7Towers

Privacy Policy

Last updated: July 2026

1. Introduction

7Towers ("we", "our", "us") operates a cloud-based network video recorder (NVR) platform at 7towers.io. This Privacy Policy explains what personal data we collect, how we use it, and your rights under applicable law, including the EU General Data Protection Regulation (GDPR).

2. Data We Collect

  • Account information: email address and password hash created during registration.
  • Payment information: billing details processed via PayPal. We do not store full card numbers or PayPal credentials — payment processing is handled entirely by PayPal.
  • Camera & video data: video streams and recordings from cameras you connect to the platform.
  • Usage data: log data such as IP addresses, browser type, pages visited, feature usage, and timestamps, collected automatically when you use the service.
  • Technical identifiers: device tokens and WireGuard VPN keys used to establish secure camera tunnels.

3. How We Use Your Data

  • To provide, operate, and maintain the 7Towers platform.
  • To authenticate your account and secure access to your cameras.
  • To process subscription payments and manage billing.
  • To detect and prevent abuse, fraud, and security incidents.
  • To improve the service through aggregated usage analytics.
  • To send transactional emails (account alerts, payment receipts). We do not send marketing emails without your explicit consent.

4. Data Storage & Security

All data is stored on servers provided by Hetzner Online GmbH, located in the European Union (Germany / Finland). Data in transit is encrypted with TLS 1.2+. Passwords are stored as salted hashes. Video streams are transmitted over encrypted WireGuard tunnels.

We implement industry-standard access controls and monitoring. No external parties have access to your video recordings other than Hetzner as our infrastructure provider.

5. Third-Party Services

  • PayPal: used for payment processing. When you make a payment, you interact directly with PayPal under their own Privacy Policy.
  • Hetzner: our infrastructure provider hosting servers in Germany (Falkenstein, Nuremberg), Finland (Helsinki), Singapore, and the USA (Hillsboro, OR and Ashburn, VA). NVR archive data (StorageBox) is stored only in EU data centers. Hetzner processes data as a data processor under a Data Processing Agreement with us.
  • Google (Analytics and Ads): used, with your consent, to understand site usage and measure advertising performance. See Section 6 (Cookies) for details.
  • Yandex Metrika: used, with your consent, to understand site usage. See Section 6 (Cookies) for details.
  • Meta (Facebook Pixel): used, with your consent, to measure advertising performance and show you relevant ads on Facebook and Instagram. See Section 6 (Cookies) for details.

We do not sell your personal data. We share data only with the providers listed above, and only to the extent needed to operate the service or, for Google, Yandex, and Meta, after you have given consent via the cookie banner.

6. Cookies

We use strictly necessary cookies to maintain your authenticated session and remember your language preference. These are always set and are required for the service to function.

With your consent, we also use analytics and advertising cookies. Analytics cookies (Google Analytics and Yandex Metrika) help us understand how visitors use our site. Advertising cookies (Google, Meta) let us measure the effectiveness of our advertising campaigns and may be used to show you relevant ads on other sites, including Facebook and Instagram. These are only set after you accept via the cookie banner shown on your first visit.

If you decline, no analytics or advertising cookies are set and no such data is sent to Google, Yandex, or Meta. You can review this choice at any time by clearing your browser's local storage for this site, which will show the banner again on your next visit.

7. Data Retention

Account data is retained for as long as your account is active. Video recordings are retained according to your subscription plan. When you delete your account, all personal data and recordings are permanently deleted within 30 days.

8. Your GDPR Rights

If you are located in the European Economic Area, you have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your personal data ("right to be forgotten").
  • Restriction: request that we limit processing of your data.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interests.

To exercise any of these rights, contact us via our contact form. We will respond within 30 days.

9. Children's Privacy

7Towers is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a notice on the platform. Continued use of the service after the effective date constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, please contact us via our contact form.

12. Governing Language

This Privacy Policy is written in English. Translations into other languages are provided for your convenience. In the event of any conflict or inconsistency between the English version and a translated version, the English version shall prevail.

Privacy Policy — 7Towers