ApexStream
Privacy Policy
How ApexStream collects, uses, and protects personal data.
Last updated: 16 May 2026
1. Scope
This Privacy Policy explains how ApexStream ("we") processes personal data when you visit apexstream.org, use our dashboard, APIs, or support channels (the "Services").
It does not cover third-party sites or services you connect through your own applications.
2. Data we collect
Depending on how you use the Services, we may process:
- Account data: name, email, organization, authentication identifiers, and security settings (for example 2FA status).
- Billing data: plan, invoices, and payment metadata processed by our payment provider (we do not store full card numbers).
- Usage data: connection counts, message volume, API requests, channel metadata, and diagnostic logs needed to operate and meter the platform.
- Technical data: IP address, browser type, device identifiers, and cookies required for sessions and preferences (such as locale).
- Support communications you send to us.
3. How we use data
We use personal data to:
- Provide, secure, and improve the Services
- Authenticate users and prevent abuse
- Bill accounts and communicate about subscriptions
- Respond to support requests and send service notices
- Comply with legal obligations and enforce our Terms
4. Legal bases (EEA/UK)
Where GDPR applies, we rely on contract performance (providing the Services), legitimate interests (security, analytics, product improvement), consent where required (for example optional marketing), and legal obligation.
6. Retention & security
We retain data for as long as needed to provide the Services, meet legal obligations, resolve disputes, and enforce agreements. Usage logs may be aggregated or deleted on a rolling schedule.
We apply technical and organizational measures including encryption in transit, access controls, and tenant isolation. No method of transmission or storage is 100% secure.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data, and to object to certain processing. You may withdraw consent where processing is consent-based.
To exercise rights, contact support@apexstream.org. You may lodge a complaint with your local supervisory authority.
8. International transfers
Data may be processed in countries other than your own. Where required, we use appropriate transfer mechanisms such as standard contractual clauses.
9. Children & changes
The Services are not directed to children under 16. We may update this policy; material changes will be posted on this page with an updated date.
Contact: support@apexstream.org.