DRAFT
Privacy Policy
DRAFT — Not reviewed by a licensed attorney. Not a guarantee of compliance.
Who we are: ApeXhit LLC, United States.
Data map
This draft lists what the service stores, why it is stored, and who else can receive it. It is not a lawyer's review.
| What | Why | Who else can receive it |
|---|---|---|
| Account email | Create the account, sign you in, and send account email such as a password reset. | Resend, only when email sending is turned on. |
| Password hash | Check your password at sign-in. The password itself is not stored. | The Postgres database for this service. It is not emailed. |
| Two-factor settings | Optional second step at sign-in. That includes the on/off setting, a shared secret, and recovery-code hashes. | The Postgres database for this service. |
| Storage assets, items, and photos | Run the inventory: names, notes, quantities, labels, and QR codes. Photos are re-saved with camera location (GPS) removed before they are stored. | The Postgres database. Photo files go to private Vercel Blob storage when that storage is turned on. |
| Location tags you add | Remember a place name, address, or map pin you entered. Location is not read from a photo. | The Postgres database. Map pictures load from OpenStreetMap in your browser. If address search is turned on, the address you type is sent to that search service (OpenStreetMap Nominatim) to place the pin. |
| Session cookies | Keep you signed in, and hold a short-lived second cookie during two-factor sign-in. Page scripts cannot read these cookies. | Your browser, and the host that receives the request (Vercel). |
| Basic logs | Operate the service and investigate errors. A log line can include a request id. It is not a copy of your inventory. | The host that runs the site (Vercel). |
Who handles the data
- Vercel hosts the site and handles each request.
- The Postgres database stores the account, inventory, location tags, and session records.
- Vercel Blob stores photo files when photo storage is turned on. Those files are private.
- Resend sends account email when email sending is turned on.
- OpenStreetMap provides map pictures, and Nominatim handles address search when that search is turned on.
- LinkIT can receive a reference you saved, and only to read a title, when that connection is turned on. This service does not send your photos or your full inventory for that lookup.
We do not sell this data.
International handling
Hosting and the processors named above may handle this data outside the country you are in. This is an honesty line. It is not a data-processing agreement, not standard contractual clauses, and not a statement that any country has an adequacy decision. This draft does not set a governing law. Transfer terms will be confirmed by the business's counsel.
How long we keep it, and how to delete it
We keep the data above only as long as needed to run the account. Email apexhit00@gmail.com to ask a privacy question, or to ask us to delete your account and the data in the list above: account email, password hash, two-factor settings, storage assets, items, photos, location tags you added, session cookies, and related logs. This version has no separate delete button in the app. We delete the data after you ask and we confirm the request.
Contact: apexhit00@gmail.com
Product features are listed on Capabilities, not in this document.