Privacy Policy
Last updated: June 20, 2026ApertaCodex (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at apertacodex.ai and use our services, applications, and APIs (collectively, the “Services”). This policy applies to all users, including both internal members and external guests.By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the practices described herein, please do not use the Services.1. Information We Collect
1.1 Personal Data You Provide
We may collect the following personal data when you interact with our Services:- Identity Data: Name, username, or similar identifier.
- Contact Data: Email address, phone number, and mailing address.
- Account Data: Login credentials, account preferences, and settings.
- Payment Data: Billing address and payment method details (processed by third-party payment processors; we do not store full payment card numbers).
- Communication Data: Feedback, support requests, survey responses, and any other information you provide when contacting us.
- Waitlist Data: Email addresses submitted through our waitlist sign-up form.
1.2 Data Collected Automatically
When you access our Services, we may automatically collect:- Usage Data: Pages visited, features used, actions taken, time and date of visits, time spent on pages, and other diagnostic data.
- Device Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language preferences.
- Location Data: Approximate geographic location derived from your IP address.
- Cookies & Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing activity. See Section 6 for more details.
1.3 Data from Third Parties
We may receive information about you from third-party sources, including identity verification services, analytics providers, advertising partners, and social media platforms when you link your account or interact with us through those platforms.2. How We Use Your Information
We use the information we collect for the following purposes:- Provide and operate the Services: To create and manage your account, deliver the features you request, and process transactions.
- Improve and develop: To understand how our Services are used, identify trends, and improve user experience, functionality, and performance.
- Communicate with you: To send service-related notices, respond to inquiries, provide support, and send marketing communications (with your consent where required).
- Security and fraud prevention: To detect, investigate, and prevent fraudulent, unauthorized, or illegal activity and protect the rights and safety of our users and the Company.
- Legal compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
- Personalization: To tailor the Services and content to your preferences and interests.
3. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:- Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications).
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering a contract.
- Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., improving our Services, fraud prevention), provided those interests are not overridden by your rights.
- Legal Obligation: Where processing is necessary to comply with a legal obligation.
4. Sharing and Disclosure of Information
We do not sell your personal data. We may share your information in the following circumstances:- Service Providers: With trusted third-party vendors and service providers who assist us in operating the Services (e.g., hosting, analytics, email delivery, payment processing), under strict data protection agreements.
- Legal Requirements: When required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction.
- With Your Consent: In any other case, we will share your information only with your explicit consent.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When your data is no longer needed, we will securely delete or anonymize it. Criteria used to determine retention periods include the nature and sensitivity of the data, potential risk of harm, the purposes for processing, and applicable legal requirements.6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to monitor activity on our Services and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of our Services may not function properly.Types of cookies we use:- Essential Cookies: Necessary for the operation of the Services.
- Analytics Cookies: Help us understand how visitors interact with our Services (e.g., Vercel Analytics).
- Preference Cookies: Remember your settings and preferences.
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure infrastructure, and regular security assessments. However, no method of electronic storage or transmission over the Internet is 100% secure, and we cannot guarantee absolute security.8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your country. We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy, including the use of Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.9. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal data:- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data, subject to certain exceptions.
- Restriction: Request that we restrict processing of your data in certain circumstances.
- Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
- Object: Object to processing of your data based on legitimate interests or for direct marketing.
- Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
To exercise any of these rights, please contact us at privacy@apertacodex.ai. We will respond to your request within 30 days.10. GDPR & Data Subject Requests
If you are a resident of the European Economic Area (EEA), you have the right to lodge a complaint with your local data protection authority if you believe that our processing of your personal data violates applicable law. We are committed to resolving complaints about our collection or use of your personal data. For GDPR data subject access requests (DSARs), including requests to view or delete personal data, please contact us at privacy@apertacodex.ai.11. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, please contact us at privacy@apertacodex.ai.12. Children's Privacy
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child under 16, please contact us at privacy@apertacodex.ai.13. Third-Party Links and Services
Our Services may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the “Last updated” date. We encourage you to review this Privacy Policy periodically. Your continued use of the Services after changes are posted constitutes your acceptance of the revised policy.15. Data Protection Officer
If you have any questions or concerns about our data protection practices, you may contact our Data Protection Officer at: dpo@apertacodex.ai16. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your data protection rights, please contact us at: