Privacy policy
This policy explains what personal information 73 collects, why, who it is shared with, how long it is kept, and how you can see it, correct it or have it deleted. It is written to be read, so where a short sentence is true we use the short sentence.
1. Who we are
73 ("we", "us") is the parent company of the service brands Webera and Avanti Studio, and of the products DailyPulse, dooz, Loopable, Resilia and LifePulse. We also build and operate the 73 Platform, an internal platform our team uses to manage relationships, leads and deals for all our brands, together with its companion browser extension of the same name. 73 is the data controller for the personal information described here.
2. What this policy covers
- Our websites: 73.digital, webera.com and avanti.studio, including their forms.
- The 73 Platform at app.73.digital and api.73.digital, and the 73 Platform browser extension.
- Any app or integration we operate that asks you to sign in with, or connect, a third-party account such as Google or Meta.
- Email, calls and meetings with us in the course of business.
Each of our products publishes its own privacy policy on its website, because what a product handles (for example health or wellbeing information in dooz, Resilia or LifePulse) needs its own description. For a product, its own policy applies first; this policy covers anything it does not.
When we deliver services to a client under a contract, the client's own data (for example, the systems and code we work on) is handled under that contract, and we act on the client's instructions.
3. Information we collect
Information you give us
- Website forms. When you contact us, ask for an estimate or take an assessment on one of our sites, we receive what you type: typically your name, email address, company, and your message or answers. We also record which site and form it came from.
- Correspondence. Emails, meeting notes and call notes when you talk to us.
- Accounts. If you are given an account on the 73 Platform, your name, email address and a hash of your password (never the password itself).
- Payments. Clients who subscribe pay through Stripe. We receive billing contact details and payment status; card numbers go to Stripe and never reach us.
Professional information from public sources
Our team uses the 73 Platform browser extension while browsing LinkedIn. When a team member opens a public profile or company page, the extension reads that one page and saves the professional details shown on it to the 73 Platform: for example name, headline, current employer and job title, location, profile address, and the dates and links of recent public posts. The extension only reads pages a team member has open in their own browser. It does not crawl, does not log in as anyone else, and does not collect private messages, connections lists or contact details that are not shown on the page.
We also note business contact details people share with us directly, for example on a business card, an email signature or a company website.
Information collected automatically
- 73.digital sets no cookies and runs no analytics or advertising scripts. Our hosting provider keeps standard request logs (IP address, browser type, page requested and time) for security and troubleshooting.
- webera.com and avanti.studio use Google Analytics, loaded through Google Tag Manager, to count visits and understand which pages are useful. Google Analytics uses cookies; you can block them in your browser or with Google's opt-out add-on.
- The 73 Platform uses one essential cookie to keep a signed-in team member signed in. It is not used for tracking.
Information from services you connect
Some features ask you to sign in with, or connect, an account you hold elsewhere, such as a Google account or a Meta (Facebook or Instagram) account. We only receive the information covered by the permissions shown on that provider's consent screen, and only for the feature you turned on. Sections 6 and 7 say exactly how that information is treated.
4. How we use it
- To answer your enquiry, prepare an estimate, or send you the assessment report you asked for.
- To keep an accurate record of the people and companies we work with or may work with, so the right person at our company follows up and nobody is contacted twice or by the wrong brand.
- To deliver, bill and support the services a client has bought.
- To run the features you connect an account for, and nothing beyond them.
- To keep our systems secure, prevent abuse, and meet legal obligations.
- To understand, in aggregate, how our websites are used so we can improve them.
Our legal bases, where the law asks for one, are: taking steps you asked for before or under a contract; our legitimate interest in running and growing a business-to-business company, which we balance against your interests by collecting only professional information and making deletion easy; your consent, where we ask for it (for example when you connect an account); and legal obligations.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
5. AI and automated processing
The 73 Platform includes AI agents that read the records described above to help our team: they find duplicate records and propose merges, summarise what we know about a company, suggest next steps on a deal, and draft emails or posts. The models run on Amazon Bedrock (Anthropic's Claude models) inside our own cloud account.
- Agents propose; people decide. Nothing an agent drafts is sent or published without a person approving it.
- We make no decisions with legal or similarly significant effects about anyone by automated means alone.
- We do not use your personal information, or any data received from Google or Meta APIs, to train or improve AI models, and our AI provider's terms do not allow it to use the data we send for training either.
6. Google user data
If you connect a Google account to an app or integration we operate, we access only the Google data covered by the scopes you approve on Google's consent screen (for example your basic profile and email address, or, for a feature that needs them, your calendar events or email), and we use it only to provide or improve the user-facing feature you connected it for.
73's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We do not use Google user data to serve advertisements, and we do not sell it.
- We do not transfer it to others except as needed to provide the feature, to comply with law, or as part of a merger or acquisition with notice to you.
- No person at 73 reads it unless you ask us to (for example for support), it is needed for security or to investigate abuse, or the law requires it.
- We do not use it to train or improve AI or machine learning models.
You can disconnect our access at any time from your Google Account's third-party connections page, and ask us to delete what we stored as described in section 11.
7. Meta and other connected services
If you connect a Facebook Page, Instagram account or other Meta product, we use the data Meta shares with us (such as Page details, posts and their insights) only to provide the feature you connected it for, such as scheduling and publishing posts you approved and reporting on how they performed. We do not sell it, do not use it for advertising profiles, and delete it when you disconnect or ask us to. You can remove our access in your Facebook settings under "Apps and websites". The same rules apply to any other service you connect, such as LinkedIn.
8. Who we share it with
We share personal information only with:
| Who | Why |
|---|---|
| Amazon Web Services | Hosting of our websites, servers and database; AI models through Amazon Bedrock; DNS; sending some form emails. |
| Business email and documents (Google Workspace); website analytics on webera.com and avanti.studio. | |
| Stripe | Subscription billing for clients. |
| GitHub | Source code hosting; it holds no personal information about prospects. |
| Our brands and team | Webera and Avanti Studio staff see the records relevant to their work. Access is limited to people who need it. |
| Authorities and successors | When the law requires it, to protect rights and safety, or to a buyer or successor if the business is sold, under this policy. |
Our service providers may only process the information on our instructions and must protect it.
9. How long we keep it
- Raw copies of pages read by the browser extension are deleted automatically after 90 days. The professional details taken from them are kept, each marked with where and when it was seen.
- Records of people and companies are kept while there is a reasonable business reason to, and reviewed when they go stale. You can ask us to delete yours at any time.
- Form submissions are kept as the record of what you sent us, until you ask us to delete them or the relationship ends and they are no longer needed.
- Client and billing records are kept for as long as tax and accounting law requires.
- Data from a connected account is deleted within 30 days of you disconnecting it or asking us to.
- Nightly backups are kept for 14 days, so deleted data is gone from them within 14 days of deletion.
10. Your choices and rights
Wherever you live, you can ask us to tell you what we hold about you and send you a copy, correct it, delete it, stop or limit how we use it, or object to us holding it at all. If you are in the European Economic Area, the United Kingdom or Brazil (LGPD), or a US state with a privacy law such as California, these are your legal rights, and you can also complain to your data protection authority. You can unsubscribe from any marketing email using the link in it.
To exercise a right, email joel@73.digital. We may ask you to confirm your identity, and we answer within 30 days. We will not treat you differently for using these rights.
11. Deleting your data
To have your data deleted from our systems, including data we received through Google, Meta or LinkedIn:
- Email joel@73.digital with the subject "Delete my data".
- Tell us the email address, and if relevant the profile or account, the request is about.
- We confirm we received it, delete the records within 30 days, and email you when it is done.
Deletion removes your record, the details and notes attached to it, your form submissions and any data from accounts you connected. We keep a minimal note that a deletion happened, and, if you ask us never to add you again, the email or profile address we must ignore, so the request keeps working. If you only want to revoke a connected app, you can also do that yourself in your Google or Facebook account settings at any time.
12. Security
Our servers accept only encrypted (HTTPS) connections, the database is not reachable from the internet, passwords are stored as Argon2 hashes and session tokens only as hashes, access is limited to the people who need it, and backups are kept only on machines our own team controls. No system is perfectly secure; if a breach affects your information we will tell you and the authorities as the law requires.
13. Where your data is stored
Our servers and database are in the United States (Amazon Web Services, us-east-1). If you are outside the United States, your information is transferred there. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses offered by our providers.
14. Children
Our sites and services are for businesses and are not directed at anyone under 16. We do not knowingly collect information about children; if you believe we have, contact us and we will delete it.
15. Changes to this policy
When we change this policy we update the date at the top. If a change materially affects how we use information we already hold, we will tell the people affected before it takes effect.
16. Contact
Questions or requests about privacy go to joel@73.digital. See also our terms of service.