PRIVACY POLICY

This Privacy Policy explains what information apexr ("we", "us") collects when you use the website at apexr.ai and the related video analysis and racing-line services (the "Service"), how we use it, and the choices you have.

1. Information we collect

Account information. When you sign up with email and password or with Google, we receive your email address and (for Google sign-in) basic profile information such as your display name. Authentication is provided by Supabase.

Payment information. When you subscribe or buy credits, payment is processed by Stripe. We do not see or store your card number, expiration, or CVC. Stripe shares with us a customer identifier, the products you purchased, the amount, and your billing email.

Uploaded content. Videos and images you upload are stored on our server for the duration of the analysis and are sent to Google's Gemini API for processing. After analysis completes, we retain the resulting analysis JSON and the original upload only as needed to display your past results to you.

Usage data. We log basic request information (IP address, request path, timestamp, response status) for operational purposes such as rate limiting and debugging.

Cookies. We use a single signed session cookie to keep you logged in. We do not use third-party advertising or tracking cookies.

2. How we use information

• To operate the Service (process your video, generate your racing line, deliver results, manage your credit balance).
• To process payments and prevent fraud.
• To send transactional email related to your account and purchases.
• To debug, monitor, and improve the Service.

We do not sell your personal information. We do not use your uploaded videos to train any machine learning model.

3. Third-party services

• Stripe — payment processing. See stripe.com/privacy.
• Supabase — authentication and database hosting. See supabase.com/privacy.
• Google — OAuth sign-in (if you choose it) and the Gemini API used for video analysis. See policies.google.com/privacy.
• Railway — application hosting. See railway.app/legal/privacy.

4. Data retention

We retain account information and purchase history for as long as your account is active. You can request deletion of your account at any time by emailing [email protected]. Backups containing your information may persist for up to 30 days after deletion.

5. Your rights

You can access, correct, export, or delete your personal information by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR (EU/UK) or the CCPA (California). We honor those rights for all users regardless of jurisdiction.

6. Security

We use HTTPS in transit and rely on our infrastructure providers (Supabase, Stripe, Railway) for storage encryption. No system is perfectly secure; please use a unique password.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect information from them.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated by email or an in-app notice.

9. Contact

Questions about this policy or your data? Email [email protected].