Apex Governance LLC (“Apex,” “we”) operates a privacy-first website and a research-grade institutional data business. The substantive premise of this notice is simple: we minimize what we collect, we do not sell or share personal information, and we do not maintain consumer-facing tracking infrastructure.

This notice describes the limited circumstances in which we receive personal information, what we do with it, and the rights you have. It applies to the website at apexgscore.com and to interactions you initiate with us through it.

§ 01 Information We Do Not Collect

The Apex G-Score website is intentionally designed to operate without consumer surveillance infrastructure. We do not deploy:

  • tracking cookies, advertising cookies, or any third-party advertising tags;
  • third-party analytics platforms (no Google Analytics, no Mixpanel, no Adobe Analytics, no Hotjar, no Microsoft Clarity, no equivalent products);
  • device fingerprinting, behavioral profiling, or cross-site tracking pixels;
  • social-media login or social-share tracking widgets;
  • retargeting or remarketing pixels.

For the full description, see the Cookie Notice.

§ 02 Information We Receive

Hosting Provider Logs

The website is hosted by Cloudflare, Inc. As a normal incident of operating any internet service, Cloudflare's edge infrastructure receives and may briefly retain technical request data, including IP address, user-agent string, requested URL, response status, and timestamp. These logs are operated by Cloudflare under its own privacy and security practices and are used for purposes such as denial-of-service mitigation, abuse prevention, and basic operational monitoring. Apex does not maintain its own server-side analytics on top of these logs.

Information You Submit

When you contact us — for example, by emailing contact@apexgscore.com, requesting a sample scorecard, requesting access to commercial data products, or submitting an inquiry through any contact form — we receive the information you provide. This typically includes your name, organizational affiliation, professional email address, country, role, and the substance of your message.

If you ultimately enter into a commercial or academic license, additional information is processed under the terms of that agreement (such as billing contacts, technical contacts, and authorized-user lists).

Email Service Provider

Our outbound email is delivered by a commercial email service provider (currently Cloudflare Email Routing for inbound; outbound transactional mail handled by a standard transactional-mail provider). Message metadata (sender, recipient, timestamp, delivery status) is processed by that provider as a normal incident of email delivery.

§ 03 How We Use Information

We use the information you provide solely for the purposes for which you provided it, including:

  • responding to your inquiry, request, or application;
  • evaluating, negotiating, executing, and administering a commercial or academic license, an NDA, or a related agreement;
  • fulfilling our contractual obligations under any agreement to which you are a party;
  • complying with legal, regulatory, accounting, audit, or tax obligations applicable to Apex;
  • defending or asserting legal claims, including responding to lawful requests from courts, regulators, or law-enforcement agencies of competent jurisdiction;
  • protecting the security, integrity, and availability of our systems and our intellectual property.

We do not use information you provide for advertising, behavioral profiling, or marketing automation directed at consumer audiences.

§ 04 How We Share Information

Apex does not sell, rent, or trade personal information. We disclose information only in the limited circumstances described below:

  • Service providers. We engage a small number of vendors to operate our infrastructure (hosting, email delivery, document storage). These providers process information on our behalf, under written agreements requiring them to use the information only as instructed and to maintain reasonable security.
  • Professional advisors. We may share information with our outside legal, accounting, audit, and tax advisors, who are bound by professional duties of confidentiality.
  • Successors. If Apex is involved in a corporate transaction (merger, acquisition, asset sale, financing, or insolvency), information may be transferred to a successor or counter-party, subject to confidentiality protections appropriate to the transaction.
  • Legal compliance. We may disclose information when we believe in good faith that disclosure is required to comply with law, valid legal process, or a lawful government request, or to protect the rights, property, or safety of Apex, our personnel, our clients, or the public.

We do not share, sell, or disclose your information to data brokers, ad networks, or any third party for that party's own marketing purposes.

§ 05 Data Retention

We retain personal information only for as long as is necessary for the purposes described in this notice, after which it is deleted or anonymized. Specific retention practices include:

  • Inquiry correspondence: retained for up to 24 months from the last interaction, or longer if a commercial or academic relationship results;
  • Contractual records: retained for the duration of the agreement and for the longer of (a) seven (7) years thereafter or (b) the period required by applicable tax, accounting, or limitations law;
  • Hosting and email metadata: retained for the period determined by the relevant service provider, typically thirty (30) days for edge logs.

§ 06 International Transfers

Apex is established in Delaware, United States. Information you provide to us, and information received by our service providers, may be processed in the United States or in any other jurisdiction in which our service providers maintain facilities. By using the website or contacting us, you understand that your information may be transferred to and processed in jurisdictions other than your own, including jurisdictions whose data-protection laws may differ from those of your home country.

Where applicable law requires specific safeguards for international transfer (for example, EU/UK Standard Contractual Clauses or Korean PIPA equivalents), we will implement those safeguards in our service-provider agreements.

§ 07 Your Rights

Depending on your jurisdiction, you may have rights with respect to information about you that we hold. These rights commonly include:

  • the right to access the information we hold about you;
  • the right to correct inaccurate information;
  • the right to request deletion of information, subject to applicable retention obligations;
  • the right to object to or restrict certain processing activities;
  • the right to data portability in respect of information you provided to us;
  • the right to withdraw consent where processing is based on consent;
  • the right to lodge a complaint with the data-protection authority in your jurisdiction.

To exercise any of these rights, please contact privacy@apexgscore.com. We will respond within the timeframe required by applicable law (and in any case promptly). We may need to verify your identity before acting on a request.

For Residents of California, the EEA, the United Kingdom, and Korea

If you are a resident of a jurisdiction with specific privacy legislation (including the California Consumer Privacy Act / CPRA, the EU GDPR, the UK GDPR, or Korea's Personal Information Protection Act), the rights described above are exercised in accordance with that legislation. We act as a data controller / business with respect to inquiry information, and as a processor / service provider to the extent we handle personal data on behalf of a contractual counterparty.

§ 08 Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. These include encryption in transit (TLS 1.2+), encryption at rest for stored business records, role-based access to systems holding sensitive information, and regular review of access controls. A fuller description of our security posture — including vendor selection, access-control practices, incident response, and the scope of certifications we hold (and do not hold) — is set out in the Information Security statement.

No system is perfectly secure. If you believe you have identified a vulnerability, please report it through the Responsible Disclosure Policy.

§ 09 Children

The website and our products are directed exclusively at institutional and professional audiences. We do not knowingly collect personal information from any individual under the age of eighteen (18). If you believe a minor has provided information to us, please contact privacy@apexgscore.com and we will delete it promptly.

§ 10 Changes to This Notice

We may update this Privacy Notice from time to time. The version in effect at the time you access the website is the version that applies. Material changes will be reflected in the “Last Updated” date at the top of this page. Where required by law, we will provide additional notice (for example, by direct email to identifiable contacts) of changes that are materially adverse to you.

§ 11 Contact

If you have any question, concern, or request regarding this notice or our handling of your information, please contact:

Email
privacy@apexgscore.com
Postal
Apex Governance LLC
Privacy Inquiries
State of Delaware, United States of America
(Full mailing address provided on request)