Privacy Policy

1 · Who we are

AppmanAi operates the Service and acts as the “data controller” for the personal data described below. If you have any questions about this policy or how we handle your data, contact us at [email protected].

2 · Information we collect

We collect what we need to run the Service, bill you correctly, keep your account secure, and see which of our ads and channels bring customers.

• ·Account data. When you sign up we store your name, email address, and — if you use social login (Google or Apple) — the account identifier returned by that provider. We never receive your social-login password.
• ·Billing data. Payments are processed by Stripe. We store your customer identifier, plan and credit balance, and a record of your transactions. We do not store your full card number, CVC, or bank details — those are handled directly by Stripe.
• ·Usage data. When you call the API or use the MCP server we log the request (endpoint, timestamp, credits spent, response status and a request identifier) so we can meter usage, prevent abuse, and support you. We associate this with your API key and account.
• ·How you found us. On your first visit we note the referring site, the landing page, and any campaign tags in the link (such as utm_source or an ad click identifier). If you create an account, we save this with it so we can see which channels bring customers.
• ·Analytics and advertising. Google Analytics and the TikTok and Meta (Facebook) ad pixels, loaded through Google Tag Manager, record the pages you visit and clicks on sign-up buttons, and set their own cookies. When you create an account, TikTok and Meta also receive a one-way (SHA-256) hash of your email address and account ID, which they match against their own users to tell us which ads led to a sign-up. We never send them your password, API keys, or what you look up through the Service.
• ·Email engagement. Our product emails contain a small image and tracked links, so we can see whether an email was opened and which links were clicked. We use this only to improve those emails. Sign-in codes and password-reset emails carry no tracking.
• ·Technical data. Like most websites we automatically receive your IP address, browser and device information, and diagnostic logs. Our CDN and hosting providers process this to deliver and secure the Service.

3 · How we use your information

• ·Provide, operate and maintain the Service, including authentication and API metering.
• ·Process payments, manage credits, and send billing-related messages.
• ·Secure the Service — detect, prevent and respond to fraud, abuse and technical issues.
• ·Provide customer support and respond to your requests.
• ·Understand how the website is used and measure which ads bring sign-ups.
• ·Comply with our legal obligations and enforce our Terms of Service.
• ·Email you about the Service: setup tips, notices about your credits and plan, and occasional offers. You can turn off tips and offers when you sign up, in your account settings, or with the unsubscribe link in any of those emails; billing and account notices still come through.

4 · Legal bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data under one or more of these legal bases: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service, and to email you tips and offers about AppmanAi as a user of it, which you can opt out of at signup or at any time after), legal obligation (e.g. tax and accounting), and consent where we ask for it, which you may withdraw at any time.

5 · Cookies

We use strictly necessary cookies to keep you signed in and to secure your session. Two more first-party cookies remember how you first found us (see “How you found us” above, including any ad click identifier in the link): one for up to 90 days, and one for an hour while you connect an AI client. A third lasts an hour and carries your choice about tips and offers through sign-up. They are not shared with third parties. Google Analytics and the TikTok and Meta pixels set their own cookies to measure visits and ads (see “Analytics and advertising” above). You can block them in your browser settings or with a content blocker; the Service works without them. We do not sell your data.

6 · Sharing and third-party processors

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and only as needed to run the Service:

• ·Stripe — payment processing and tax.
• ·Google and Apple — only if you choose social login.
• ·Hosting, CDN and email providers — to serve, secure and communicate about the Service.

To measure the website and our advertising we also use:

• ·Google — Google Analytics and Google Tag Manager, which record visits and page views.
• ·TikTok and Meta — their ad pixels record visits and sign-ups that come from their ads, and receive the hashed email address and account ID described above when you create an account.

We may also disclose information if required by law, to protect our rights, or in connection with a merger or acquisition (in which case we will notify you).

7 · Data retention

We keep account and billing records for as long as your account is active and for as long afterwards as needed to meet legal, tax and accounting obligations. Usage logs are retained for a limited period for security and support, then deleted or anonymised. You can ask us to delete your account at any time.

8 · Security

We use industry-standard measures to protect your data, including encryption in transit, hashed API keys, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — keep your API keys confidential and rotate them if you suspect they have been exposed.

9 · International transfers

Our providers may process data in countries outside your own, including the United States. Where required, such transfers are covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

10 · Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have similar rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. To make a request, email [email protected]. We will respond within the timeframe required by applicable law. You also have the right to complain to your local data-protection authority.

11 · Children

The Service is intended for professional use and is not directed to children under 16. We do not knowingly collect personal data from children.

12 · Changes to this policy

We may update this policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you by email or in the dashboard. Your continued use of the Service after an update means you accept the revised policy.

13 · Contact

Questions or requests? Email us at [email protected]. See also our Terms of Service.