Privacy Policy

1. Overview

APEX AI Guardrails ("we," "us," or "our") operates the Service. This Privacy Policy describes how we collect, use, and protect information when you use our Service. We are committed to protecting your privacy and handling data with the care expected by government agencies. This policy is drafted to comply with the General Data Protection Regulation (GDPR) and applicable US privacy laws.

2. Data Controller

The data controller responsible for your personal data is APEX AI Guardrails, reachable at support@responsibleai360.com. If you are located in the EU/EEA, you may also contact your local data protection authority.

3. What We Do NOT Collect

APEX AI Guardrails is built on a privacy-first architecture. We do not collect, transmit, or store the content of any prompts or messages entered into AI tools. All PII detection and data classification runs locally in your browser. Your sensitive government data never leaves your device or reaches our servers.

4. Information We Collect

We collect the following limited information to operate the Service:

• Account Information: Name, email address, agency name, and phone number provided during signup.
• Audit Metadata: Anonymized event logs including event type (e.g., "PII block"), data category (e.g., "SSN"), timestamp, and AI tool domain — never the actual content.
• Usage Analytics: Aggregate, anonymized statistics about feature usage to improve the Service.
• Payment Information: Billing details processed securely by Stripe. We do not store payment card data.

5. Legal Basis for Processing (GDPR)

• Contract (Art. 6(1)(b)): Processing account and payment data to deliver the Service you subscribed to.
• Legitimate Interests (Art. 6(1)(f)): Anonymized audit metadata to detect abuse and improve security.
• Legal Obligation (Art. 6(1)(c)): Retaining records as required by applicable law.

6. How We Use Your Information

• To provision and manage your subscription and Product Key
• To provide audit trail logs accessible to your agency administrators
• To send transactional emails (subscription confirmations, renewal notices)
• To improve and maintain the Service
• To respond to support requests

7. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share data with: (a) Stripe for payment processing; (b) service providers who assist us in operating the Service under strict confidentiality agreements; (c) law enforcement when required by law.

8. Data Retention

Account information is retained for the duration of your subscription plus 3 years for compliance purposes. Anonymized audit logs are retained for 7 years to support government records obligations. You may request deletion of personal data by contacting us.

9. Security

We implement industry-standard security measures including encryption in transit (TLS 1.2+), access controls, and regular security reviews. Our architecture ensures that sensitive government data never reaches our infrastructure.

10. Cookies

We use only essential cookies for session management and authentication. We do not use tracking or advertising cookies. See our Cookie Policy for details.

11. Your Rights (GDPR & US Privacy Laws)

Depending on your location, you have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure ("Right to be Forgotten") — request deletion of your personal data
• Restriction — request we limit processing of your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw Consent — where processing is based on consent

To exercise any right, email support@responsibleai360.com. We will respond within 30 days. EU/EEA residents may also lodge a complaint with their supervisory authority.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify subscribers of material changes via email. Continued use of the Service constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions: support@responsibleai360.com