Privacy Policy

Effective date: April 2026

1. What we collect

We collect information you provide directly: your name, email address, agency name, and payment information when you sign up. We also collect API keys for Instantly.ai and Smartlead.ai that you provide to enable integrations. These keys are encrypted at rest using AES-256 and are never logged or transmitted unencrypted.

We collect usage data automatically: pages visited, features used, and error logs, to improve the product.

2. How we use your data

We use your data to provide the ApexReport service — syncing your campaign data, generating reports, delivering emails, and maintaining your account. We do not sell your data to third parties. We do not use your data for advertising.

3. Third-party services

ApexReport uses the following third-party services to operate:

  • Supabase — database and authentication
  • Vercel — hosting and infrastructure
  • Resend — transactional email delivery
  • Paddle — payment processing and subscription management
  • OpenAI — AI narrative generation (campaign data is sent to OpenAI to generate report summaries)

Each of these services has their own privacy policy. Campaign data sent to OpenAI for narrative generation is not used to train OpenAI models, in accordance with OpenAI's API data usage policies.

4. Data retention

Your data is retained while your account is active. If you cancel your subscription, your data is retained for 30 days before permanent deletion. You can request immediate deletion by contacting us.

5. Your rights

You have the right to access, correct, or delete your personal data at any time. Contact us at hamza.h@apexpositioningco.com with any requests.

6. Contact