1. Who we are
This notice is issued by ("Seventh Axis", "we", "us"), based in Kuala Lumpur, Malaysia. We are the data user responsible for the personal data described here under the Personal Data Protection Act 2010 ("PDPA"), as amended by the Personal Data Protection (Amendment) Act 2024.
Questions or requests about your data: .
2. What we collect
When you join the pilot waitlist
Your name, work email, company, industry, number of robots on site, state, and anything you tell us about the task you want to automate.
When you book a meeting
Your name, work email, company, phone number if you give it, the meeting type, your preferred date and time, and any notes.
When you use the Studio demo
The instructions you type are sent to our planning service to produce a robot plan. If you use the microphone, your browser's own speech service (for example Google in Chrome or Apple in Safari) turns speech into text; we never receive audio. We don't store your instructions after the plan is returned.
When you chat with Ask Axis
Your messages are sent to Google's Gemini service to write the replies, and kept in your browser for the rest of the visit so the conversation continues across pages. We don't store the conversation. If you choose to leave your name and email in the chat, we store them as a pilot enquiry together with your last few questions.
Technical data
Like any website, our servers receive your IP address and basic browser details. We use the IP address briefly to limit abuse of our forms and the demo (the counter expires after 10 minutes). Our hosting provider keeps short-lived access logs for security.
Cookies and similar technologies
See our cookie policy. We don't use advertising or cross-site tracking cookies.
3. Why we use it
- To contact you about the pilot programme and arrange meetings you request.
- To run, secure and fix the website and the Studio demo.
- With your consent, to understand which pages are useful through privacy-friendly analytics.
- To meet legal obligations and respond to lawful requests from authorities.
We rely on your consent, which you give by ticking the box on our forms, and on what is necessary to take the steps you ask of us. Giving us your details is voluntary, but without a name and email we can't reply to you.
4. Who we share it with
We don't sell personal data. We share it only with service providers that process it for us, under contract:
| Provider | What they do | Where |
|---|---|---|
| Vercel Inc. | Hosts the website and runs our server functions | United States and global edge network |
| Upstash, Inc. | Stores waitlist sign-ups and meeting requests | The region we select for the database |
| Google LLC (Gemini API) | Turns Studio instructions into robot plans and writes Ask Axis replies | United States and other Google locations |
Please don't type personal or confidential information into the Studio. Depending on the service tier we use, Google may use content sent to the Gemini API to improve its products, as set out in Google's terms.
5. Transfers outside Malaysia
Our providers process data outside Malaysia. We choose providers with appropriate security and contractual safeguards so that your data is protected to a standard comparable to the PDPA, as section 129 of the Act requires.
6. How long we keep it
- Waitlist and meeting details: until you ask us to delete them, or 24 months after our last contact with you, whichever is sooner.
- Rate-limit counters based on IP address: 10 minutes.
- Studio instructions: not stored by us once the plan is returned.
- Your cookie choice: in your browser until you clear it.
7. Your rights
Under the PDPA you can:
- ask for a copy of the personal data we hold about you, and ask us to correct it;
- withdraw your consent, or ask us to stop or limit processing, including for direct marketing;
- ask us to transmit your data to another data user in a commonly used format, where technically feasible;
- complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi) if you're unhappy with how we handle your data.
Email us to use any of these rights. We'll reply within 21 days, as the PDPA requires.
8. Security and breaches
We limit access to people who need it, use encrypted connections, and keep credentials out of our code. If a data breach is likely to cause significant harm, we will notify the Commissioner and, where required, the people affected, as the amended PDPA requires.
9. Children
Our website is meant for businesses and isn't directed at anyone under 18.
10. Changes
We'll update this notice when our practices change and show the new effective date at the top. Significant changes will be highlighted on the site.
11. Language
This notice is provided in English and Bahasa Malaysia. If the two versions differ, the English version prevails.