Privacy Policy

Last updated: October 21, 2026

This Privacy Policy explains how 127 Group LLC ("127", "we", "us") collects, uses, shares and protects personal information when you visit 127group.io (including the member area at 127group.io/app), use our free tools (Founder Score, Day One Stack, Idea Test, First 25), use Eli's Playbook and our other AI tools, join a waitlist or membership, message us on social media, attend a Founder's Circle call or gathering, apply for or join the Founding Five, or otherwise interact with us (the "Service").

The short version

• We collect what we need to run 127: your account details, your assessment answers, your progress and worksheets, what you type into our AI tools, and your billing status. Stripe handles your card; we never see your full card number.
• What you type into Eli's Playbook and the Idea Test is sent to our AI provider to generate answers. We don't let it train its models on your content.
• First 25 and HQ workflows that find businesses send the map services (Tracestrack and LocationIQ, for OpenStreetMap data) only the business type and city you search for. A First 25 list is deleted after 30 days (Sections 4 and 9).
• HQ, for Builder members, can count your sales from Stripe or Shopify. For your weekly totals we keep only the totals, never the names or contact details in your sales, and a workflow you run keeps what it used for 180 days (Sections 7A and 7B). If you add HQ's AI link to Claude, ChatGPT or another AI app, that app's company handles what it reads under its own terms.
• HQ's workflows and Pipeline keep what you add about your own clients and leads, only for you. We never contact them on our own, and a workflow's run is deleted 180 days after it ends (Section 7B).
• HQ's Brain, Ask 127, AI team, site chat and Studio: what you add and what they make stay private to you. Our AI provider gets only what each task needs and doesn't train on it, and nothing goes out from your accounts without your OK (Section 7C). Platforms you sign in to add their own rules (Section 7D).
• We don't sell your personal information for money. If you say yes to ad cookies, Meta and TikTok help us measure our ads. If you say no, or your browser sends a Global Privacy Control or Do Not Track signal, those ad tools stay off.
• We email you marketing only if you opt in, and you can unsubscribe anytime.
• You can see, correct, export or delete your information, wherever you live. Delete your account anytime in Settings.
• 127 is for people 18 and older.

1. Information we collect

Information you give us

Information collected automatically

Information from others

• Payment processor: Stripe tells us whether payments succeed or fail.
• Social platforms: if you message us or comment on Instagram (handled with ManyChat), we receive your username and the message, and your email if you choose to send it.
• A friend's referral link: if you arrive through a member's link, we record that they referred you.
• Advertising platforms: Meta and TikTok give us aggregated reports about ad performance.

Sensitive information. We don't ask for sensitive information such as government ID numbers, health information, religious beliefs, or precise location. The only exceptions are two HQ workflows members run for their own clients: the personal training workflow keeps whether a client's PAR-Q+ health form says they can start, and the meal prep workflow keeps foods to leave out of a client's meals, which can include allergies (Section 7B). Please don't include sensitive information in free-text answers or AI messages. If you choose to share something sensitive (for example, about your faith or your health), we use it only to give you the response or service you asked for.

2. How we use information

We use personal information to:

1. Provide the Service: create your account, build your roadmap, save your work, run the AI tools, HQ, its workflows, Ask 127, your AI team, site chat and Studio, the wins board and the Circle.
2. Process payments, apply taxes, send receipts and required billing notices (like renewal and price-change notices), and handle failed payments, refunds and chargebacks.
3. Send account and service messages, like email confirmation, password resets, receipts, renewal reminders, cancellation confirmations and important changes.
4. Send marketing emails and, if you opt in, texts. See Section 6.
5. Run the founding offer and referral program, including checking for referral abuse (for example, by comparing scrambled network identifiers).
6. Understand and improve 127: which resources help, where people get stuck, and how our tools perform. We may review AI conversations to fix problems, improve answers and enforce our Terms, with access limited to the people who need it.
7. Measure our advertising, only with your consent.
8. Keep 127 safe: prevent fraud and abuse, secure accounts, and enforce our Terms.
9. Comply with law, respond to lawful requests, and protect our rights and the rights of others.

We don't use personal information to make decisions about you that have legal or similarly significant effects (like credit or employment decisions). Circle applications are decided by Eli. An AI summary may help him review them, but it never makes the decision.

3. Eli's Playbook, the Idea Test and other AI tools

• What we send. When you use an AI tool, we send what you type, plus helpful context from your account (such as your stage, goal, obstacles, time and budget answers, 12-month goal, and roadmap progress), to our AI provider, Anthropic, PBC, to generate a response. Ideas you enter in the free Idea Test are sent the same way, and so is what an HQ workflow step, Ask 127, your AI team or your site chat needs when it uses AI (Sections 7B and 7C).
• How our AI provider handles it. Anthropic processes this information to provide the service to us. Under its commercial terms, Anthropic doesn't train its models on the content we send through our business account. It keeps API inputs and outputs for up to 30 days, longer only for content flagged for a possible breach of its usage policies (up to 2 years) or where the law requires.
• What we keep. We keep your most recent Playbook conversation (up to the last 40 messages) and your last 30 AI tool results in your account so you can come back to them. You can clear your Playbook conversation anytime with "New conversation." Everything is deleted when you delete your account.
• Challenge summaries. If you tick the box to be featured in the Day One Challenge, we may use AI to summarize your check-in answers so Eli can prepare the live debrief or demo night. Check-ins from people who didn't tick the box aren't used for this.
• Replies to wins posts. If nobody has replied to your wins post after about 12 hours, Eli's Playbook may write one short reply, labeled "Eli's Playbook (AI)". To write it, we send Anthropic only the text of that post. We don't send posts that are waiting for a check, were reported or are about health. You can turn these replies off in Settings, and remove one from your post.
• It's an AI. Responses are generated by AI, not written by Eli, and they can be wrong. Check facts in an AI response yourself before relying on them. See our Terms of Service.
• Be careful what you share. Don't put passwords, card numbers, government IDs, health information, or other people's private information into AI tools, beyond what an HQ workflow asks for.

4. How we share information

We don't sell personal information for money. We share it only as described here.

Service providers that process information for us under contract, only to provide their services to us. Some help with features we're still adding, and they get information only once that feature is on:

Advertising partners (only with your consent). If you accept advertising cookies, Meta and TikTok receive information about your visit and sign-ups through their pixels, and Meta may receive a hashed version of your email and first name when you submit a form. They use it to measure and improve our ads, and they may also use it under their own privacy policies, including to personalize ads. Some state laws call this "selling," "sharing" or "targeted advertising." You can refuse or withdraw consent anytime (see Section 5).

Other members. Your first name and posts on the wins board are visible to other logged-in members. In the Circle, members see each other's names, what they share on calls and in the private group, and call notes. If you sell on the Market, your maker page and listings are public: the name, handle, line, bio and photo you add, and your number of sales once it reaches 10. If you buy on the Market, its maker sees your first name and country with the sale, never your email or payment details.

If you choose to be featured. If you tick the box on a Day One Challenge check-in, Eli may show or read your first name and what you ticked (like your site, offer or walkthrough video) on a public Instagram Live such as demo night, in its saved replay, and in 127's Instagram stories and short clips. A site is shown as it is at your link, with anything on it. Anyone can see those, and Instagram handles them under its own policies. You can change your mind before the live by emailing us; after it airs, we stop using it in new posts but can't recall what was already shared.

The wall. If you ask us to show a site or win on 127's public wall, anyone can see it there, with your first name, or your first name and business name if you chose that. Take it down anytime from Progress or by emailing hello@127group.io, and it comes off right away. We can't recall copies others already made.

AI apps you connect. If you add your HQ AI link to an AI app such as Claude or ChatGPT, we share the information Sections 7A, 7B and 7C list with the company behind that app whenever the app asks for it, because you told us to. That company handles it under its own terms and privacy policy.

Accounts you connect to HQ. When you connect an account (like Stripe, Shopify, Notion, an ad account, or your own account with a Studio company like Higgsfield), we read from it, send it what you ask HQ to, and write to it when you OK it, on your behalf. Those companies work for you under your own terms with them, and what they do with your data is up to their policies and your settings there.

Business search (First 25 and HQ workflows). First 25, and HQ workflows that find businesses (like the gym video pack), find them through OpenStreetMap: Tracestrack finds the businesses and LocationIQ finds the city. We send these services only the business type and city you search for, from our server, not your name or email. Your list also holds public information about each business, from OpenStreetMap and from the business's own website, which we read once.

Your referrer. If you join through a member's referral link and confirm your email, we tell that member someone joined with their link, and we may include your first name. If you start a paid plan, they also see whether your sign-up has earned them a free month (Membership Terms Section 5A), never your email or payment details.

Legal and safety. We may disclose information if required by law or legal process, or if we believe in good faith that it's needed to protect the rights, property or safety of 127, our members or others, or to investigate fraud or abuse.

Business transfers. If 127 is involved in a merger, acquisition, financing or sale of assets, information may transfer as part of that deal, subject to this Policy.

With your permission. For example, if you sign a testimonial release, we'll share what you agreed to.

5. Cookies, pixels and your ad choices

We use a small number of cookies and browser storage items that the Service needs to work, plus cookieless analytics. Advertising pixels (Meta and TikTok) load only after you click "Accept" in our cookie banner. They never run inside the member app.

• You can change your choice anytime with "Cookie settings" in the site footer.
• Global Privacy Control and Do Not Track: if your browser sends either signal, we treat it as a "no" to advertising cookies and pixels for that browser, and we don't ask again.
• You can also adjust ad settings in your Meta and TikTok accounts.

The full list of cookies and storage items is in our Cookie Notice.

6. Emails and texts

• Account emails (confirmation, receipts, renewal and billing notices, cancellation confirmations, security alerts) are part of the Service and go to everyone with an account. If you buy a pack, you get its receipt and private link, with or without an account, and no marketing emails unless you opt in.
• HQ's check-ins (the morning pulse and the Monday, weekly and monthly reads) go only to members who turn each one on, until they turn it off (Section 7A). They're service emails, so they come even if you've opted out of marketing emails, and they never include offers.
• Marketing emails (founder emails, the weekly digest, launch news, offers) go only to people who opt in. Unsubscribe with the link in any email or in Settings. We process unsubscribes promptly, within 10 business days at most.
• Text messages: if we offer texts and you opt in, you can reply STOP to any text to stop.

7. Recorded calls, Founder's Circle calls and gatherings

Founding members' call. The founding members' call with Eli (December 1, 2026) is recorded and the recording is shared only with founding members in the Library. You can keep your camera and microphone off and ask questions in the chat if you'd rather not appear in it.

Founding Five. We use your application and hello video only to pick the five. At the start of each session we ask whether we can record it on Zoom, and whether an AI note-taker (currently Granola) can transcribe it for your recap. We do each only if everyone in the session says yes, out loud, and you can say no any week. You can also ask to go off the record anytime. Transcripts are seen only by the people at 127 who prepare the recap, recordings stay on Eli's computer, and both are deleted 90 days after each session. Recaps go only to the five. We use a clip, video or story of you in our posts, emails or website only after you OK that piece, and in a paid ad only if you say yes to that ad, and each one says you got four group sessions with Eli for sharing your build. You can ask us to stop using a piece anytime: we'll stop using it in anything new and take it down from our own accounts, website and emails within 7 days.

Founder's Circle. Circle calls are transcribed by an AI note-taker (currently Granola) to prepare a written recap. We don't keep video or audio recordings, and the optional open table after the call and anything said off the record aren't transcribed. We announce the note-taker at the start of every call. Transcripts are seen only by the people at 127 who prepare the recap and are deleted after 90 days; recaps are shared only with current Circle members and kept while the Circle runs. We don't use them in marketing without the written permission of everyone identifiable. Gatherings aren't recorded, and we ask before using identifiable photos of you in marketing. See the Founder's Circle Member Agreement.

7A. HQ and connected accounts

HQ is the optional workspace where Builder and Founder's Circle members track and run their business.

What HQ keeps. The numbers you type in or your connections send, week by week (posts, outreach, reach, visits, leads, replies, sales, revenue and up to 6 numbers you name), plus your North Number, targets, weekly calls and notes, and your latest Read my week feedback. We keep the most recent 104 weeks.

HQ's tools. Tools like the Conversion tracker, Profit and break-even and Cash runway keep what you enter in them, such as funnel counts, prices and costs, and the cash you expect in and out, to work out your results. They don't use AI: we don't send what you enter to our AI provider or share it through your AI link. You can export a tool's entries as a CSV anytime, and Start over deletes them. If you add a bank file to the money overview, your browser reads it and adds it up: we keep only the month totals, never the rows, and the rules you set to sort rows stay in your browser. Some tools hold details about people you add, like a client's first name and how you reach them in Clients and sessions or on a quote, and the labels and answers in the interview board. We keep them for you as your service provider (Section 7B) and never contact those people or use their details for anything else. If you share a quote by link, anyone with the link can open it until you turn the link off or it expires.

Nudges, marks and accounts you compare with. HQ uses your own activity to pick one line a day and to award marks and levels, and keeps your settings for them (voice, quiet hours, posting goal) and the marks you've earned. If you add up to 3 accounts to keep pace with, HQ keeps each one's handle, platform and one post count a week for 12 weeks, and shows them only to you. You type the count in. Where HQ offers it, the count can instead come from Meta for a professional Instagram account, or from a screenshot you add, which our AI provider reads for the number and we don't keep. Remove an account and its counts are deleted.

What your connections send us, and what we keep. HQ adds connections one at a time, so each row applies once HQ offers that connection.

Your customers' details. For your weekly totals, we read your customers' details only in memory and discard them as soon as the totals are calculated; they never go into our database or our logs. When you run a workflow that needs order or customer details (like a note to last month's buyers), that run holds what it used for 180 days, as Section 7B explains, and our AI provider gets names and the facts the task needs, never email addresses or phone numbers. Please send only numbers to your 127 link.

Your customers' information stays yours. When it passes through HQ, we handle it on your behalf and only to provide HQ to you: your totals and the workflows you run. We don't sell or share it, contact your customers on our own, use it for advertising or to train AI models, or combine it with other information. If you bought from a business that uses 127 and have a question about your information, ask that business: we keep its customers' details only in the workflow runs it starts and the leads it saves (Section 7B).

Who sees your HQ. Your HQ is private to you. We don't show it to other members or use it in marketing. People at 127 look at a member's HQ only to help when you ask, to fix a problem, or to enforce our Terms. We record when you use HQ (for example, that you saved a week or connected Stripe), never your amounts, and we measure HQ use with counts, such as how many members logged a week.

Read my week. AI writes only two parts of Read my week, and only when they appear. For written feedback from Eli's Playbook, we send our AI provider your last 12 weeks of HQ numbers, your weekly calls and your notes, as Section 3 describes. For a "What stood out" line, we send only this week's and last week's activity counts (messages sent, replies, calls booked and yeses, by type of business and time of day), never your sales or revenue, or your leads' names, contact details or messages. Your customers' details from Stripe or Shopify are never part of either. The rest of Read my week is counted on our servers, without AI.

Screenshots. If you use Fill it in for me, we send your screenshots to our AI provider once to read the totals, as Section 3 describes. We don't save the images or write them to our logs. Until you check the numbers and press Save week, we hold only what it read (the totals, the week they cover, the app it saw, like "Stripe dashboard", and short notes), for no more than 24 hours; once you save, they're part of your HQ numbers. Screenshots can show other people's details, so if you can, crop out customer names and contact details first. We tell the AI to report totals only, never anyone's personal details.

Monday check-ins. If you turn them on, we email you each Monday with last week's North Number, up to 3 more numbers and where your week leaks, plus a link to log the week. Our email provider sends it, so it carries those numbers. The link works without a login, for that week only, for 15 days, so anyone you forward the email to could see and change that week's numbers. Turn check-ins off from the link in any check-in email or in HQ.

The morning pulse and reads. If you turn them on, HQ sends you a short read of your own numbers each morning, week or month, by email or to Slack or Teams, each with its own switch. If you choose, it includes sales and ad spend from your read-only connections. In a Slack or Teams channel everyone in the channel can see it, so money stays out unless you turn it on there. It isn't sent to our AI provider.

Posts you schedule. When you OK a post in HQ's composer, we keep its text and its photos or video until it's posted or you cancel it, and delete the photos and video 7 days after. Instagram and Facebook fetch them from a private link that stops working once the post is out or cancelled.

Perks. Perks links to outside programs, like startup credits and grants. We don't tell those programs anything about you, and we never apply for you. If Perks sorts the list by your Brain (like your state, industry and stage), it does that on our servers, without AI. Filters you tap, like women-owned or veteran-owned, stay in your browser, and they're never sent to AI or used for ads. If you save programs to your account, we keep them, with the status and notes you add, until you remove them or delete your account. The application drafter works like our other AI tools (Section 3) and uses your Brain as Section 7C describes.

Your AI link. If you make an AI link and add it to an AI app, the app can read, whenever it asks:

• your first name and plan;
• your assessment choices (stage, business type, 90-day goal, biggest obstacles, weekly time, budget, channels, comfort with AI, how you learn best and interest in the Circle), your roadmap progress and next step, and your milestones;
• if you're in the Founder's Circle, what you're building, your Build Target, your North Number and your commitments from your last call;
• up to 12 weeks of HQ numbers, with your targets, weekly calls and notes, and whether your connections and Monday check-ins are on;
• if your plan includes them, passages from your Brain, your house rules, decisions and notes, your skills and your activity log;
• the playbooks your plan includes.

It can also log numbers, notes and decisions you tell it, run your skills, and work with HQ's workflows and Pipeline as Section 7B explains. Sends, posts and changes in your accounts that it gets ready wait for your OK in HQ. It never gets your email address, password, payment details or keys, or other members' information, and it sees customer details from your Stripe or Shopify sales only where a workflow you ran used them or you saved them as leads (Section 7B).

You set up that sharing, so the app's company (for example, Anthropic for Claude or OpenAI for ChatGPT) handles what it reads under your account's terms with that company, its privacy policy and your settings there, including how long it keeps your chats and whether it uses them to train its models. That's different from Section 3, where Anthropic works for us under our business terms and doesn't train on your content.

Keys and sign-ins. Keys, tokens and sign-ins you give us are encrypted (AES-256), never shown again after you save them, and never written to our logs. We use each only for what its card in HQ lists, even where it would allow more. HQ changes something in an account only when you tap OK in HQ for that change, and it never moves money out of your accounts, except a refund to your own customer that you OK. An OK on HQ's card in Slack or Microsoft Teams, from the account you linked in HQ, counts as an OK in HQ. If we believe a key you gave us may have been exposed, we'll tell you promptly so you can replace it.

Servers you add. If you add your own MCP server or connect an app you host yourself, HQ sends it the inputs for the tools you use, and whoever runs that server handles them under your arrangement with them, not this Policy. What it returns goes to our AI provider as part of the task (Section 3). Each call is in your Activity log, and removing a server deletes its saved sign-in.

Disconnecting and deleting.

• Disconnect a connection in HQ, under Connections, and we delete its saved key or sign-in right away (for Shopify, also your store address and the order ID numbers). The numbers already counted and the docs you imported stay until you delete them. Delete the key in that service too, or remove 127's access in its settings.
• Turn off or replace your 127 link, and the old link stops working at once. Turning it off also disconnects Shopify, which sends to it.
• Turn off or replace your AI link, and the old link stops working at once. What your AI app already read stays in your chats there until you delete them in the app.
• If your paid plan ends (a pause doesn't count), your 127 link and AI link stop working, Monday check-ins stop, and we delete your saved keys and sign-ins 30 days later. Your numbers stay with your account in case you come back.
• Delete your account, and everything HQ keeps is deleted with it.
• To delete your HQ numbers but keep your account, email us (Section 8).

7B. HQ workflows and your clients' information

HQ's workflows plan your work, write drafts and make files for your business, and its Pipeline keeps your leads and clients. Much of what's in them is about other people: your clients and leads, the contacts you import, docs in your Brain, what your connections bring in and chats on your site. Here's what we keep and how we handle it.

What HQ keeps.

• Runs: what you enter to start a workflow (like a client's first name, a household's size or contacts you paste in), what each step made (plans, drafts, lists and files) and a log of the run.
• Your Pipeline: each lead or client you add or a workflow finds, with their name and business, the ways to reach them you save (email, phone, Instagram, website), your notes, the drafts for them, what they replied and the stage they're at.
• Your Library, repeats and Inbox: files you upload (like a contacts export) and files your workflows save (like a plan to print); the answers a repeat reuses, including a repeat you save as a skill; and Inbox cards, which hold a title and a short note.
• Your business details: what HQ knows about your business to fill in workflows and your emails (like your offer, price, area and mailing address), and small facts a workflow saves for next time (like which dishes a client had last week).
• Wins you log: what happened, a short note, the lead it was about, and who you let see it.
• HQ's tools: the clients and sessions, quotes and interview notes you add (Section 7A).

Your clients' information stays yours. We handle what you keep about your clients and leads as your service provider: only on your behalf and only to provide HQ to you (Terms Section 13C). We never contact them on our own. HQ writes drafts, and you send each one yourself, or, where you've connected an account that can send, HQ sends it from your account when you tap OK. The one exception is your site chat, which answers people who write to it on your website (Section 7C). We don't sell or share their information, use it for advertising or to train AI models, or combine it with information from other members. If you're the client or lead of a business that uses 127, that business decides what it keeps about you, so ask it first. If you write to us, we'll pass your request to that business.

Who sees it. It's private to you. We have no screen that shows a member's runs, Pipeline or Library, and people at 127 look at them only to help when you ask, to fix a problem or to enforce our Terms. For example, if we review an account's age, we see the words that started the review, which can include what was typed into a workflow. A win you let us share reaches our team with the name you chose. Leave your client's name out of it: we never publish your clients' names or details.

What goes to our AI provider. When a workflow step uses AI, or Do my day, call prep or Monday's card writes a draft, we send Anthropic what that step needs, as Section 3 describes. For a lead, that's usually their name, business, public links and what a workflow noted about them, your note, their last reply and their stage. Do my day, call prep and Monday's card leave out the email addresses and phone numbers you save. A workflow that reads images you add, like screenshots, sends those too.

Health details in two workflows. The personal training workflow keeps only whether a client's PAR-Q+ says Go, Hold or Not done yet, the date they filled it in and when to redo it. It starts in HQ only, and the result stays out of your Pipeline, your AI link and our AI provider. The meal prep workflow keeps foods to leave out of a client's meals, which can include allergies, without saying which, and plans the menu without AI. Keep full health forms and allergy details in your own records.

Your AI link. If you add your AI link to an AI app, the app can also list and start your workflows (except ones that start in HQ only), read a run's progress, drafts and results, read and answer your Inbox, and read and move the leads in your Pipeline (their name, business and stage, and the start of your note). Your files stay behind your HQ login. What the app reads, including your clients' and leads' details, goes to the app's company, as Section 7A explains.

How long we keep it, and deleting it.

• A run is deleted 180 days after it ends, with its Inbox cards. Delete this run deletes it sooner, with the files it saved, but not what it added to your Pipeline or a repeat's copy of its answers.
• Delete this lead deletes a lead from your Pipeline: its details, notes, drafts, the reply it sent and its history, plus the drafts and answers HQ wrote for it (with any reply you pasted) and what workflows saved under its name. Its name comes off your wins. Runs you started from a workflow's page, like a list of businesses, keep their results until you delete those runs.
• Delete files in your Library, repeats and wins in HQ anytime.
• For anything else, email us (Section 8). We'll do it promptly.
• If your paid plan ends, your HQ work stays with your account in case you come back. Repeats stop running but stay saved.
• Delete your account, and all of it is deleted.

7C. Your Brain, Ask 127, AI team, site chat and Studio

Where your plan includes them, HQ keeps your business's documents and rules, answers and acts for you in chat, runs AI helpers, answers visitors on your website and makes media. Here's what each keeps and where it goes.

Your Brain. Docs you upload or type (like PDFs, Word files, spreadsheets and notes), pages you bring in from Notion or an Obsidian vault, your house rules (your principles, voice and how you do things), decisions and numbers you log, and facts HQ saves for next time. We keep each doc's text, not the file you uploaded, plus an index on our own servers that HQ uses to find the right passages. From an Obsidian vault we keep the notes' text, tags and links, not its other files. If a doc shows a full card or Social Security number, we keep only its last 4 digits. Where HQ searches your Brain by meaning, not just by matching words, we send the text of your docs, and what HQ is searching them for, to Voyage AI (part of MongoDB), which turns it into numbers that capture its meaning. We keep those numbers with each doc and delete them with the doc or your account. Voyage processes the text only to do this for us and doesn't train its models on it.

Drafting your Brain from your website. If you ask HQ to draft your profile, offer and voice from your website, we read the one public page you give us, once, and send its text to our AI provider to write the drafts. We don't keep the page, and nothing goes into your Brain until you approve or edit each line. We don't read Instagram or other social profiles: paste your bio, and HQ drafts from that.

What goes to our AI provider. When a workflow, Ask 127, a helper or the Perks drafter needs your Brain, we send Anthropic the passages that fit the task, never your whole Brain, as Section 3 describes. Your house rules go with every AI request HQ makes for you. Your docs can hold other people's information, and we handle it as Section 7B describes.

Ask 127 and your AI team. We keep your chats with Ask 127 and what your helpers did. With each message, we send Anthropic your recent chat, your profile and house rules, the Brain passages that fit, your logged numbers, the titles of your recent runs and Inbox cards, and how many leads you have at each stage, without their names. When Ask 127 makes a plan for you, we also send Anthropic the titles of the 127 workflows, prompts, templates and other library items that fit what you asked, and the names of the apps you've connected or could connect, without anything from inside them. A step that uses an app's data reads it when it runs, as Section 7A describes. A workflow or helper sends what its task needs, as Section 7B describes, leaving out email addresses and phone numbers. Ask 127 suggests actions and takes each one when you tap OK. Anything they'd send, post, publish, charge, spend, delete or change in an account you've connected waits for your OK in HQ.

Talking to HQ. When you tap Talk in HQ, your browser's own speech service turns what you say into text and reads HQ's answer aloud. Your browser may do this on its maker's servers (Chrome usually sends your voice to Google), and that company handles it under its own terms and privacy policy. We never get the recording, only the text, and we handle that like anything you type.

Your activity log. HQ records what you approved, and what Ask 127, your AI team, your schedules, your AI link and your connections did: who or what acted, when, in which account and on which record. For your AI link, it records which tool was used, not what was sent. It doesn't copy the messages, docs or contact details themselves, so a lead you delete shows as deleted.

Your site chat. If you add it to your website, it saves your visitors' messages and its answers for you, with the page they wrote from and any contact details they choose to leave for a reply (those also go to your Pipeline). It answers only from the docs and business details you mark public. We run it for you as your service provider: the chats are yours, we send them to Anthropic only to write the answers, and we don't use them for anything else or combine them with other members' information. If you chatted on a business's website and have a question about your chat, ask that business; if you write to us, we'll pass your request on.

Studio. When you make images, video or voice, or captions from a recording, we send your prompt and the photos, video, audio or script you add to the company that makes it (Section 4 names them), get the result back and save it in your Library. Through 127's account, each works for us under our contract with it, as Section 4 describes, and doesn't train its models on what you send. If you connect your own account with one of them, it works for you under your own terms with it, including what it does with what you send (Section 4). If you make a voice or a look that copies you, the company makes it from the recordings or photos you add, and we keep it so you can use it again. Deleting it removes it from HQ and from that company. It's also deleted with your account, or 30 days after your paid plan ends.

Back office. If you import bank or Stripe statements, we keep each line's date, description, amount and category, and hide full account and card numbers except the last 4 digits. We send Anthropic the lines it needs to suggest categories. Invoices and payment links are made in your own Stripe account when you OK them; we keep their number, amount and status, and your clients' card details stay with Stripe.

Ads desk. If you connect an ad account (Meta, Google Ads or TikTok), we read your campaigns, ads and their results, like spend, clicks and cost per result. These are totals: ad platforms don't tell us who saw your ads. When you OK it, HQ creates paused ads and makes the changes you approve. We use your ad account's data only for you, never for another member or pooled into benchmarks. HQ doesn't upload your customer lists or send your customers' activity to ad platforms.

How long we keep it, and deleting it.

• Brain docs, house rules, decisions and saved facts: until you delete them or your account. Delete this doc deletes its text and index entries, and Delete my Brain docs deletes them all. A run that used a passage keeps its copy until the run is deleted (Section 7B).
• Ask 127 chats: your last 60 messages, until you start a fresh chat, and never more than 180 days after the last one.
• Your activity log: 400 days, then deleted.
• Site chats: 180 days after the chat, or sooner if you delete them.
• Files in your Library, like Studio results, filled templates, tools and site files, and imported statements you save: until you delete them or your account, even after a paid plan ends.
• Bookkeeping entries: until you delete them or your account.
• Ad results HQ keeps: until you disconnect the ad account or delete your account.
• A voice or look that copies you: until you delete it or your account, or 30 days after your paid plan ends.
• Delete your account, and all of it is deleted.

7D. Rules from the platforms you connect

When you connect an account by signing in, that platform's rules for apps like HQ also apply to what we do with its data. Here's what they add to this Policy.

• Only for your HQ features. We use platform data only for the HQ features you use. We never use it to train or improve AI models, for ads, or for any other member, and we never sell it. When a feature needs AI, we send Anthropic only what that task needs, and Anthropic doesn't train on it.
• No one at 127 reads it unless you ask us to for help with it, for security, or when the law requires.
• We keep it only as long as each platform allows. Some allow a day or less. What you made from it, like a draft or a plan, stays yours.
• Removing access. Disconnect any platform in HQ, under Connections. We revoke our access there, delete the saved sign-in right away, and delete what HQ got from it within 30 days, apart from what you made from it.
• Google. 127's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can also remove 127's access in your Google Account.
• YouTube. HQ uses YouTube API Services. By connecting YouTube, you agree to the YouTube Terms of Service, and Google's Privacy Policy covers what Google collects. We keep data from YouTube no longer than 30 days unless we refresh it. When you disconnect YouTube in HQ, or remove our access in your Google Account, we stop using it, revoke our access and delete what we got from it within 7 days.
• Deleting what HQ got from Facebook or Instagram. Disconnect Facebook or Instagram in HQ, under Connections, or remove 127 in your Facebook settings under Apps and Websites. We delete the saved sign-in right away and what HQ got from that account within 30 days, apart from what you made from it. You can also email hello@127group.io with the subject "Delete my Facebook data", and we'll do the same and confirm by email.
• Slack. When you remove HQ from your Slack workspace, we delete what HQ got from Slack within 14 business days.
• X. Posts you OK in HQ go to X from your account, under X's own terms and privacy policy. HQ doesn't read your X posts, followers or messages.

7E. Life in HQ

Where your plan includes them, HQ's Life tools (like the food log, daily check-in, faith reading plan, budget, workout planner and week builder) keep what you enter only in your browser, on your device. We don't receive it: it never reaches our servers, our AI provider or anyone else, and we don't use it for ads or analytics. That also means we can't recover it if you clear your browser or change devices, so use Export in HQ to keep a copy. Anyone who uses this browser while you're signed in can see it. Clear Life data in HQ deletes it from this browser. Deleting your 127 account can't reach your device, so clear it first.

• Faith is off until you turn it on. Reading links open on Bible Gateway, which sees the passage you open, under its own privacy policy. Prayer and reading times you add to your calendar go into a file your browser makes and you save.
• Week builder times you add to your calendar go into a file your browser makes and you save.
• Food log and daily check-in are general wellness tools, not medical care.

8. Your rights and choices

Wherever you live, you can ask us to:

• Access the personal information we have about you, and get a portable copy;
• Correct information that's wrong;
• Delete your information;
• Opt out of targeted advertising and any "sale" or "sharing" of your information (use Cookie settings, or a Global Privacy Control signal);
• Withdraw consent you've given, such as for marketing emails or ad cookies.

How to ask. Delete your account anytime in Settings → Delete account. Change your email choice in Settings. For anything else, email hello@127group.io with the subject "Privacy request." We'll confirm your request by checking it comes from the email address on file, and we'll respond within 45 days (we'll tell you if we need up to 45 more). You can use an authorized agent; we'll ask for proof of their authority and may verify your identity directly.

Appeals. If we decline your request, you can appeal by replying to our decision with "Appeal" in the subject. We'll respond within 45 days. If you're unhappy with the outcome, you can contact your state attorney general.

We won't treat you differently for using your privacy rights. Some laws let us keep certain information even after a deletion request, for example records we must keep for taxes, to prevent fraud, or to honor your choice not to receive marketing.

What deletion removes. Deleting your account cancels any paid subscription immediately and removes your account, assessment answers, progress, worksheets, AI conversations and results, wins posts, Circle application and everything in HQ (Sections 7A and 7B) from our live systems, along with the waitlist, free-tool and Idea Test records linked to your email. We also ask Klaviyo to delete your profile. Stripe keeps payment records as the law requires, and we keep limited billing, consent and agreement records for as long as Section 9 says.

9. How long we keep information

Backups may keep copies for a short period until they're overwritten.

10. Security

We use reasonable safeguards for a business of our size: HTTPS everywhere, passwords stored only as salted hashes, payment data held by Stripe, secrets kept out of our code, rate limits and access limited to the people who need it. No system is perfectly secure. If a breach affects your personal information, we'll notify you as the law requires.

11. Children

127 is for people 18 and older. We don't knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us information, email hello@127group.io and we'll delete it. If we learn that a member is under 18, we close the account, refund every payment and delete their information. We keep only a short record that we did so: the dates, the reason, the refund details and a scrambled (one-way hashed) copy of the email address so it can't be used to sign up again, for 3 years. Members who teach or look after children may keep a child's first name, age and lesson notes in HQ for their own work; we hold them only for that member (Section 7B) and never contact the child.

12. Where we operate

127 is based in the United States and built for people in the United States. Our service providers process information in the United States and other countries. If you use 127 from outside the United States, your information will be processed in the United States, where laws may differ from those where you live.

13. State-specific notices

• California (CalOPPA). This Policy describes the categories of personal information we collect and the categories of third parties we share it with. You can review and request changes as described in Section 8. We treat Do Not Track and Global Privacy Control signals as described in Section 5. Third parties (Meta and TikTok) can collect information about your online activities over time and across sites only if you accept advertising cookies.
• California "Shine the Light." We don't share personal information with third parties for their own direct-marketing purposes.
• Nevada. We don't sell covered information as defined by Nevada law. You can still send an opt-out request to hello@127group.io.
• Consumer health data (Washington, Nevada, Connecticut and other states). Life in HQ doesn't send us consumer health data: the food log and daily check-in keep what you enter only on your device (Section 7E). We don't sell consumer health data. If a Life tool ever sends us any, we'll update this Policy and ask for your consent first.
• Other states. We're not currently subject to most state comprehensive privacy laws because of our size, but we offer the rights in Section 8 to everyone.

14. Changes to this Policy

If we make material changes, we'll tell you by email or in the Service before they take effect, and update the date at the top. We won't use information already collected in a materially different way without your consent where the law requires it.

15. Contact us

127 Group LLC · hello@127group.io (subject: "Privacy")