Privacy Policy

Last updated: May 25, 2026

Section 1

Who We Are

Sevenda is developed and maintained by Sevenda Lab (hello@sevenda.dev). For any privacy-related questions, please contact us at that address.

Section 2

Data We Collect

Sevenda collects the following data solely when you explicitly start a recording session:

  • Web history — URLs visited and page titles
  • User activity — click events, form submissions, keyboard interactions, and navigation events
  • Website content — DOM element identifiers, element text labels, and network request URLs with status codes

Sevenda does not collect personally identifiable information, passwords, financial data, health data, or geolocation.

Section 3

How Data Is Used

All collected data is used exclusively for generating BPMN 2.0 process diagrams and AI-powered functional insights.

  • Session events are stored locally using IndexedDB
  • When you click "Generate", events are sent to the Anthropic Claude API using your own API key
  • Settings are stored locally via chrome.storage.sync
Section 4

Data Sharing and Third Parties

Sevenda does not sell, rent, or share your data with any third party, with the sole exception of the Anthropic Claude API.

  • Anthropic receives only the session event data you recorded
  • No data is ever sent to Sevenda's servers
  • We do not operate any backend infrastructure
Section 5

Data Storage and Retention

  • All session data is stored locally using IndexedDB
  • API key and settings stored via chrome.storage.sync
  • You can delete all sessions at any time from the panel
  • Sevenda does not define a mandatory retention period
Section 6

Remote Code

Sevenda does not load or execute any remote JavaScript code. All extension code is bundled locally. Network requests are data API calls (JSON), not code execution.

Section 7

Permissions Justification

  • storage — save session data and settings locally
  • activeTab — identify the current tab when recording
  • scripting — inject content script to capture events
  • tabs — track tab lifecycle and segment sessions
  • host permissions (<all_urls>) — required because the user can record any website
Section 8

Your Rights

You can at any time:

  • View all recorded sessions from the Sevenda panel
  • Delete individual sessions or all data
  • Remove your API key from settings
  • Uninstall the extension to remove all local data

EU users have additional rights under GDPR. Contact us at hello@sevenda.dev for any such request.

Section 9

Children's Privacy

Sevenda is not directed at children under 13. We do not knowingly collect data from children.

Section 10

Changes to This Policy

We may update this Privacy Policy from time to time. Continued use after changes constitutes acceptance.

Section 11

Contact

Sevenda Lab — hello@sevenda.dev