Privacy Policy

APEX Ops ("we", "our", "us") operates apexops.dev and provides AI sales operations software and services. This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have under California (CCPA/CPRA) and European (GDPR) law.

1. Information we collect

• Contact data you submit — name, business name, email address, phone number, and any message text you send us via our contact form, mailto links, or Stripe checkout.
• Billing data — processed by Stripe. We do not store your card number. We retain the last four digits, brand, and expiration for receipts.
• Usage data — pages visited, referring URL, IP address, user agent, device type, approximate geographic location (city-level), and timestamps. Collected through Google Analytics 4, Microsoft Clarity, and server logs.
• Cookies — strictly necessary cookies for session continuity plus analytics cookies. You can block cookies in your browser without losing access to the site.
• Service data — if you are a customer, we process the lead records and call recordings you configure us to process, under your instructions, as a processor on your behalf.

2. How we use it

• To respond to inquiries and deliver the service you purchased.
• To send transactional messages (receipts, onboarding, outage notices).
• To improve the product — bug reports, feature usage patterns, performance.
• To comply with law — TCPA, DNC, CAN-SPAM, CCPA, GDPR, and applicable tax rules.

We never sell your personal information. We never share your data with advertisers. We never train AI models on our customers' data without an explicit separate written agreement.

3. Who we share with

We share personal data only with service providers bound by a data processing agreement and with the minimum scope needed:

• Stripe — payment processing
• Google (Analytics, Places API) — analytics and business data lookup
• Microsoft Clarity — session replay (anonymized)
• Vapi.ai and ElevenLabs — voice infrastructure for customers using the call layer
• Anthropic and OpenAI — LLM inference on a zero-retention configuration where available
• Hostinger — hosting and storage

4. Data retention

Contact submissions are retained for 24 months then deleted. Billing records are retained for seven years to comply with US tax law. Call recordings are retained for 90 days by default and can be deleted sooner on request. Server logs are rotated at 30 days.

5. Your rights

You can request access, correction, deletion, data portability, or restriction of processing by emailing info@apexops.dev. We respond within 30 days. If you are a California resident you also have the right to opt out of any sharing for cross-context behavioral advertising — we do not do this, but the right is yours.

6. Children

This service is B2B and not directed at children under 16. We do not knowingly collect data from children.

7. International transfers

Our servers are located in the United States. If you access the service from outside the US, you consent to transfer of your data to the US. Where required we use Standard Contractual Clauses for transfers out of the EEA and UK.

8. Changes

We will update this policy from time to time. Material changes will be announced at the top of this page and, where appropriate, notified by email.

9. Contact

APEX Ops · San Diego, CA · info@apexops.dev