1. Who We Are

Apiary is based in Dallas, Texas. This policy explains how we collect, use, and protect your personal information when you use Apiary ("Service").

2. Information We Collect

Account information: When you sign up, we collect your email address and, if you use Google OAuth, your name and profile picture from Google.

Usage data: We log messages sent, credit usage, routing mode selections, and conversation history so we can deliver and improve the Service.

Payment information: Billing is handled by Stripe. We store only non-sensitive identifiers (Stripe customer ID, subscription status). We never see or store your full card number.

Technical data: Standard server logs including IP address, browser type, and device information for security and debugging purposes.

3. How We Use Your Information

• To authenticate you and provide the Service
• To track and display your credit balance
• To process payments and manage your subscription
• To send transactional emails (account confirmations, billing receipts)
• To detect abuse, fraud, and security issues
• To improve and debug the Service using aggregated, anonymized data

We do not use your conversation content to train AI models. We do not sell your data to third parties. We do not serve ads.

4. Your Conversations

Your conversation history is stored so you can access it across sessions. This data is private to your account and protected by row-level security — no other user can access your conversations. We access conversation data only for debugging purposes when you explicitly report an issue.

Prompts you submit are transmitted to third-party AI providers (Anthropic, OpenAI, Google) for processing. Each provider’s own privacy policy governs how they handle this data at the API level. We recommend reviewing their policies if you handle sensitive information.

5. Data Sharing

We share data only with the following categories of service providers, and only as necessary to operate the Service:

• Supabase — database and authentication hosting
• Stripe — payment processing
• Anthropic, OpenAI, Google — AI model inference
• Netlify — application hosting
• Resend — transactional email delivery

We may disclose data if required by law or to protect the rights, safety, or property of Apiary, our users, or the public.

6. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, your data is retained for 90 days before deletion, unless you request earlier deletion. Anonymized, aggregated usage statistics may be retained indefinitely.

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate information via your account settings
• Deletion — request deletion of your account and associated data
• Portability — request your conversation history in a machine-readable format
• Opt-out — unsubscribe from non-transactional emails at any time

To exercise any of these rights, email us at hello@useapiary.com.

8. Cookies and Tracking

We use only essential cookies required for authentication (session tokens). We do not use advertising cookies, third-party tracking pixels, or analytics services that track you across sites. The only analytics we collect are first-party server logs.

9. Security

We use industry-standard practices to protect your data: HTTPS everywhere, row-level security on all database tables, encrypted storage for sensitive values, and access controls that limit which systems can read which data. No security system is perfect — if you discover a vulnerability, please report it to hello@useapiary.com.

10. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. For material changes, we will notify you via email or in-app notice at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent revision.