Privacy Policy

1. Information We Collect

We collect information you provide directly, information generated when you use our platform, and limited technical data from your device or browser.

• Account information: name, email address, password (stored in hashed form), and profile details you choose to provide.
• Project and communication data: project details, feedback, support messages, product inquiries, and content you submit through dashboards or forms.
• Payment information: billing details and transaction records processed through our payment partners. We do not store full payment card numbers on our servers.
• AI chatbot interactions: messages you send to our on-site AI assistant, used to respond to your request and improve service quality.
• Technical and usage data: IP address, browser type, device information, pages viewed, referring URLs, language preference, and cookies or similar technologies.

2. How We Use Your Information

We use personal information for legitimate business purposes, including:

• Creating and managing your account and client dashboard.
• Delivering development services, project updates, and customer support.
• Processing payments, invoices, and related financial records.
• Responding to product inquiries, partnership requests, and chatbot conversations.
• Sending service-related notices, security alerts, and administrative messages.
• Analyzing site usage to improve performance, security, and user experience.
• Complying with legal obligations and enforcing our Terms of Service.

3. Legal Bases for Processing (EEA/UK Users)

Where applicable data protection laws require a legal basis, we rely on: performance of a contract (providing our services), legitimate interests (operating and improving our platform, preventing fraud, and communicating with clients), consent (where required for optional marketing or non-essential cookies), and legal obligation.

4. How We Share Information

We do not sell your personal information. We may share information with:

• Service providers: hosting, email delivery, analytics, payment processing (such as Tazapay), and AI infrastructure providers that process data on our behalf under contractual safeguards.
• Professional advisors: lawyers, accountants, or auditors when reasonably necessary.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to continued protection of your data.
• Legal requirements: when required by law, court order, or to protect the rights, safety, and security of AppRoots, our users, or others.

5. International Data Transfers

AppRoots may process and store information in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms to protect cross-border transfers.

6. Data Retention

We retain personal information only as long as necessary to provide services, meet legal and accounting requirements, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it in accordance with our retention practices.

7. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember language preferences, maintain security, and understand how our site is used. You can control cookies through your browser settings. Disabling certain cookies may limit platform functionality.

8. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including access controls, encryption in transit, and secure hosting practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent where processing is consent-based. To exercise these rights, email privacy@approots.net. We may need to verify your identity before responding. You may also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

Our services are not directed to individuals under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

11. Third-Party Links

Our website may link to third-party sites, demo products, or client applications. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice on our website. Continued use of our services after changes become effective constitutes acceptance of the updated policy.