Privacy Policy

Controller and contact

APEX GLOBAL HUB LTD is the controller for this website and the Apex SEO Intelligence public audit experience.

Company number: 16396293. Registered office: 73 Hulton Lane, Bolton, England, BL3 4JD. Email: [email protected].

Information collected

• Submitted website URLs and the public pages, status codes, metadata, links, content, schema and trust signals collected during an audit.
• IP-derived rate-limit data used by the Cloudflare Worker in short in-memory counters, plus ordinary infrastructure request logs that may be created by hosting and edge providers.
• Anonymous audit history saved in your browser local storage.
• Signed-in account data and saved audit reports when Supabase authentication and account history are used.
• Authentication emails, session data and account metadata handled through Supabase Auth.
• Worker jobs, progress, logs and rendered-audit results used to process browser-backed audit evidence.
• Assisted audit evidence, including uploaded capture JSON and optional screenshots, when an authenticated user starts assisted evidence capture.
• Enquiry information you choose to send by email, or through the Apex assistant where that feature is used, such as name, email, phone, business, budget, timeline and message content.

Purposes and lawful bases

• To run requested public website audits and show reports: legitimate interests and, where you ask for the service, steps requested by you.
• To prevent abuse, manage fair-use limits and protect the service: legitimate interests.
• To provide signed-in account access and saved history: contract or steps requested by you.
• To validate assisted evidence and protect private capture workflows: legitimate interests and contract where the feature is used.
• To reply to enquiries and discuss implementation support: legitimate interests and steps requested by you.
• To meet legal, security and record-keeping obligations: legal obligation and legitimate interests where applicable.

Service providers

The codebase shows these providers or processors involved in the service: Fasthosts hosts the public website; Cloudflare Workers handle the public API, CORS and rate limiting and may create infrastructure-level request logs; Supabase provides authentication, database records and private assisted-audit storage; and email software handles messages you send to Apex.

The Apex assistant may use an OpenAI-compatible DeepSeek API when assistant features are used. Optional Cloudflare KV transcript storage and a lead webhook are used only where configured for the relevant audit or assistant feature; they are not described here as receiving every SEO audit.

International processing

Cloud services may process data outside the United Kingdom depending on provider infrastructure and account configuration. The repository verifies use of Cloudflare, Supabase, Fasthosts and an external AI API, but does not verify every processing region.

Retention

• Anonymous browser history remains in your browser until you clear browser storage or the application clears it.
• Signed-in audit reports remain in Supabase account history until deleted by an authorised user/admin or according to future account-retention controls.
• Worker jobs and logs are stored in Supabase tables; no fixed purge period was verified in the repository.
• Assisted audit artifacts have retention metadata defaulting to 30 days. The repository does not prove an automatic deletion job, so deletion timing depends on operational cleanup.
• Optional Cloudflare KV transcript storage, where configured for the relevant feature, uses 90 days for stored SEO audit reports and 180 days for assistant lead transcripts.
• Email enquiries are kept for as long as needed to respond, manage the relationship and keep reasonable business records.

Security

The implementation uses HTTPS, Supabase row-level security, service-role boundaries for backend workers, private assisted-audit storage, token hashing for assisted capture sessions and filtering/redaction for sensitive assisted evidence. No internet service can be guaranteed completely secure.

Your rights

You may ask for access, correction, deletion, restriction, portability or objection where UK data protection law gives those rights. Where processing relies on consent, you can withdraw consent. Contact [email protected].

Complaints

You can complain to the UK Information Commissioner's Office at ico.org.uk. Please contact Apex first if you want to give us the chance to resolve the issue directly.