PRIVACY POLICY & ACCOUNT DELETION

1. INTRODUCTION & SCOPE

At APEXity Studio ("we," "us," or "our"), we value your privacy and are committed to protecting the personal and operational data of users who interact with our official website (www.apexitystudio.com) and our mobile applications, including InvoiceMaker Pro (collectively, the "Services").

This Privacy Policy explains how we collect, process, store, share, and protect your information in compliance with international data privacy framework standards, including the General Data Protection Regulation (GDPR) and the Law on Protection of Personal Data No. 6698 (KVKK).

2. DATA WE COLLECT

We collect data necessary to authenticate users, render B2B invoice drafts, secure our infrastructure, and deliver high-performance cross-platform software tools:

• Account & Authentication Data: When you sign up or log in using Google Sign-In, Apple Sign-In, or custom email authentication, we collect basic credentials such as your full name, primary email address, profile avatar URL, and unique OAuth user identifier.
• IP Address, Security & Technical Logs: To maintain system integrity, mitigate brute-force attacks, prevent fraud, and comply with legal logging requirements, we collect and store your IP (Internet Protocol) address, network parameters, mobile device hardware model, operating system version, and unique device identifiers.
• Business Profile & Invoicing Metadata: Information voluntarily provided to configure business profiles within our mobile applications, including company name, physical business address, phone number, corporate logos, and optional corporate tax identification numbers (e.g., VKN, TCKN, VAT ID).
• Client & Invoicing Content: Information entered into draft documents, including client entity names, addresses, itemized service breakdowns, line-item pricing, currencies, and optional client tax identification numbers.
• Digital Signature Data: Scalable vector graphics (SVG) or image representations of digital signatures drawn by authorized users or clients within the Application interface for invoice authorization.

3. PURPOSES OF DATA PROCESSING

We process collected data under strict legal grounds (contract fulfillment, legal compliance, and legitimate security interests):

• To authenticate user sessions securely and maintain multi-device sync across platforms.
• To generate, render, cache, store, and export invoice drafts, quotes, and PDF documents requested by users.
• To log network traffic and IP addresses within backend databases to detect malicious connection attempts, DDoS threats, and unauthorized access.
• To perform diagnostics, resolve system crashes, and optimize server response times.
• To respond to customer support inquiries submitted via support email.

5. DATA SHARING & THIRD-PARTY SERVICES

We do not sell, rent, trade, or lease personal or client data to third parties or advertising networks. Data is shared exclusively with verified service providers enabling core functionality:

• Google Cloud & Firebase: Backend database hosting, cloud storage, real-time synchronization, and diagnostic crash logging.
• Apple & Google Identity Platforms: Federated OAuth identity providers for secure user authentication.
• Legal Obligations: We may disclose IP logs, account details, or transactional records if required by law, subpoena, court order, or governmental demand to protect our legal rights or ensure network security.

6. YOUR DATA PROTECTION RIGHTS (GDPR & KVKK)

Under applicable privacy laws, you possess the following rights regarding your personal data:

• Right of Access & Portability: The right to request copies of your personal data held within our systems.
• Right to Rectification: The right to request correction of inaccurate or incomplete business or personal information.
• Right to Object or Restrict Processing: The right to object to or restrict processing carried out under legitimate security interests.

To exercise these rights, please submit a formal request to support@apexitystudio.com.

7. SECURITY MEASURES

We implement technical, physical, and organizational safeguards designed to protect personal and business data against loss, misuse, unauthorized access, disclosure, or destruction. Encrypted HTTPS protocols govern all traffic between your client device and our cloud servers. However, no electronic storage or Internet transmission method is 100% secure, and we cannot guarantee absolute immunity.

8. CHILDREN'S PRIVACY

Our Services are designed exclusively for business professionals and adults. We do not knowingly collect personal data from children under 16 years of age.

9. CHANGES TO THIS PRIVACY POLICY

APEXity Studio reserves the right to modify or update this Privacy Policy at any time. Any changes will be posted on www.apexitystudio.com with an updated effective date. Continued use of the Services following policy revisions signifies acceptance of the revised terms.