Last updated: March 22, 2026

Privacy Policy

This Privacy Policy describes how APEX OS Inc. (“we,” “us,” or “our”) collects, uses, and protects your information when you use the APEX OS platform.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, phone number, brokerage affiliation, and profile information you choose to provide.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, session duration, device type, browser type, and IP address.

Real Estate Data

The Service processes contacts, properties, deals, transactions, and related business data that you input or connect via integrations (such as Gmail or Google Calendar). This data is stored securely and used exclusively to provide the Service.

AI Interaction Data

We collect data about your interactions with APEX operatives, including prompts, operative outputs, feedback signals, and configuration preferences.

2. How We Use Information

Service Delivery: To operate, maintain, and improve the APEX OS platform and deliver the features you use
AI Model Improvement: Anonymized and aggregated interaction data may be used to improve operative performance. You may opt out of this at any time in your account settings
Analytics: To understand usage patterns and improve the product experience
Communication: To send you service-related notices, updates, security alerts, and support messages
Billing: To process subscriptions, CHUM credit purchases, and manage your account

We will never sell your personal information to third parties.

3. Data Storage and Security

Your data is stored on infrastructure provided by Supabase, hosted on AWS. We implement industry-standard security measures, including:

Encryption at rest for all stored data
TLS encryption in transit for all data transfers
Row-level security policies for database access control
Sensitive information (access codes, financial data) is stored in isolated, encrypted tables separate from general records
Regular security audits performed by automated system agents

While we take extensive measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services in the operation of APEX OS:

Stripe— Payment processing for subscriptions and CHUM credit purchases. Stripe’s privacy policy governs how they handle your payment information.
Google OAuth— Authentication and integration with Gmail and Google Calendar. We access only the data you explicitly authorize.
OpenAI— AI model provider for agent intelligence and content generation. Data sent to OpenAI is governed by our data processing agreement with them and is not used to train their models.
Supabase— Database hosting and authentication infrastructure.

We do not share your data with third-party services beyond what is necessary to operate the features you use.

5. CHUM Economy Data

APEX OS uses an in-platform currency called CHUM for activating operatives, swarm operations, and premium features. We collect and store:

CHUM transaction history (purchases, usage, balance changes)
Feature activation patterns tied to CHUM spending
Aggregate usage statistics for pricing and feature development

CHUM has no monetary value outside the APEX OS platform and cannot be exchanged for cash or transferred to other users.

6. Data Retention

Active Accounts: We retain your data for as long as your account is active and the Service is being provided to you.
Deleted Accounts: Upon account deletion, we will remove your personal data within 90 days. Certain data may be retained longer if required by law or for legitimate business purposes (such as fraud prevention or dispute resolution).
Anonymized Data: Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and product improvement.

7. Your Rights

You have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data, subject to legal retention requirements
Export: Request a machine-readable export of your data
Opt-Out of AI Training: Opt out of having your data used for AI model improvement at any time via your account settings

To exercise any of these rights, contact us at privacy@apexos.ai. We will respond to all requests within 30 days.

8. Cookies and Tracking

APEX OS uses a minimal set of cookies and tracking technologies:

Essential Cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
Analytics (PostHog): We use PostHog for product analytics to understand how users interact with the platform. PostHog data is self-hosted and not shared with external parties.

We do not use third-party advertising cookies or tracking pixels. We do not participate in advertising networks or sell data to data brokers.

9. Children’s Privacy

APEX OS is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a child under 18 has provided us with personal information, please contact us at privacy@apexos.ai and we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated via email or a prominent notice within the Service at least 30 days before they take effect.

We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

APEX OS Inc.
Email: privacy@apexos.ai