwise accesses their account.
Mental Health Services. We collect your Personal Information when you access mental health services through our Services, when you contact or correspond with us, therapists or other health care providers via the Services or when you utilize the therapy exercises and programs available on the Services.
Public Forums, Chats, or Other Features. Depending on how you interact with the Services, you may share your Personal Information with other Users, such as peers and other users who participate in chat, forums or other non-private locations. Anything users post in the public forums, chats, or other features will be accessible to other users and may not be able to be deleted. Accordingly, 7 Cups strongly discourages posting any Personal Information in these places and it is your responsibility not to share Personal Information in such non-private location. While we generally do not monitor transcripts of chats between users and Listeners and Therapists, we may occasionally review the chat transcripts to conduct quality control, address potential safety issues, and prevent misuse of our platform, if certain suspicious or potentially harmful activity is detected. We may also use aggregated data from chat transcripts to conduct research and development. In reviewing this information, 7 Cups will maintain all applicable confidentiality/HIPAA/privacy standards.
Log Data. When you use our Services, we store, process and transmit your information about how you use our Services to engage, educate and suggest behavioral activation strategies to you.
Surveys. From time to time we may collect Personal Information from users via surveys. This information is used to improve the content of our web pages, the quality of our Services.
Assessments. Periodically, 7 Cups will offer the opportunity to assess your emotional wellness based on questionnaires where you will be asked to provide Personal Information. It is your choice to participate in these assessments; not participating will not prevent you from participating in any other aspect of the Services offered.
Requests for Information, News and other Content. You may sign up to receive information, news and other content related to new and existing products and services related to 7 Cups’ Sites, 7 Cups’ Listening Platform and events and other information related to 7 Cups that may be of interest to you. When signing up to receive such information, you will be asked to provide Personal Information, including your name, an email address, address and phone number.
Technical Support Requests. If you need technical support related to 7 Cups’ Services, you will need to complete a form for the purposes of defining and clarifying your technical support request. When submitting a technical support request, you will be asked to provide Personal Information, including an email address and a description of the issue. When you contact us, we keep a record of email and chat communications to address and resolve any issues you are facing.

Using Online Tracking Technologies and Other Automatic Data Collection Technologies

When you visit our Sites, open or click on emails or newsletters that we send you, or interact with our advertisements, we or third parties we work with automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies. For more information, please see “Cookies and Similar Online Tracking Technologies” section below.

Other Offline Technologies

We record customer service calls and maintain a transcript of chats (such as, chats with our live agents and chatbots, including artificial intelligence chatbots) for quality assurance and training.

3. Cookies and Similar Tracking Technologies

We and our third–party partners and service providers (use pixels, web beacons, software developer kits, third–party libraries, cookies, and other similar online tracking technologies (collectively, “online tracking technologies”) to gather information when you interact with our Sites, emails or newsletters. Some online tracking technologies help us maintain the security of our websites and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We use the following types of cookies on our Services:

Strictly Necessary Cookies. These cookies are essential because they enable you to move around and use our Services. For example, strictly necessary cookies allow you to access secure areas on our Services. Without these cookies, some services cannot be provided. These cookies do not gather information about you for marketing purposes. This category of cookies is essential for our Services to work and they cannot be disabled.
Functional Cookies. We use functional cookies to remember your choices so we can tailor our Services to provide you with enhanced features and personalized content. For example, these cookies can be used to remember your name or preferences on our Services. While these cookies can be disabled, this may result in less functionality during your use of our Services.
Performance or Analytic Cookies. These trackers collect anonymous passive information about how you use our Services, including webpages you visit, and links you click. We use the information collected by such cookies to improve and optimize our Services.
Targeted Advertising Cookies. These trackers may be set through our Sites by our advertising partners to deliver content, including ads, that are relevant to your interests across your devices, based on how you interact with our advertisements or content. They may be used by our advertising partners to build a profile of your interests and to show you relevant ads on other sites. They do not store directly Personal Information but are based on uniquely identifying your browser and internet device. If you do not allow these trackers, you will experience less targeted advertising. These advertising features are never used in any therapy interactions.

Depending on your location, we partner with third parties to provide advertising services that are targeted based on your online activities across websites, mobile apps, and devices over time (commonly referred to as “interest-based advertising”). In the European Economic Area, United Kingdom, and Switzerland, we utilize a Consent Management Platform (CMP) to obtain explicit consent for non-essential tracking technologies in accordance with TCF 2.2. In other jurisdictions, including most US states, these technologies may be active by default until you exercise your right to opt-out by clicking the "Privacy Choices" link in our footer. We support Global Privacy Platform (GPP) and TCF 2.2 API signals to honor your choices across our partner network.

4. Why We Collect Your Personal Information

We may use Personal Information that we collect about you for various purposes, including to:
a. Provide Our Services. We will use your Personal Information to provide information or perform Services that you request, such as creating and managing user accounts and providing you therapy or consulting services.
b. Provide You with Service-Related Communications. We will send you administrative or account-related information to keep you updated about your account and the Services. Such communications may include information about Privacy Policy updates, security updates, tips or other relevant transaction-related information. Service-related communications are not promotional in nature. You are not able to unsubscribe from such communications, otherwise you may miss important developments relating to your account or the Services.
c. Maintain Legal and Regulatory Compliance. Our Services are subject to certain laws and regulations which may require us to process your Personal Information. For example, we process your Personal Information to fulfill our business obligations, ensure compliance with industry regulator’s standard and policies, to manage risk as required under applicable laws and regulations, or to respond to requests by judicial process or governmental agency.
d. Enforce Compliance with Our Terms, Agreements and Policies. When you access or use our Services, you are bound to our Terms. We may process your Personal Information for compliance purposes, such as carrying out our obligations and enforcing our Terms or other legal rights, including those arising from any contracts entered into between you and us, including for billing and collection.
e. Detect and Prevent Fraud and Security Risks. We may process your Personal Information to help monitor, prevent and detect fraud and abusive use of our Service, monitor and verify your identity so that unauthorized users do not gain access to your information, enhance system security, and combat spam, malware, malicious activities or other security risks.
f. Provide Customer Support or Respond to You. We collect any information that you provide to us when you contact us. Without your Personal Information, we cannot respond to you or ensure your continued use and satisfaction of the Services.
g. Provide Marketing Communication. We may collect your email address that you voluntarily provide to us when you subscribe to our marketing communications. We will occasionally send you information on products, services and promotions. =
h. Infer Your Interest and Personalize Your Experience. Where you have provided consent, or where permitted by law unless you opt-out, we along with our third-party marketing and social media partners who use cookies, pixels, or other tracking technologies on our Sites, may process your personal information to personalize your experience of the Services by presenting products, services, and offers tailored to you, which helps to keep our Services free through advertising and sponsorships. These technologies are used to collect information about your browsing activity—which may include sensitive information, such as your browsing of content related to specific health conditions—to deliver personalized, targeted advertising to you on third-party websites and apps.
i. Research and Development of Our Services. We may process your Personal Information and derive analytical and statistical data to better understand the way you use and interact with our Services. For instance, analyzing where, on which types of devices and how our Site is used, how many visitors we receive, and where they click on the Site may help us improve our existing Services and to build new Services. Please see our Cookies and Similar Tracking Technologies section for more information.
j. Personalize Your Experience. We may process your information to personalize your experience. By personalization, we enable you to interact with our Services more easily across platforms and devices.
k. Facilitate Corporate Acquisitions, Mergers and Transactions. We may process any information regarding your account and your use of our Services as is necessary in the context of corporate acquisitions, mergers or other corporate transactions.
l. With Your Consent. For any other purpose disclosed to you prior to you providing us your Personal Information or which is reasonably necessary to provide the services or other related services requested, with your permission or upon your direction.

5. How We May Disclose Your Personal Information

We may share and disclose Personal Information as follows:
a. To Service Providers Performing Services on Our Behalf. We share Personal Information, with certain third-party service providers that assist us in providing the Services and which are bound by duties of confidentiality. For example, we may use third parties to host the Services, to send out email updates about the Services, administrative services, financial services, quality assurance, data aggregation or remove repetitive information from our user lists.
b. To Therapists. If you elect to consult with a licensed therapist through 7 Cups, we may share your information with your therapist to enable and facilitate care.
c. To Healthcare Providers. If you have been referred to the Services as part of a care plan by your healthcare provider, we may share your Personal Information with your healthcare provider to facilitate care.
d. For Legal Purposes. We will disclose your Personal Information as we deem necessary to respond to a subpoena, regulation, binding order of a data protection agency, legal process, governmental request or other legal or regulatory process. We may also share your Personal Information as required to pursue available remedies or limit damages we may sustain.
e. For Welfare Assurance. We may disclose your Personal Information directly to law enforcement or local authorities in the event that it has been reasonably determined that your safety or the safety of others may be at risk. Therapists are mandated reporters. Because of their profession, they have a legal obligation to report to authorities any signs of child abuse or vulnerable adult abuse. However, members cannot be forced to give any Personal Information. Adults who are in therapy provide Personal Information which will only be disclosed to the therapist if they or someone else is in imminent danger.
f. For Business Transfer. In the event of a merger, reorganization, consolidation, restructuring, bankruptcy, sale of substantially all interests or assets, or other similar transaction, we may transfer your Personal Information to the subsequent owner or operator of the Services.
g. Analytics and Interest-based Advertising Partners. We use third-party analytics, advertising, and marketing providers to collect information about your use of the Sites. We utilize internal classification systems to limit data sharing based on content sensitivity. On pages identified as sensitive, we restrict the types of advertising permitted and the data shared with partners. Where permitted by applicable law, we may share your personal information with marketing and advertising partners for targeted advertising purposes. To learn more about your choices and rights, please review the “Privacy Rights” section.
h. With Your Consent. We may share your Personal Information for any other purpose disclosed to you prior to you providing us your Personal Information or which is reasonably necessary to provide the services or other related services requested, with your permission or upon your direction.
i. Anonymized Data Sharing. We may de-identify your Personal Information, in compliance with applicable law, and aggregate such de-identified data with the de-identified data of other users. Such anonymized, aggregated data is no longer considered Personal Information. We may then share such anonymized, aggregated data with researchers, healthcare providers, academic institutions, and third-party partners. At 7 Cups, we believe that global mental health is a collaborative effort. The sharing of anonymized data plays a key role in helping both 7 Cups users and people worldwide to understand and better their mental health. This includes using de-identified data to train artificial intelligence and machine learning models to provide safer, more empathetic support globally, while maintaining a high level of privacy and anonymity for individuals.

6. Security of Your Personal Information

We employ reasonable security measures designed to protect the security of information submitted through the Services. However, the security of information transmitted through the Internet can never be guaranteed. To protect you and your Personal Information we may suspend your use of the Services, without notice, pending an investigation, if any breach of security is suspected.

Your Responsibilities. Users of the Services are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of any of the Services.
Unauthorized Access. Access to and use of password protected and/or secure areas of the Services are restricted to authorized users only. Unauthorized access to such areas or information is prohibited.
Encryption and Firewalls. All information, including but not limited to chat transcripts and Personal Information is encrypted during transmission. We use standard Secure Socket Layer (SSL) encryption that encodes information for such transmissions. All information received is maintained on secure servers in encrypted format. Access to stored information is protected by multi-layered security controls including firewalls, encryption, role-based access controls, and passwords.

7. Retention

Generally, we will retain your Personal Information for as long as your account or profile is active, or for the length of time needed to fulfill the purposes outlined in this Privacy Policy.

Private Messages and Account Deletion: Private messages linked to your identifiable account are stored for up to one year. After a period of inactivity greater than 1 calendar year, or upon your explicit request, 7 Cups will purge the Personal Information related to your account.

De-Identified and Aggregated Data: Before deleting your Personal Information, we may irreversibly de-identify, anonymize, and aggregate your data (including chat transcripts) so that it can no longer be reasonably linked to you. Once data has been completely de-identified, it is no longer considered Personal Information under applicable privacy laws. We retain this de-identified data indefinitely.

How We Use De-Identified Data: We use this anonymized data to advance global mental health care. This includes improving platform safety, supporting clinical and academic research, evaluating therapeutic outcomes, and training artificial intelligence and machine learning models (including systems developed by our third-party enterprise partners) to better understand and provide empathetic support.

8. Links to Other Sites

The Services may contain links and widgets related to third-party websites and services (“Third Party Services”) with which we have no affiliation. A link to any Third Party Services does not mean that we endorse it or the quality or accuracy of information presented on it. If you decide to visit any Third Party Services, you are subject to its privacy policy and practices and not this Privacy Policy. We encourage you to carefully review the legal and privacy notices of all other digital services that you visit. Users are prohibited from requesting offsite contact with other users. If a user is detected initiating offsite contact, 7 Cups reserves the right to immediately terminate that account.

9. Children’s Data

Our Services are not directed to children under age 13, and we do not knowingly collect or process Personal Information from children under the age of 13. Children between the ages of 13-17 years old may only participate in our Services with parental consent. If a parent or guardian becomes aware that their child has provided us with Personal Information without their consent, they should contact us at privacy@7cups.com. If we become aware that a child under 13 (or between the ages of 13-17 years old without parental consent) has provided us with Personal Information, we will take steps to delete such information from our files. Separately, a child under 13 may request deletion of information they posted on our Site or Services, which may be accomplished through anonymization.

10. Your Choices

You may request access to, correction of, or deletion of your Personal Information. We will honor your request regardless of where you live or are physically located unless a legal requirement prevents us from doing so or a legal exception applies. To request access to, correction of or deletion of your Personal Information, please email us at privacy@7cups.com and advise whether you are requesting access, correction or deletion of your Personal Information. To protect your privacy, we must be able to verify your identity to confirm that the request came from you prior to taking any action in relation to your request. We may contact you by e-mail to verify your request before we can process your request to exercise certain privacy rights. Depending on your request, we will ask for information such as your name, address, or an e-mail address you have used with us, or for details about the Services you have used.

11. International Transfer

As a global entity, 7 Cups may store, transfer, and otherwise process your Personal Information in countries outside of the country of your residence, including the United States and possibly other countries. Such countries may have data protection laws that are less protective than the laws of the jurisdiction in which you reside. If you do not want your information transferred to, processed, or maintained outside of the country or jurisdiction where you are located, you should immediately stop accessing or using the Services. If you are in the European Economic Area, United Kingdom, or Switzerland, please refer to the section below entitled Notice to Individuals in the European Economic Area, United Kingdom, and Switzerland.

12. Notice to Individuals in the European Economic Area, the United Kingdom and Switzerland

This section only applies to individual using our Service that are located in the European Economic Area, United Kingdom and/or Switzerland (collectively, the “Designated Countries”) at the time of data collection. Users in these regions will be presented with a Consent Management Platform (CMP) upon arrival to manage their privacy choices in compliance with IAB TCF 2.2 regulations. We rely on your IP address to identify your location. Masking your IP address may prevent us from applying the protections in this section.

Our Relationship to You. 7 Cups is a data controller with regard to any Personal Information collected from Users of its Service. A “data controller” is an entity that determines the purposes for which and the manner in which any Personal Information is processed. Any third parties that handle your Personal Information in accordance with our instructions are our service providers and are “data processors.”

Legal Bases for Processing Personal Information. We describe our purposes for processing throughout this Privacy Policy. Below is a list of the purposes described in our policy with the corresponding legal bases for processing. Generally, the legal basis on which we rely on to process your Personal Information include: necessity to carry out our obligations arising from any contracts we entered with you or to take steps at your request prior to entering into a contract with you; your consent to the processing; satisfaction of our legal obligations; necessity to protect your vital interests; necessity to process in the public interest; or for our legitimate interests as described in those sections.

Based on our legal obligations. Article 6(1) lit.(c) GDPR:

Section 4(c) Maintain Legal and Regulatory Compliance
Section 4(e) Detect and Prevent Fraud and Security Risks
Section 5(d) For Legal Purposes
Section 5(e) For Welfare Assurance

Based on our contract with you or to take steps at your request prior to entering a contract. Article 6(1) lit.(b) GDPR:

Section 4(a) Provide Our Services
Section 4(b) Provide You with Service-Related Communications
Section 4(d) Enforce Compliance with Our Terms, Agreements and Policies
Section 4(f) Provide Customer Support or Respond to You
Section 5(a) To Service Providers Performing Services on Our Behalf
Section 5(b) To Therapists
Section 5(c) To Healthcare Providers

Based on our legitimate interest to operate our business and not overridden by your data protection interests or fundamental rights and freedom. Article 6(1) lit.(f) GDPR:

Section 4(i) Research and Development Our Services
Section 4(j) Personalize Your Experience
Section 4(k) Facilitate Corporate Acquisitions, Mergers and Transactions
Section 5(f) For Business Transfers

Based on your consent. Article 6(1) lit.(a) GDPR:

Section 4(g) Provide Marketing Communication
Section 4(l) With Your Consent
Section 4(h) Infer Your Interest and Personalize Your Experience
Section 5(g) Analytics and Interest-based Partners
Section 5(h) With Your Consent

We will only process your personal information for advertising purposes with your explicit consent obtained via our TCF 2.2 compliant CMP.

Marketing. We will only contact individuals located in the Designated Countries by electronic means based on our legitimate interests, as permitted by applicable law, or the individual’s consent. When we rely on legitimate interest, we will only send you information about our Services that are similar to those which were the subject of a previous sale or negotiations of a sale to you. You can object to direct marketing at any time and free of charge.

Transfer of Your Personal Information. We transfer your Personal Information subject to appropriate safeguards as permitted under the relevant data protection laws. The transfer of your Personal Information out of the Designated Countries is necessary for the performance of a contract between us, or for important reasons of public interest. We may also rely on legal transfer mechanisms such as Standard Contractual Clauses or we work with U.S. based third parties that are certified under the EU-U.S. and Swiss-U.S. Privacy Shield Framework.

Your Privacy Rights. We take reasonable steps to ensure that your Personal Information is accurate, complete, and up to date. You are able to assert certain rights identified below with respect to your personal information. Please note, your rights in relation to your personal information are not absolute. Depending upon the applicable law, access to your rights under the applicable law may be denied: (a) where denial of access is required or authorized by law; (b) when granting access would have a negative impact on other’s privacy; (c) to protect our rights and properties; or (4) where the request is frivolous or burdensome.

Right to Know/Access. You may have the right to obtain a copy, or a list of categories of the personal information that we hold about you, as well as other supplementary information, such as the purposes of processing, and the entities to whom we disclose your personal information.
Right to Correct/Rectification. You may have the right to correct any of your personal information in our records and systems. You may request us to rectify, correct or update any of your personal information held by us that is inaccurate.
Right to Delete/Erasure. Under certain circumstances, you may have the right to request that we delete the personal information that we hold about you. This right is not absolute, and we may refuse your right to delete if it is reasonably necessary for us to provide a service requested by you; to perform a contract between us; to maintain functionality and ensure security of our systems; to enable solely expected internal uses of your personal information; to exercise a right provided by law; to comply with a legal obligation, or if there are compelling legitimate grounds for keeping your personal information.
Right to Portability. Under certain circumstances, you may have the right to receive personal information we hold about you in a structured, commonly used, and machine-readable format so that you can provide that personal information to another entity.
_Right to Object to Automated Decision-Making. You may have the right not to be subject to a decision that is based solely on automated processing (where a decision is taken about you using an electronic system without human involvement) which significantly impacts your rights. No decision will be made by us about you solely on the basis of automated decision making which has a significant impact on you.
Right Not to Provide Consent or to Withdraw Consent. We may seek to rely on your consent in order to process certain personal information. Where we do so, you have the right not to provide your consent or to withdraw your consent at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.
Right to Restriction. You may have the right to request that we restrict our processing of your personal information in certain circumstance. For instance, this right is available if you contest the accuracy of the personal information, or you objected to our processing.
Right to Object to Processing. You may have the right to object to our processing of your personal information at any time and as permitted by applicable law if we process your personal information on the legal bases of: consent, or legitimate interests. However, we may continue to process your personal information if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable law.
Lodge a Complaint. You also have the right to lodge a complaint with a supervisory authority or equivalent regulatory body. Contact details for data protection authorities in the European Economic Area are available here, and contact details for the United Kingdom’s ICO are available here.

If you would like to exercise your rights under applicable law, please contact us at privacy@7cups.com and advise which rights you are asserting, and use “GDPR” in the subject line as applicable. To protect your privacy, we may seek to verify your identity when we receive an individual privacy rights request from you to ensure the security of your Personal Information. Depending on your request, we will ask for information such as your name, an e-mail address, or a phone number you have used with us to verify your request, and other information about your use of our Services.

13. California and US State Privacy Rights

7 Cups is a signer on the Multi-State Privacy Agreement (MSPA) and supports USNat signals for Global Privacy Platform (GPP) compliance. California residents with an established business relationship with us have the right to request certain information regarding our disclosure of certain types of Personal Information to third parties for their direct marketing purposes during the immediately preceding calendar year. To make such a request, please send us an email at privacy@7cups.com and indicate in your message that you are a California resident making a “Shine the Light” inquiry. This request may be made no more than once per calendar year.

For users in US states and other jurisdictions, you may exercise your right to opt-out of the sharing and sale of your personal data by clicking on “Privacy Choices” in the footer of the website. We honor GPP opt-out signals automatically for these jurisdictions. We also reserve the right to restrict or disable advertising based on your identified region at our discretion.

The Services honor Global Privacy Control (GPC) signals. If you have enabled GPC on your browser or device, we will treat it as a valid request to opt-out of the sale/sharing of your personal information and targeted advertising for that specific browser or device. For more information on how to download and use GPC, please visit https://globalprivacycontrol.org.

14. Changes to This Policy

The Last Updated and Effective Date of this Privacy Policy is set forth at the top of this Privacy Policy. We may change this Privacy Policy from time to time at our discretion. We will notify you of material changes to this Privacy Policy in compliance with applicable law. Your continued use of the Services after the Last Updated and Effective Date constitutes your acceptance of the amended Privacy Policy. The amended Privacy Policy supersedes all previous versions.

15. Contact

Please send all questions, comments and notices regarding this Privacy Policy to the 7 Cups Privacy Officer at privacy@7cups.com or call toll-free 844-755-8757.