Privacy Policy

1. Introduction

APEX REG ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our regulatory research platform. This policy is compliant with UAE Federal Decree Law No. 45 of 2021 (Personal Data Protection Law - PDPL) and international data protection standards.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Account Information

• Name and email address (via Clerk authentication)
• Profile picture (if provided through social login)
• Account creation date

3.2 Payment Information

• Billing address
• Payment method details (processed securely by Stripe - we do not store card numbers)
• Transaction history

3.3 Usage Data

• Search queries and interactions with the platform
• AI query history
• Device information and browser type
• IP address and approximate location

4. How We Use Your Information

We use your personal data to:

• Provide and maintain our services
• Process subscriptions and payments
• Send transactional emails (receipts, account updates)
• Improve our platform and user experience
• Comply with legal obligations
• Prevent fraud and abuse

5. Third-Party Services

We share data with the following service providers:

6. Data Security

We implement industry-standard security measures to protect your data:

• SSL/TLS encryption for all data transmission
• Secure authentication via Clerk
• PCI-DSS compliant payment processing via Stripe
• Regular security assessments
• Access controls and audit logs

7. Your Rights (UAE PDPL)

Under UAE data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Withdraw Consent: Revoke previously given consent

To exercise these rights, contact us at tech@ravencord.com

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 7 years to comply with legal, tax, and accounting requirements.

9. International Data Transfers

Your data may be processed by our service providers (Clerk, Stripe, Vercel) in locations outside the UAE. These providers maintain appropriate safeguards to protect your data in compliance with applicable laws.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. Continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at: