Privacy Policy

Last updated: March 25, 2026

70x7 ("we," "us") is operated by Nicholas Crabill. This policy explains what information we collect when you visit web.nac70x7.com or receive communications from us, how we use it, and what rights you have over it.

1. Information We Collect

We collect information in two ways: directly from you and automatically through the tools we use to run the service.

Directly from you:

Name and email address when you sign up or contact us
Business name and website URL when you request a preview site
Payment information (processed by Stripe — we never see or store your card number)

Automatically:

IP address, browser type, device type, and pages visited via Microsoft Clarity
Session recordings and heatmaps via Microsoft Clarity (see Section 4)
Basic access logs via Vercel (our hosting provider)

We do not collect sensitive personal information such as Social Security numbers, health data, or financial account credentials.

2. How We Use Your Information

To deliver and improve the 70x7 website design service
To process payments and send receipts
To communicate with you about your project (onboarding, updates, support)
To send cold outreach to prospective business clients (see Section 7 on CAN-SPAM)
To understand how visitors use our website so we can improve it

We do not sell, rent, or trade your personal information to third parties.

3. Third-Party Services

We use the following third-party services to operate 70x7. Each has its own privacy practices.

Stripe — Processes all payments. Stripe may collect your name, email, billing address, and payment card details. Stripe is PCI-DSS Level 1 certified. See stripe.com/privacy.
Microsoft Clarity — Records session replays, generates heatmaps, and tracks behavioral analytics on our website. Clarity may collect mouse movements, clicks, scroll depth, and page visits. See Microsoft's Privacy Statement.
Vercel — Hosts our website on a global CDN and edge network. Vercel processes request logs including IP addresses. See vercel.com/legal/privacy-policy.
Instantly.ai — Used to send cold outreach emails to prospective business clients (HVAC, roofing, remodeling contractors). Contact information used for outreach is sourced from public business directories. See instantly.ai/privacy.
Gmail (Google) — Used to send onboarding and project communication emails to active clients. See Google's Privacy Policy.

4. Cookies and Tracking

Our website uses a limited number of cookies:

Stripe cookies — Set when you interact with a payment form. Required for fraud prevention and payment processing.
Microsoft Clarity cookies — Set when you visit the site. Used to identify sessions for replay and heatmap analysis. Clarity does not use this data for advertising.

We do not use advertising cookies, tracking pixels, or cross-site tracking. We do not participate in behavioral ad networks.

You can disable cookies in your browser settings. Disabling Stripe cookies may prevent payment forms from working correctly.

5. Data Retention

Client data (name, email, project files) — Retained for the duration of the client relationship plus 3 years for tax and legal record-keeping purposes.
Payment records — Retained by Stripe per their data retention policies; we retain transaction records for 7 years to comply with financial record-keeping requirements.
Clarity session data — Retained per Microsoft Clarity's default retention period (currently 13 months).
Cold outreach contact data — Removed from our outreach lists upon unsubscribe request or after the outreach campaign concludes.

6. Your Rights (CCPA — California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights:

Right to Know — You may request a summary of the personal information we have collected about you and how we use it.
Right to Delete — You may request deletion of your personal information, subject to certain exceptions (e.g., we must retain payment records for tax compliance).
Right to Opt Out of Sale — We do not sell personal information. There is nothing to opt out of.
Right to Non-Discrimination — We will not discriminate against you for exercising any of these rights.

To exercise your rights, email nicholas@nac70x7.com with the subject line "CCPA Request." We will respond within 45 days.

7. CAN-SPAM Compliance

When we send commercial email — including cold outreach to prospective clients — we comply with the CAN-SPAM Act:

Every email identifies 70x7 and Nicholas Crabill as the sender
Our physical mailing address is included in all commercial emails
Subject lines accurately describe the content of the email
Every email includes a clear and functional unsubscribe mechanism
We honor unsubscribe requests within 10 business days and do not send further commercial email to that address

To unsubscribe from outreach emails, use the unsubscribe link in any email or send a request to nicholas@nac70x7.com.

8. Children's Privacy

Our service is intended for business owners and is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected information from a minor, contact us immediately and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify active clients by email. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

10. Contact

Questions, requests, or concerns about this privacy policy? Email nicholas@nac70x7.com.

70x7 is operated by Nicholas Crabill, based in the United States. This policy is governed by the laws of the United States.