1. Scope and operator
This Privacy Policy applies to the websites, browser games, applications, account system, list-building tools, and other online services operated by Record7 that link to this Policy (collectively, the “Services”). Record7, located in Fresno, California, United States, is the operator responsible for the practices described here.
This Policy does not govern a third party’s own service, website, or privacy practices, even when that third party integrates with or links from a Service.
2. Information we collect
| Category | Examples | Why we collect it |
|---|---|---|
| Account and profile | Name, username, email address, password hash, account ID, avatar, preferences, verification status, and age or eligibility confirmation. | Create and secure accounts, sign users in, personalize the Services, and communicate about an account. |
| Social sign-in | When a user chooses Facebook Login or another provider: provider user ID, name, email address, profile image, login token, and other information the user and provider authorize. | Authenticate the user, link an account, and provide the requested social-login feature. We do not request more social-profile information than needed for the disclosed feature. |
| Game and service activity | Scores, rankings, game state, room ID, moves, opponents, display name, achievements, list projects, searches, exports, credit usage, and feature interactions. | Operate games and tools, save progress, display leaderboards, prevent cheating and abuse, and improve performance. |
| Device and network | IP address, browser and device type, operating system, referring page, timestamps, cookies, local storage, approximate location derived from IP, error logs, and security events. | Deliver and secure the Services, remember settings, diagnose problems, measure usage, and prevent fraud or abuse. |
| Transactions and subscriptions | Plan, order, purchase amount, billing status, transaction ID, credits, and limited payment-related metadata. Payment-card details are generally collected directly by the payment provider rather than stored by us. | Process purchases, administer subscriptions and credits, maintain accounting records, and handle billing support. |
| Communications | Messages to support or privacy, survey responses, feedback, dispute information, and attachments a user chooses to send. | Answer requests, resolve issues, improve the Services, and keep required records. |
| Business and professional records | Business or professional name, trade, role, license number and status, start date, business address, service area, phone, email, website, ratings, public reviews, directory listing, and source or update information. | Provide TheBigList’s directory, lead-list, license-list, data-refresh, email-discovery, and export features; verify and update records; honor suppressions. |
| Derived information | Likely business category, service area, duplicate-record match, email type, list relevance, risk signals, and usage statistics inferred from the information above. | Organize records, improve search and matching, identify abuse, and understand feature performance. |
Information actually collected varies by Service and by the features a user chooses. We do not ask users to submit Social Security numbers, full payment-card credentials, health records, or similarly sensitive data through ordinary account, game, or list-building features.
3. Sources of information
We may collect information:
- directly from users, customers, account holders, and people who contact us;
- automatically from browsers, devices, servers, cookies, local storage, and security tools;
- from login, payment, hosting, analytics, email, and other service providers used to operate the Services;
- from public government records, including professional, contractor, and real-estate licensing records;
- from public business websites, public directories, maps and places services, widely distributed media, and other sources we reasonably believe may lawfully provide the information; and
- from customers who import, search, merge, or otherwise submit business records to a feature.
4. How we use information
We use information as reasonably necessary to:
- provide, maintain, personalize, and improve the Services;
- create and secure accounts and provide email/password or social login;
- run games, multiplayer rooms, leaderboards, scoring, saved progress, and community features;
- build, refresh, search, organize, and export business or professional lists;
- process subscriptions, purchases, lead credits, and email-discovery credits;
- send transactional, security, support, and legally required communications;
- monitor performance, fix errors, prevent fraud, cheating, spam, scraping, and misuse;
- enforce our Terms, protect rights and safety, respond to legal process, and comply with law; and
- create aggregated or deidentified statistics that do not reasonably identify an individual.
5. How we disclose information
We may disclose information to the following categories of recipients for the purposes described above:
- Service providers and contractors that support hosting, databases, security, communications, analytics, social login, payment processing, customer support, and other operations.
- Other users when a feature is designed to be public or shared, such as a display name, avatar, score, leaderboard position, multiplayer-room activity, or a business/professional record included in a customer’s authorized list or export.
- Integration providers when a user directs us to connect an account or feature, including Facebook Login and payment providers.
- Authorities and affected parties when reasonably necessary to comply with law or legal process, enforce agreements, investigate misuse, or protect people, property, rights, and the Services.
- A successor or transaction participant in connection with a financing, merger, acquisition, reorganization, sale of assets, or similar business transaction, subject to appropriate protections.
TheBigList business and professional data
TheBigList provides customers access to business and professional directory or lead information. A record may identify a sole proprietor, license holder, real-estate professional, contractor, or other individual acting in a business or professional capacity. Depending on the record, source, recipient, and applicable law, providing this access could be treated as a “sale” or other regulated disclosure of personal information. We provide a direct method to opt out of regulated sale or sharing and to request record suppression through our Privacy Choices & Data Removal page.
Publicly available information may be treated differently under some privacy laws. Even when a legal deletion right does not apply to a public record, we will review a reasonable correction, suppression, safety, or opt-out request. We may retain the minimum information needed on a suppression list so a removed record is not automatically republished during a later refresh.
What we do not sell
We do not sell account passwords, full payment-card information, or information received through Facebook Login as a stand-alone data product. We do not knowingly sell or share the personal information of anyone under 16.
6. Cookies, analytics, and preference signals
The Services may use session cookies, persistent cookies, pixels, local storage, and similar technologies for sign-in, security, preferences, game state, analytics, and performance. Browser settings can block or delete some technologies, but doing so may prevent account, multiplayer, checkout, or saved-preference features from working.
Some browsers send “Do Not Track” signals, for which there is no uniform industry response. Where applicable law requires a recognized opt-out preference signal, such as a valid Global Privacy Control, to be treated as a request to opt out of sale or sharing, the affected Service will process that signal as legally required. A user can also submit a direct request at any time.
7. Retention
We keep information only for as long as reasonably necessary for the purpose described in this Policy, including to provide a requested Service, maintain security and backups, comply with legal, tax, accounting, and contractual duties, resolve disputes, and enforce agreements. Retention depends on the nature of the information and the Service:
- account and game data may be kept while the account or related feature remains active and for a reasonable period afterward;
- billing and transaction records may be kept for legally required accounting, tax, fraud-prevention, and dispute periods;
- server, security, and diagnostic logs are kept for a limited period based on operational and security need;
- public business and professional records may remain until refreshed, corrected, suppressed, or no longer needed; and
- privacy requests and minimal suppression identifiers may be retained to document compliance and keep information from being re-added.
Deletion from active systems may not immediately remove information from encrypted backups. Backup copies are isolated from ordinary use and are deleted or overwritten on the applicable backup cycle unless retention is legally required.
8. Security
We use administrative, technical, and physical safeguards designed to protect information, such as access controls, password hashing, transport encryption where supported, monitoring, backups, and service-provider controls. No internet transmission or storage system is guaranteed to be completely secure. Users should use a unique password, protect their login, and notify us promptly of suspected unauthorized access.
9. Your privacy rights and choices
Depending on where a person lives and the law that applies, that person may have rights to:
- know or access the categories and specific pieces of personal information we maintain, its sources, uses, and disclosures;
- correct inaccurate personal information;
- delete personal information, subject to legal and operational exceptions;
- receive a portable copy of certain information;
- opt out of the sale of personal information or sharing for cross-context behavioral advertising;
- limit certain uses or disclosures of sensitive personal information;
- withdraw consent where processing relies on consent;
- appeal a denied request where applicable; and
- receive equal service and not be discriminated against for exercising a privacy right.
Submit a request through the Privacy Choices & Data Removal page or email privacy@record7.com. No account is required to submit an opt-out or business-record suppression request.
We may ask for information needed to locate records and reasonably verify identity or authority. We will not request more verification information than necessary. An authorized agent may submit a request where permitted; we may request signed permission or direct confirmation from the person represented. We will confirm and respond within the time required by applicable law. If we deny all or part of a request, we will explain the applicable reason when required.
Facebook Login deletion
A user can remove a Record7 app from Facebook through Facebook’s Settings & privacy → Settings → Apps and websites. To request deletion of information stored by Record7, the user should also submit the form on our data-removal page and identify the relevant Service and Facebook-linked email or user ID.
10. Children
The Services are general-audience services and are not directed to children under 13. A person must be at least 13 to create an account or submit personal information. If local law requires a higher minimum age for a Service, that higher age applies. Users under 18 should use the Services only with permission from a parent or legal guardian.
We do not knowingly collect personal information online from a child under 13 without legally required parental consent. If a parent or guardian believes a child provided personal information, contact us so we can review and delete it. The Services do not knowingly sell or share personal information of users under 16.
11. Third-party services and links
The Services may link to or integrate with third parties such as Meta/Facebook, payment processors, maps and places providers, analytics providers, or customer-selected websites. Those parties operate under their own terms and privacy policies. Users should review them before providing information.
12. Changes to this Policy
We may update this Policy as the Services, technology, and law change. We will post the updated version with a new “last updated” date and provide additional notice when required. Continued use after an update means the updated Policy applies to later activity; consent will be requested when the law requires it.
13. Contact us
Record7
Fresno, California, United States
Email: privacy@record7.com
Online: Privacy Choices & Data Removal