Legal

Privacy Policy

6 Seven Labs Pte Ltd · Effective 2026-07-22

6 Seven Labs Pte Ltd ("6 Seven Labs", "we", "us") builds and operates AI voice calling agents and a client portal for business clients. This policy explains what personal data we handle, why, where it is stored, how it is protected, and the rights you have under the Singapore Personal Data Protection Act 2012 ("PDPA"). It covers our marketing website (6sevenlabs.com), our client portal (app.6sevenlabs.com), and the calling service we operate for our clients. Capitalised terms such as Service, Agent, and Order Form have the meanings given in our Terms of Service.

1. What we collect

Client account data. When a business becomes a client we collect the account information needed to run the relationship: names, work email addresses, company details, sign-in records, and billing contact details. Payment card details are collected and held by our payment processor, Stripe; we do not store full card numbers on our systems.

Call data. The Service produces records of the calls it handles for each client: call logs, audio recordings, transcripts, and the analysis the Service generates from them (for example lead classifications and call summaries). This data is produced on behalf of the client the Agent belongs to.

Prospect contact data supplied by clients. Clients upload or provide the contact lists their Agents call: typically phone numbers, names, and company names. Clients own these lists and are responsible for having a lawful basis to call the people on them. We process this data on the client's instructions to deliver the Service.

Website enquiries. If you use the demo request form on our website we receive the name, email address, company, and message you submit, and we use them to respond to you.

2. Who controls the data

For client account data and website enquiries, 6 Seven Labs is the organisation responsible for the data. For prospect contact data and the call data generated from a client's campaigns, the client is the organisation that decides the purposes for which the data is used, and 6 Seven Labs processes it on the client's documented instructions as a data intermediary under the PDPA.

3. How we use personal data

  • To deliver the Service: placing and answering calls, recording and transcribing them, extracting lead information, and reporting in the client portal.
  • To operate accounts: sign-in, notifications, alerts, and support.
  • To bill for the Service through our payment processor.
  • To honour do-not-call requests: when a call recipient asks to stop receiving calls, the request is captured and added to that client's suppression list so the number is not called again for that client's campaigns.
  • To meet legal and accounting obligations.

We do not use the personal data we process for clients to train AI models. Agent behaviour is produced by written configuration. We have also disabled model-training data use within our AI voice platform through its data-use controls. If we ever propose to use personal data processed for a client to train an AI model, we will first give that client a specific written notice and obtain its agreement.

4. Where data is stored and processed

Client portal data (account records, call logs, recordings, transcripts, leads, and campaigns) is hosted on enterprise cloud infrastructure (AWS).

Voice calls are processed by our AI voice platform on secure cloud infrastructure. That platform stores call data, including recordings and transcripts, in the United States, and participates in recognised international data transfer frameworks. The copies of your call data shown in the client portal remain on our AWS infrastructure as described above.

Where personal data is processed outside Singapore, we take steps to ensure it receives a standard of protection comparable to the PDPA, as the Act requires.

5. How data is protected

  • Data is encrypted in transit and at rest.
  • Client data is isolated per tenant at the database layer, so one client's data is not visible to another.
  • Portal access is invite-only, with sign-in by one-time email codes; there is no self-service sign-up.
  • Administrative accounts on our infrastructure are protected with two-factor authentication.
  • A structured security review of the portal was completed before client onboarding, covering tenant isolation, access controls, and security headers, and all high- and medium-severity findings were remediated.

If a data breach affecting personal data we process occurs, we assess and notify affected clients and the regulator as required by the PDPA's data breach notification provisions.

6. How long data is kept

Transcripts, call records, and lead data are retained for the duration of the client's subscription. Call recordings are retained by default for 12 months from the call date, on a rolling basis, even while the subscription continues; a different recording retention period can be configured per client. When a subscription ends, whether by cancellation or non-payment, client data is retained for thirty (30) days from the date the subscription ends (during which the client may export it) and then deleted, except where the law requires longer retention or where data persists briefly in routine backups that age out on their own schedule. Billing and invoice records are kept as required for legal, accounting, and tax purposes.

7. Your rights under the PDPA

Under the PDPA you may:

  • Access: ask us for the personal data we hold about you and how it has been used or disclosed.
  • Correction: ask us to correct an error or omission in your personal data.
  • Withdraw consent: withdraw any consent you have given for the collection, use, or disclosure of your personal data, with reasonable notice.
  • Do Not Call: register your Singapore telephone number with the national DNC Registry, and ask during any call to stop receiving calls. Opt-out requests made on a call are captured and honoured through the relevant client's suppression list.

If your request concerns a calling list or call data belonging to one of our clients, we may refer the request to that client, since the client decides the purposes for that data. We will assist the client in meeting its obligations.

8. Cookies

Our marketing website (6sevenlabs.com) currently sets no cookies of its own and runs no analytics or advertising trackers. The site loads fonts and icons from third-party content delivery networks, which receive standard technical request data such as your IP address when the page loads.

Our client portal (app.6sevenlabs.com) sets cookies strictly for sign-in and session management. It does not use advertising cookies.

9. Contact for data matters

Our data protection contact: . General enquiries: .

10. Updates to this policy

We may update this policy from time to time. The current version, with its date, is published on this page, and material changes will be notified to clients by email or through the portal.