Privacy
Policy.

1. Information we collect

Information you provide directly

When you fill out a contact form, request a free pilot, or communicate with us, we collect:

• Your name and business email address
• Your store or company name
• The number of locations you operate
• Any additional information you choose to include in your message

Information collected when you use the platform

If you become a paying customer and use the Apervex operational intelligence platform, we collect:

• Operational scan data — photographs uploaded by your team members for AI processing, case counts generated from those photographs, timestamps, and department-level categorisation
• Employee productivity data — cases per hour, session duration, and per-associate performance metrics as generated by the platform
• Account information — your billing information is processed by Stripe and not stored on our servers. We retain your subscription tier, billing email, and payment history for accounting purposes
• Usage data — how you interact with the dashboard, feature usage, and general platform analytics used to improve the service

Information collected automatically

When you visit apervex.com, we may automatically collect:

• Your IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on the site
• Referring URLs

2. How we use your information

We use the information we collect for the following purposes:

• To respond to your enquiries — when you contact us or request a pilot, we use your information to respond and set up your account
• To provide the platform — operational and employee data is used to generate the dashboards, productivity calculations, reports, and alerts that make up the Apervex service
• To improve our AI model — scan photographs and count data may be used to improve the accuracy of our computer vision model. We will always notify you of this use and obtain your consent where required by law
• To send product communications — we may send you emails related to your account, product updates, and occasional information about new features. You may opt out at any time
• To process payments — billing information is processed by Stripe, Inc. in accordance with their privacy policy
• To comply with legal obligations — we may use or disclose your information where required by applicable law

3. How we share your information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

Service providers

We work with trusted third-party providers who process data on our behalf to operate the platform:

• Stripe, Inc. — payment processing. Stripe Privacy Policy →
• Supabase — database hosting and authentication
• Railway / Vercel — platform infrastructure and hosting
• Resend — transactional email delivery

Each of these providers is contractually required to protect your data and may only use it for the purpose of providing services to Apervex.

Legal requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Apervex, our customers, or others.

Business transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4. Data retention

We retain your personal data for as long as necessary to provide the services you have requested and to comply with our legal obligations:

• Contact form submissions — retained for up to 2 years from the date of submission, or until you request deletion
• Platform data (active customers) — retained for the duration of your subscription plus 90 days following cancellation
• Scan photographs — retained for 12 months from the date of upload, after which they are permanently deleted. Derived data (case counts, timestamps) may be retained longer as part of your operational record
• Billing and payment records — retained for 7 years in compliance with US tax and accounting obligations

You may request deletion of your personal data at any time by contacting us at [email protected]. We will respond within 30 days.

5. Security

We take the security of your data seriously. We implement industry-standard technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These include:

• TLS/HTTPS encryption for all data in transit
• Encrypted storage for all databases
• Access controls limiting which personnel can access customer data
• Regular review of security practices

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security. If you become aware of any security vulnerability related to our services, please notify us immediately at [email protected].

6. Cookies and tracking

Our website (apervex.com) uses minimal cookies and tracking. Specifically:

• Strictly necessary cookies — used for basic website functionality and security. These cannot be disabled
• Analytics — we may use privacy-focused analytics tools to understand how visitors use our site. Where used, these tools do not collect personally identifiable information and do not use advertising cookies

We do not use advertising or cross-site tracking cookies. We do not participate in ad networks or allow third-party advertising on our platform.

7. Your rights

GDPR rights (EEA and UK residents)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may request correction of inaccurate or incomplete data
• Right to erasure — you may request deletion of your personal data where there is no legitimate reason for us to continue processing it
• Right to restrict processing — you may request that we limit how we use your data
• Right to data portability — you may request your data in a structured, machine-readable format
• Right to object — you may object to our processing of your data where we rely on legitimate interests as our legal basis

Our legal basis for processing your data is: (a) performance of a contract, when you use our platform; (b) legitimate interests, for responding to enquiries and improving our service; and (c) consent, where explicitly obtained.

CCPA rights (California residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we have collected
• The right to opt out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To exercise any of these rights, contact us at [email protected]. We will respond within 45 days. We may need to verify your identity before processing your request.

8. Children's privacy

Apervex is a business-to-business platform intended for use by businesses and their employees who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected] and we will take steps to delete it.

9. International data transfers

Apervex is based in the United States. If you are accessing our services from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using our services, you consent to this transfer. Where required by applicable law, we implement appropriate safeguards for such transfers, including Standard Contractual Clauses approved by the European Commission.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a notice on our website. Your continued use of our services after any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

11. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: