We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we use it. We don't sell your data. We don't share it with advertisers. We collect only what's necessary to deliver your purchase and provide support.
What we collect
- Your email address — required to deliver your Notion access link and send purchase confirmations
- Payment information — processed by Stripe, who handles PCI compliance. We never see or store your full card details.
- Purchase record — the date, amount, and product purchased, stored securely in our database
- Access logs — IP address and timestamp when you access your delivery link, used only to prevent unauthorized sharing
What we do NOT collect
- Your Notion workspace content or data
- Browsing history or behavioral tracking beyond basic analytics
- Your personal information beyond what's listed above
- Information from third-party sources
How we use your data
- To deliver your APEX OS access link after purchase
- To send purchase confirmation and access emails via Resend
- To process refunds if you request one
- To send product update notifications (you can unsubscribe at any time)
- To respond to your support emails
Third-party services
We use the following third-party services to operate:
- Stripe — payment processing. Your payment data is governed by Stripe's privacy policy.
- Supabase — secure database for purchase records and access tokens. Data is stored on EU-region servers.
- Resend — transactional email delivery (purchase confirmation, access link)
- Vercel — hosting and edge delivery. Basic access logs are collected per Vercel's privacy policy.
- Vercel Analytics — anonymous, cookie-free page view analytics. No personal data is collected.
Data retention
We retain your purchase record for 7 years for tax and accounting purposes. Access logs are deleted after 12 months. If you request deletion of your data (outside of legally required records), email us and we'll process it within 30 days.
Cookies
We use one first-party cookie: a countdown timer stored in your browser's localStorage to track your 48-hour early access window. This is functional only — no tracking or advertising. We do not use third-party advertising cookies.
Your rights
Depending on your location, you may have rights including: the right to access your data, the right to correct inaccurate data, the right to delete your data, and the right to data portability. To exercise any of these rights, email hello@apexos.life.
Children
APEX OS is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have inadvertently collected such data, contact us immediately.
Changes to this policy
If we make material changes to this privacy policy, we will notify you by email before the changes take effect. The "last updated" date at the top of this page always reflects the most recent version.
Contact
Privacy questions or requests: hello@apexos.life