Privacy Policy

1. Information We Collect

Account Information

When you create an account through our authentication provider (Clerk), we collect your name, email address, profile image, and organization details. We do not store passwords directly; authentication is managed entirely by Clerk.

Usage Data

We collect information about how you interact with our platform, including pages visited, features used, tool execution logs, timestamps, and general device and browser information.

Tool Inputs and Outputs

When you use our AI-powered automation tools, the data you provide as input and the outputs generated are processed and stored to deliver the service and maintain execution history within your account.

Payment Information

Payment details are collected and processed by Stripe. We do not store credit card numbers or full payment credentials on our servers. We retain only the subscription status, plan type, and transaction identifiers necessary to manage your account.

2. How We Use Your Information

• Provide, operate, and maintain our AI automation services
• Process transactions and manage your subscription
• Send transactional communications such as account confirmations and billing notices
• Improve and optimize the platform based on usage patterns
• Detect, prevent, and address security issues or abuse
• Comply with legal obligations

3. Data Storage and Security

Your data is stored in Supabase-hosted PostgreSQL databases with encryption at rest and in transit. We enforce Row Level Security (RLS) policies to ensure that each organization can only access its own data. Access to production infrastructure is restricted to authorized personnel and protected by multi-factor authentication.

4. Third-Party Services

We integrate with the following third-party services to operate the platform:

Clerk

Authentication and user management. Clerk processes your sign-in credentials and profile data under its own privacy policy.

Stripe

Payment processing and subscription management. Stripe handles all payment card data in compliance with PCI DSS standards.

Anthropic

AI model processing. Tool inputs are sent to Anthropic's Claude language models to generate outputs. See Section 5 for details on AI data handling.

5. AI Data Processing

When you use our AI-powered tools, the data you provide is sent to third-party language models for processing. We want you to understand the following:

• Your inputs are sent to AI models solely to generate the requested output for you.
• We do not use your tool inputs or outputs to train, fine-tune, or improve any AI models.
• AI-generated outputs are stored in your account history so you can review past results.
• You should avoid submitting sensitive personal information (such as Social Security numbers or financial account numbers) into AI tool inputs.

6. Cookies and Tracking

We use essential cookies to maintain your authentication session and preferences. We may use analytics tools to understand aggregate usage patterns. We do not sell your data to third-party advertisers or use cross-site tracking for advertising purposes.

7. Data Retention

We retain your account data and tool execution history for as long as your account is active. If you cancel your subscription, your data is retained for 30 days to allow for reactivation, after which it is permanently deleted. You may request earlier deletion at any time by contacting us.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request that we delete your personal data and account.
• Export: Request a portable copy of your data in a standard format.
• Correction: Request that we update inaccurate or incomplete information.
• Objection: Object to certain processing activities where applicable.

To exercise any of these rights, contact us at admin@autoapx.com. We will respond within 30 days.

9. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, by sending you an email notification. Your continued use of the platform after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Apex Automations LLC
• autoapx.com
• admin@autoapx.com