This is not a policy we copied from a template and buried in legal language nobody reads. I asked our legal and engineering teams to write this together, so that the technical claims we make about security are actually true, and the language describing them is actually clear. Below, you will find exactly what data we collect, why we collect it, how long we keep it, who we share it with, and what control you have over it at every step. If you read this and still have a question, email us directly. A real person on our team will answer, not a support ticket queue that goes nowhere.

This Privacy Policy governs how AppVertices ("AppVertices," "we," "our," or "us") collects, uses, stores, discloses, and protects personal data obtained through our website at appvertices.io, our client portals, our proposal and consultation processes, our recruitment channels, and any other digital touchpoint where this policy is linked or referenced.

This policy applies to:

• Visitors browsing our website
• Prospective clients requesting quotes, consultations, or proposals
• Existing clients engaged in active or completed projects
• Job applicants and candidates interacting with our careers page
• Newsletter and marketing subscribers
• Vendors, partners, and contractors who interact with our digital properties

This policy does not govern data processed by AppVertices on behalf of our clients under separate Master Service Agreements or Data Processing Agreements, where AppVertices acts as a processor rather than a controller. Those engagements are governed by the terms of the relevant client contract, and if you are an end user of an application built by AppVertices for a client, you should refer to that client's own privacy policy.

By accessing our website or engaging our services, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please do not use our website or share personal data with us.

We collect personal data through direct interactions, automated technologies, and in some cases, from third parties. We break this down into clear categories below rather than burying it in one long paragraph, because we think you deserve to know exactly what falls into each bucket.

2.1 Information You Provide Directly

• Contact details: full name, email address, phone number, job title, and company name, submitted through contact forms, quote requests, newsletter sign ups, or live chat
• Project and business information: descriptions of your business requirements, budget ranges, timelines, existing systems, and technical documentation shared during discovery calls or proposal development
• Files and attachments: wireframes, specifications, brand assets, or any file you upload to us through email, our website, or a shared project tool
• Recruitment data: resumes, cover letters, work history, portfolio links, and interview notes submitted through our careers page
• Communication records: the content of emails, calls, and chat messages exchanged with our sales, project management, or support teams
• Payment related information: billing name, business address, and invoicing details, where relevant to a signed engagement. We do not store full payment card numbers on our own servers, this is handled by PCI compliant third party payment processors

2.2 Information Collected Automatically

When you visit appvertices.io, our servers and analytics tools automatically log:

• IP address and approximate geographic location derived from it
• Browser type, version, and language settings
• Device type, screen resolution, and operating system
• Referring website or search engine that directed you to us
• Pages viewed, time spent on each page, scroll depth, and click paths
• Date and time stamps of your visit
• Session identifiers and cookie identifiers described further in Section 6

This information is collected using cookies, pixel tags, server logs, and similar technologies, whether or not you create an account with us.

2.3 Information From Third Parties

We may supplement the information above with data from:

• Analytics and advertising partners, such as Google Analytics and Google Ads, LinkedIn Ads, and Meta advertising tools, when you interact with our campaigns
• Business intelligence and lead enrichment tools, which help us understand the company size, industry, or role associated with an inbound inquiry
• Publicly available sources, such as a company website or LinkedIn profile, when researching an inbound lead or a potential business partner
• Referral sources, if someone refers you to us through our referral program and provides your contact details for that purpose

Where applicable data protection law requires a legal basis for processing personal data, such as under the EU or UK GDPR, AppVertices relies on one or more of the following:

• Consent, for example when you opt in to receive marketing emails or accept non essential cookies
• Contractual necessity, to take steps you request before entering into a contract, or to perform a signed service agreement
• Legitimate interests, such as improving our website, securing our systems, understanding how prospective clients find us, and preventing fraud, balanced against your rights and freedoms
• Legal obligation, where we are required to retain or disclose information to comply with tax, accounting, employment, or other regulatory requirements

You may withdraw consent at any time where consent is the basis for processing, without affecting the lawfulness of processing carried out before that withdrawal.

We use the personal data described above to:

• Respond to inquiries, quote requests, and consultation bookings
• Prepare technical proposals, cost estimates, and statements of work
• Deliver, manage, and support active client engagements
• Communicate project updates, invoices, and account related notices
• Send newsletters, case studies, or service updates you have opted in to receive
• Evaluate job applications and manage our recruitment pipeline
• Analyze website traffic and user behavior to improve content, navigation, and page performance
• Run and measure the performance of our marketing and advertising campaigns
• Detect, investigate, and prevent fraud, security incidents, or abuse of our systems
• Comply with applicable legal, tax, accounting, and regulatory obligations
• Enforce our Terms and Conditions and protect our legal rights

We do not use personal data collected through our website to train third party AI models, and we do not sell personal data to data brokers or advertisers.

As an AI development company, we want to be direct about how automation touches our own operations. We may use AI powered tools internally, for example to draft initial responses to common inquiries, to assist with lead qualification, or to support our own software development workflows. Where AI tools are used in a way that could produce a decision with legal or similarly significant effects on you, such as automatically rejecting a job application without human review, we ensure a human remains in the loop before any final decision is made. We do not use fully automated decision making that produces legal or similarly significant effects on visitors or clients without the opportunity for human review, upon request.

Our website uses cookies, which are small text files stored on your device, along with similar technologies like pixels and local storage, to make the site function correctly and to understand how it is used.

Categories of cookies we use:

• Strictly necessary cookies: required for core website functionality, such as page navigation and secure form submission. These cannot be disabled without affecting how the site works
• Performance and analytics cookies: help us understand aggregate visitor behavior, such as which pages are most visited and where visitors drop off, primarily through tools like Google Analytics
• Functional cookies: remember your preferences, such as language selection, to improve your experience on return visits
• Advertising and targeting cookies: used by our advertising partners to measure campaign performance and, where you have consented, to show you relevant AppVertices content on other platforms

You can manage or disable cookies through your browser settings at any time, and where required by law, we will present a cookie consent banner allowing you to accept or decline non essential cookies before they are set. Disabling certain cookies may limit some website functionality.

We disclose personal data only in the following circumstances:

• Service providers and subprocessors: hosting providers, cloud infrastructure partners, email delivery platforms, CRM systems, analytics providers, and payment processors, all of whom are contractually bound to protect your data and use it only for the purposes we specify
• Professional advisors: lawyers, accountants, auditors, and insurers, where necessary for their engagement with us
• Business transfers: in connection with a merger, acquisition, financing, or sale of company assets, in which case personal data may be transferred as part of that transaction, subject to standard confidentiality protections
• Legal and regulatory disclosures: where required to comply with a subpoena, court order, government request, or to protect the rights, property, or safety of AppVertices, our clients, or the public
• With your direction: where you explicitly ask us to share your information with a named third party, such as a technology partner recommended during a consultation

We do not sell, rent, or trade your personal data to third parties for their own independent marketing purposes.

AppVertices operates across multiple markets, including the United States, and works with infrastructure and service providers that may process data outside your home country. Where we transfer personal data internationally, we rely on appropriate safeguards required under applicable law, such as standard contractual clauses, adequacy decisions, or equivalent legal mechanisms, and we require our subprocessors to maintain a comparable level of data protection regardless of where processing occurs.

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer period is required or permitted by law. As general guidance:

• Contact form and inquiry data is retained for up to 6-12 months if no engagement follows
• Client project data is retained for the duration of the engagement and for a period afterward as defined in the applicable service agreement, typically to support warranty, maintenance, or legal obligations
• Job applicant data is retained for 3 months following the close of the relevant recruitment process, unless you consent to us retaining it longer for future opportunities
• Website analytics data is retained according to the default retention settings of our analytics provider, or as configured by our team

When personal data is no longer needed, we securely delete or anonymize it.

Security is not an afterthought at AppVertices, it is core to how we engineer everything we touch, including our own systems. We apply layered technical and organizational safeguards, including:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest where applicable
• Role based access controls limiting internal access to personal data strictly to team members who need it
• Multi factor authentication on internal systems handling sensitive data
• Regular vulnerability assessments and security reviews of our infrastructure
• Secure development practices applied to our own website and internal tools, consistent with the standards we apply to client projects
• Incident response procedures to detect, contain, and remediate potential security events

No system connected to the internet can be guaranteed to be completely secure. If a data breach occurs that affects your personal data, we will notify affected individuals and relevant authorities in accordance with applicable law.

Depending on your location, you may have some or all of the following rights regarding your personal data:

• Right to access: request confirmation of whether we process your data, and obtain a copy of it
• Right to rectification: request correction of inaccurate or incomplete personal data
• Right to erasure: request deletion of your personal data, subject to certain legal exceptions
• Right to restrict processing: request that we limit how we use your data in certain circumstances
• Right to data portability: request a copy of your data in a structured, commonly used, machine readable format
• Right to object: object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: withdraw previously given consent at any time
• Right to lodge a complaint: file a complaint with your local data protection authority if you believe your rights have been violated

For California residents, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides additional rights, including the right to know what categories of personal information we collect and disclose, the right to delete personal information, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information (AppVertices does not sell personal information), and the right to non discrimination for exercising these rights.

To exercise any of these rights, contact us using the details in Section 15. We will respond within the timeframe required by applicable law, and may need to verify your identity before fulfilling certain requests.

If you have opted in to receive marketing emails, newsletters, or case study updates from us, you can opt out at any time by:

• Clicking the unsubscribe link included in every marketing email we send
• Emailing us directly at sales@appvertices.io with an unsubscribe request

Please note that even after opting out of marketing communications, we may still send you transactional or service related messages, such as invoices or project updates, if you are an active client.

Our website may contain links to third party websites, tools, or platforms, including social media pages and technology partner sites. We are not responsible for the privacy practices, content, or security of those external sites. We encourage you to review the privacy policy of any third party site before sharing personal data with it.

Our website and services are directed at businesses and professionals, not children. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have inadvertently collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately.

If you have questions, concerns, or requests regarding this Privacy Policy, how we handle your data, or wish to exercise any of the rights described above, reach out to us directly:

• AppVertices General Inquiries: sales@appvertices.io
• Mailing Address: 10439 shinning dawn way Richmond TX 77406
• Contact Page: (832) 615-2892

We aim to respond to all privacy related inquiries within 15 business days.

We may update this Privacy Policy periodically to reflect changes in our practices, the services we offer, or legal and regulatory requirements. When we make material changes, we will update the "Last updated" date at the top of this page, and where required by law, provide additional notice such as a website banner or direct email notification. We encourage you to review this page periodically to stay informed about how we protect your information.