Privacy Policy
Last updated: September 25, 2026
Who this notice covers
This notice explains how AppVerticals handles personal information when you browse this website, configure or save an app, send a brief, book a call, subscribe, or use the customer portal. It also explains our role when we build and host an app for your business. Confidential business information is additionally covered by our Terms of Service and any mutual NDA signed with you.
Information you share
We collect the contact details you provide, such as your name, email address, phone number and company; your messages, project requirements and app configuration; booking details; and account and subscription records. Please start with a high-level brief. Do not put passwords, payment card numbers, government identification, medical records or customer databases into a brief or contact form. We can agree an appropriate way to exchange sensitive material if the project requires it.
Builder drafts and device information
The builder can save your configuration in your browser and send draft configuration updates to our server before you submit your contact details. A visitor identifier connects those drafts with a later enquiry or purchase. We also process browser and device information, pages visited, referring pages, campaign parameters and advertising click identifiers. Security and sign-in records may include your IP address, user agent and timestamps. Clearing browser storage does not itself delete a draft already saved on our server.
Why we use information
We use information to evaluate your requirements, answer enquiries, prepare and deliver agreed work, arrange calls, operate your account, process billing, provide support and prevent abuse. Service messages include sign-in links, booking communications, build summaries and payment confirmations. Submitting a brief is a request to discuss your project, not permission for unrelated marketing. Where required, marketing and optional tracking rely on a separate choice.
Your idea and confidential materials
Sending a brief does not transfer ownership of your idea, brand, content or customer data. We use non-public project information to evaluate, deliver and support your requested work, subject to our confidentiality terms. Access may include team members and service providers who need it for those purposes. A separately signed NDA can define additional protections. A privacy notice is not a signed NDA or a transfer of intellectual property.
Payments and account access
Stripe collects payment details through its checkout. Our application receives references and billing information needed to administer your subscription; it does not receive your full card number or security code. Portal sign-in links are single-use and expire after fifteen minutes. We store a hash rather than the usable token. Expiry prevents sign-in with that token; it does not mean the associated security record is immediately deleted. Session cookies can remain valid for up to thirty days unless revoked earlier.
Cookies, analytics and choices
Cookies and browser storage support sessions, draft restoration, preferences and attribution. When configured, we use Google Analytics for traffic measurement, Microsoft Clarity for session replay and heatmaps, Vercel Analytics for usage events, and HubSpot for enquiry management and website tracking. Visitor identifiers may link an enquiry with earlier activity, so this information is not necessarily anonymous. The site presents analytics choices to visitors identified as being in the EEA, UK or Switzerland and communicates those choices to Google and Clarity. Browser settings can also block or clear cookies. Contact us for help with your tracking preferences; clearing cookies does not withdraw information already submitted.
Providers and other disclosures
Providers used by the website include Vercel for hosting and analytics, Neon for database storage, Stripe for billing, Resend for email, Google for analytics, calendar invitations and internal team notifications, Microsoft for Clarity, and HubSpot for CRM and tracking. Their involvement depends on the features configured and used. Contact details and a brief or build summary may be included in CRM records and internal notifications. We may disclose information where required by law or where necessary to establish, exercise or defend legal rights. We do not sell your project brief or customer lists.
Data in your own app
When your app processes your customers’ personal information on your instructions, you generally determine its purposes and we provide the agreed processing service. You are responsible for appropriate notices, permissions and lawful instructions. Before processing that data, we will agree the relevant responsibilities, providers, security requirements, retention and return or deletion arrangements in the project documents and, where required, a data processing agreement. An NDA alone does not replace that agreement. The website notice does not replace the privacy notice your own app needs.
AI features
If an agreed project includes an AI feature, its scope must identify the relevant provider, intended use and data it needs before that feature is enabled. Do not submit confidential or personal material to an AI integration without the agreed safeguards. This website’s app configurator is not, by itself, an agreement to send your brief to an AI provider or to use it for model training.
Security
We use access controls, encrypted web connections and hashed sign-in credentials in the customer portal. Access and safeguards must be appropriate to the service and information involved. No service can promise absolute security. If an incident affects your information, we will investigate and provide notices required by applicable law and our agreement with you. Email info@appverticals.com to report a suspected incident; do not include passwords or secret keys.
How long information is kept
Retention depends on why information was collected: managing an active enquiry or customer relationship, delivering the service, security investigations, resolving disputes, and applicable accounting or legal requirements. Records may need to be kept longer where a legal hold or unresolved claim applies. The subscription terms describe the post-cancellation window for requesting an app-data export. You can ask us to delete an abandoned draft or enquiry; we will explain any information we need to retain and why. Sign-in expiry and browser cookie expiry are not promises that every related server record is deleted on that date.
Legal grounds and international processing
Where applicable data protection law requires a legal basis, these may include taking steps you request before a contract, performing a contract, legitimate interests in running and securing our business, compliance with law, and consent where required. Our team and providers may process information in the United States and other countries. Where transfer safeguards are legally required, they must be addressed in the applicable processing arrangements. Contact us for details relevant to your project.
Your rights and requests
Depending on applicable law, you may request access, correction, deletion or a copy of your personal information; object to or restrict certain processing; withdraw consent; or exercise applicable rights concerning sale, sharing or targeted advertising. Email info@appverticals.com with your request. We may need to verify your identity and will respond within the applicable legal timeframe, explaining any lawful exception or extension. You may also complain to the relevant data protection authority. If your request concerns an app we operate for another business, contact that business; we will assist it as required by our agreement and the law.
Children
This website and purchasing service are intended for business users, not children. Please do not provide children’s personal information through the builder or brief form. If a proposed app is intended for children, its requirements and safeguards must be separately agreed before collecting such information. Contact us if you believe a child has submitted personal information here.
Changes and contact
We may update this notice as the service or our practices change. The date shown here identifies the current version; we will provide additional notice where required. Questions or privacy requests can be sent to info@appverticals.com or AppVerticals, 1341 W Mockingbird Ln, Suite 600W, Dallas, TX 75247, USA.