Privacy Policy

1. Who We Are

ApexAcumen is a product of bigSIMPLE Development LLC, an Ohio limited liability company based in Liberty Township, Ohio. Our contact email is bigsimpledevelopment@protonmail.com. When this policy says "we," "us," or "our," it means bigSIMPLE Development LLC.

2. What Data We Collect

We collect only what is necessary to provide the service:

• Documents you upload — PDF or DOCX files you submit for analysis (contracts, NDAs, leases, terms of service, etc.)
• Account information — email address and password (hashed) if you create an account
• Usage data — pages visited, features used, error logs, and timestamps, collected via server logs
• Payment information — billing details processed by our payment provider (Stripe); we never store raw card numbers

We do not collect: device contacts, location data, microphone or camera access, or any data unrelated to the service.

3. How We Use Your Documents

Documents you upload are processed for one purpose: to generate your clause-level risk analysis and plain-English explanations.

• Document text is sent to a third-party AI API (Anthropic Claude) over an encrypted connection for analysis
• Documents are not used to train or fine-tune any AI model
• Documents are not shared with other users. If you create a share link, anyone with the link can see the AI analysis (risk scores, summaries and clause explanations) but never your document, its text, or its file name. Share links expire after 7 days.
• The original file you upload (PDF or Word) is deleted from our servers within 24 hours of upload. The text extracted from it and your analysis stay in your account, so you can revisit, re-analyze, compare and chat about it, until you delete the document or close your account
• Document text and analyses are stored encrypted at rest and can be deleted at any time from the app

3a. Emails We Send

We send only transactional emails about your account and the things you ask ApexAcumen to do:

• Account emails: welcome, email verification, sign-in codes, password reset and password-changed notices, and two-factor authentication changes
• Service emails: a notice when your document analysis is complete, and confirmation of a data deletion request
• Billing emails: confirmation when a subscription starts, including its renewal terms and how to cancel
• Notices about material changes to our Terms or this policy

We don't send marketing or newsletter email. If we ever send recurring or marketing email, every message will include an unsubscribe link.

4. Third-Party Services

ApexAcumen relies on the following third-party services:

• Anthropic (Claude API) — AI document analysis. Anthropic's API usage policy prohibits using submitted data to train models.
• Stripe — payment processing for subscriptions and credit pack purchases
• Render / Railway — cloud hosting infrastructure

We do not use advertising networks, analytics trackers (Google Analytics, Meta Pixel, etc.), or data brokers. Our pages on bigsimple.dev, including this policy, serve their fonts from our own servers, so no third-party requests are made when you load them.

5. Cookies, Local Storage & On-Device Data

ApexAcumen stores and accesses limited information directly on your device or browser to make the service work. We use this only for functional, non-advertising purposes:

• Authentication tokens — if you create an account, your access and refresh tokens (JWT) are stored in your browser's localStorage so you stay signed in between sessions.
• Session cookies — a strictly necessary cookie may be set to maintain your login session and protect against cross-site request forgery. These are functional cookies, not tracking cookies.
• App preferences — interface settings are cached locally so the app opens in the state you left it.
• Payment provider cookies — when you check out, Stripe may set cookies on your device to process the payment and prevent fraud, under Stripe's own privacy policy.

We do not place advertising cookies, third-party tracking cookies, analytics pixels, device fingerprinting, or similar cross-site tracking technology on your device. Information stored on your device is never used to build an advertising profile or shared with ad networks. You can clear this data at any time by signing out or clearing your browser storage; clearing authentication data will sign you out.

6. Data Retention

• Original uploaded files: deleted within 24 hours of upload
• Document text, analyses and chats: retained until you delete the document or close your account. Closing your account deletes them immediately
• Account data: retained for the life of your account, then deleted within 30 days of account closure
• Payment records: retained as required by law (typically 7 years)
• Server logs: retained for up to 30 days for security and debugging purposes, then deleted automatically

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Delete — request deletion of your account and all associated data (see how to delete your account)
• Export — download your saved documents and analysis history
• Correct — update inaccurate account information at any time

To exercise any of these rights, email bigsimpledevelopment@protonmail.com with "ApexAcumen Privacy Request" in the subject. We will respond within 30 days.

8. Security

We use HTTPS/TLS for all data in transit. Documents stored on our servers are encrypted at rest. We follow principle-of-least-privilege for internal access. No system is perfectly secure, but we take reasonable precautions proportionate to the sensitivity of legal documents.

If you believe a security vulnerability exists, please disclose it responsibly to bigsimpledevelopment@protonmail.com.

9. Children

ApexAcumen is not directed at children under 13. We do not knowingly collect data from anyone under 13. You must confirm your age when you create an account; our Terms of Service require you to be at least 18. If you believe a child has submitted data, contact us and we will delete it promptly.

10. Changes to This Policy

If we make material changes, we will post the updated policy here and update the "Last updated" date above. For significant changes, we will notify account holders by email at least 14 days in advance.

11. Contact

Questions about this policy? Contact bigSIMPLE Development LLC, Liberty Township, Ohio, at bigsimpledevelopment@protonmail.com.