Privacy Policy

Last updated: October 6, 2026

This Privacy Policy explains how Appluex LLC, a Florida limited liability company doing business as “Appluex” (“Appluex”, “we”, “us”) collects, uses, shares, and protects personal data when you visit appluex.com (the “Site”), contact us, book a call, sign a document we send you, or receive an invoice from us. We act as the data controller for personal data collected through the Site.

Two related points. Invoices and payments for Appluex work are issued and collected by our affiliate Essiel Express LLC, acting as our billing agent, and each invoice says so. Passforge, the exam preparation service at study.appluex.com, is operated by Essiel Express LLC and has its own terms and its own privacy policy, at study.appluex.com/privacy. This Policy does not cover Passforge accounts.

1. Information we collect, by what you do

• Contact form. Your full name, email address, phone number and the message you write. With them we store the IP address the form was sent from, the type of browser that sent it, and the time. We also record whether our notification and our confirmation email to you were sent or failed.
• Booking a call. Your name, your email address and the time you chose. We email you a confirmation with the link to join.
• Video meetings. When you join a meeting from our link we record the name you type, the IP address you joined from, and when you joined and left. Audio and video are carried during the call by a real-time video provider (section 6).
• Phone and WhatsApp. The Site shows a phone number and a WhatsApp link. A call goes through your phone carrier and a WhatsApp conversation takes place on WhatsApp, under its own privacy policy. We see what you send us there, as with any call or chat.
• Signing a document electronically. When we send you a document to sign (for example a non-disclosure agreement), we hold the name and email address it was sent to and whether and when the link was opened. When you sign, we record what you enter (your full name, title, email, company name, entity type and address), your signature (the image you draw or the name you type), that you accepted electronic signing, and the time. We also record, as proof of who signed: your IP address; an approximate location worked out from that address (country, region, city, postal code and network provider); and details of your device and browser (device type, operating system, browser, language, time zone, screen size and similar technical details). The signing page shows you this information before you sign. The signed copy is stored as a PDF and emailed to you and to us.
• Client invoices. The name, email address and billing address the invoice is made out to, what it covers, the amounts, its status, and the payment events our payment processor reports to us (for example paid, pending, failed, refunded or disputed). We record the time and IP address of the first time the invoice link is opened, and whether each email about the invoice was sent or failed. We do not receive or store your card number or bank account details. You enter those on a page hosted by Stripe, and Stripe holds them.
• Private reports. If we give you an access code to a private report, we log each visit to it: IP address, approximate location and network provider worked out from that address, device type, operating system and browser, whether the code entered was right, and how long the report was read. That page sets a cookie holding a random identifier, kept for one year, so visits from the same browser can be told apart from visits by someone else.
• Correspondence. The emails you send us and our replies.
• Usage and device data collected automatically by the servers that host this Site and the network service in front of it: IP address, browser and device type, pages requested, referring URLs and timestamps. These are ordinary server logs kept to run the Site, keep it available and spot abuse. See section 3 for what is, and is not, additionally collected by measurement tools.

We do not intentionally collect sensitive categories of data, and we do not sell personal data.

2. Information we receive from others

• An AI assistant acting for you. The Site lets AI assistants check our availability, book a call and send us a project request on a person's behalf. If an assistant does that for you, we receive and store the same details as the contact form or the booking form: the name, email address, phone number and message, or the name, email address and time, that the assistant gives us. Notes an assistant adds to a booking are sent to us by email with the booking. The record is marked as having come from an assistant, and it carries the name of the assistant product, as the assistant states it or as its software identifies itself. We store the IP address and software identifier of the assistant's request, which belong to the assistant's service and not to your own device. We send a confirmation to the email address the assistant gave. If an assistant sent us your details and you did not ask it to, write to [email protected] and we will delete them.
• Business research and outreach. We publish research about company websites, and we keep a contact list of businesses we may write to about that research or about our services. It holds business contact details: the company name, the names and roles of people who run it, a business email address, phone number, address and website, with our own notes. These details come from sources such as public registers and the company's own website, not from you directly. If we email you from this list, the message carries a one-click way to unsubscribe. Opting out takes one click, needs no login, takes effect at once, and is permanent: our system refuses to send to an address that has opted out. You can also opt out, or ask us to remove your details, by writing to [email protected].
• Email delivery and engagement. For outreach emails we record whether the message was delivered, bounced or was reported as spam, and whether it was opened or a link in it was clicked, together with the IP address and email program that opened it. Opens are detected with a small image in the message, and links pass through our server. For the other emails we send (confirmations, meeting invitations, documents to sign, invoices) we record only whether the message was sent or failed.
• Our payment processor. Stripe tells us the status of an invoice payment, as described in section 1.

3. Cookies, analytics & advertising

Essential cookies are what the Site needs to work, such as keeping you signed in to an area you have access to. Beyond those, this Site uses Google Analytics 4 to count visits and see which pages are read. It also counts clicks on our phone number and on our call-booking links, with the page and the position of the link on it, and records nothing about who clicked. It identifies a browser, not a person, and we do not join it to anything you send us through the contact form. We use it to decide what to publish and where to improve the Site, and for nothing else.

We run no advertising or remarketing tag, no social media pixel, no session recording and no heatmapping. Until 30 August 2026 this Site did load a Google Ads tag on every page; the campaign behind it had ended, so it was removed. If we advertise again we will add one back and say so here in the same release.

You choose, and what you are shown depends on where you are, because the law does. In the EEA, the UK and Switzerland a banner asks on your first visit and the default is refuse until you answer, so nothing is stored on your device before you have. Elsewhere, including the United States, no law requires us to ask before counting a visit, so the default is to allow and no banner interrupts the page; you can switch it off by blocking cookies for this Site, browsing privately or using a tracker blocker. To decide whether to show the banner, the Site asks our server which country your connection comes from; the answer is used for that decision and is not stored. Wherever you are, an answer you give is stored on your own device, in your browser's local storage rather than in a cookie, because recording a decision about cookies by writing a cookie would be absurd. It is never sent to us, and it records what you agreed to by category, so if we ever add a purpose you have not answered for, we ask again instead of treating an old yes as covering it. Your answer is honoured through Google's Consent Mode, and declining costs you nothing: no part of this Site depends on analytics, and measurement continues in a cookieless form that counts a visit without identifying your browser.

Our private areas are never measured. The admin, client-report, client-invoice, call-booking, video-meeting, student and private-invitation sections of this Site load no Google tag at all, regardless of your answer, because what is on those pages is not ours to measure. The access codes and link tokens those pages use therefore never reach Google.

As you move from page to page, the page views we send carry only the path of the page, without its query string. We have not enabled Google Signals, so your visit is not tied to your Google account or followed across your devices. You can also block cookies in your browser, and a tracker blocker stops the tag outright. Learn more about Google's practices at policies.google.com/privacy.

4. How we use your information (purposes & legal bases)

• Reply to inquiries, hold the calls you book and provide quotes and services. Basis: performance of a contract or taking steps at your request, and our legitimate interests.
• Keep proof of signed agreements. The signing record exists so that both sides can show who signed, what and when. Basis: performance of a contract and our legitimate interest in being able to prove it.
• Issue invoices and collect payment, and keep the records that go with them. Basis: performance of a contract and legal obligations.
• Business research and outreach to companies, as described in section 2. Basis: legitimate interests; you can opt out at any time.
• Operate and improve the Site and understand usage. Basis: legitimate interests; analytics cookies set with your consent where required.
• Security and abuse prevention, as described in section 5. Basis: legitimate interests and legal obligations.
• Comply with law and enforce our terms. Basis: legal obligation or legitimate interests.

(“Legal bases” above refer to the EU/UK GDPR for visitors in those regions.)

5. Human verification, security logging and rate limiting

• Human verification. The contact form can ask Cloudflare Turnstile to confirm that a person, not a program, is sending it. When that check is switched on, Turnstile runs in your browser and Cloudflare receives technical signals from it; our server then sends Cloudflare the result and your IP address to confirm it. The requests an AI assistant sends us do not go through this check.
• Rate limiting. The contact form, the booking form, the signing page, the meeting page and the assistant endpoints count requests per IP address so that one source cannot flood them. Those counters are held in the server's memory for a short time (minutes) and are not written to our database.
• Security logging. The IP addresses stored with a contact request, a meeting, a signature, an invoice view or a private report visit, described in section 1, also help us tell genuine activity from abuse. Sign-ins to our staff tools are logged with IP address, approximate location and device type.

6. How we share information (service providers / sub-processors)

We share personal data only as needed, with providers who process it on our behalf. We describe them by the function they perform for us:

• Cloud hosting and database infrastructure (United States). Running the Site and storing the data it holds.
• Amazon Web Services (AWS). Storage of signed documents, and delivery of the email we send, such as our reply to your enquiry.
• Cloudflare. Content delivery, DNS and network security, and human verification on the contact form when it is switched on. Processes IP addresses and request metadata in transit.
• Stripe. Payment processing for client invoices. Stripe receives the name and email address on the invoice and what it is for, hosts the page where you pay, and holds your card or bank details, which never reach our systems.
• Essiel Express LLC. Our affiliate, which issues invoices and collects payment as our billing agent.
• Google (Analytics). Website analytics, governed by your cookie choice as described in section 3. Not used for advertising on this Site.
• Real-time video infrastructure. Audio and video processing, used only if you join a scheduled video meeting with us.
• IP geolocation service. Receives an IP address and returns its approximate location, used for the signing record, private report visits and staff sign-ins.
• WhatsApp (Meta). Only if you choose to message us there.
• Embedded live preview. One case study page embeds a live view of a third-party website, which loads from that website under its own privacy policy.

We may also disclose data to comply with law, enforce our agreements, or in connection with a merger or sale of assets. We do not sell or “share” personal data for cross-context behavioral advertising as defined under California law.

7. International data transfers

Your data is processed in the United States, and by service providers that may process it in other countries under contractual safeguards. If you are outside the United States, that means your data leaves your country when you use the Site or write to us.

8. Data retention

We do not promise a fixed deletion date that no system of ours enforces. What we can say truthfully, by category:

• Contact requests, bookings and meeting records: kept as long as needed for the purpose described above, which is replying to you and working with you. Ask and we will delete them.
• Signed documents and their signing record: kept as long as needed to prove the agreement, which lasts beyond the agreement itself.
• Invoices and payment records: kept as long as needed for accounting, tax and legal reasons.
• Outreach contact list: kept as long as needed for the purpose described in section 2. An opt-out is kept permanently, because keeping it is how we make sure you are not contacted again.
• Private report visit logs and email delivery records: kept as long as needed for the purpose described.
• Rate-limit counters: minutes, in memory only.
• Your cookie choice: stays on your own device until you clear it.

9. Your privacy rights

EU/UK (GDPR): you may have the right to access, correct, delete, restrict, or object to processing, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.

California (CCPA/CPRA): you may request to know, access, correct, and delete your personal information, and to opt out of any “sale” or “sharing” (we do not sell or share as defined). We will not discriminate against you for exercising these rights.

Canada (PIPEDA): you may access and request correction of your personal information.

To exercise any right, email [email protected]. We will verify your request and respond within the timeframe required by applicable law. Some records, such as a signed agreement or an invoice, may have to be kept even after a deletion request, for the reasons given in section 8.

10. When we work for a client

When we build or run software for a client, the personal data inside that software belongs to the client's relationship with its own users. We handle it on the client's behalf and on its instructions, under our agreement with that client, and the client's privacy policy applies to it, not this one.

11. Children's privacy

The Site is not directed to children under 13 (or the applicable age in your region), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal data, including encryption in transit, sign-in and role-based access controls on our internal tools, unguessable links for documents and invoices, signed unsubscribe links, and rate limiting. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Third-party links

The Site may link to third-party sites we do not control. This Policy does not apply to them; review their privacy policies separately.

14. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date reflects the current version, and this list records what changed:

• October 6, 2026. Section 3 now says that the Site counts clicks on the phone number and on call-booking links, with the page and the position of the link, and nothing about who clicked.
• October 3, 2026. Rewritten to describe each feature of the Site: requests and bookings made by AI assistants, call booking and video meetings, electronic signing, client invoices, private reports, research outreach and its opt-out, email delivery records, human verification and rate limiting. The fixed retention period for inquiry data was replaced by retention by category. Privacy requests now go to [email protected].
• August 2026. Analytics section rewritten: Google Analytics 4 only, the Google Ads tag removed, and the consent banner shown only where the law requires it.

15. Contact us

For privacy questions or to exercise your rights, write to [email protected]. Appluex LLC, 995 SW 84th Ave, Suite 423, Miami, Florida 33144, USA.