This policy explains what personal data ap0t collects, why, and your choices. ap0t is run by Vicky Paswan, an individual based in India, who is responsible for your data. Contact: hajipurtech@gmail.com.
What we collect
When you buy
- Name and email you enter at checkout. Your account and license are tied to this email.
- From PayPal: your PayPal email, order and payment IDs, and the amount paid. PayPal handles your card or bank details; we never see them.
- Marketing source of the purchase: UTM parameters, ad click IDs (such as fbclid or gclid) and the referring site, so we know which ads work.
Your account
We create an account from your checkout email. You sign in with emailed links, so there's no password to store. Your account shows your license keys, devices and downloads.
When you activate the app
- The app sends your license key, a device ID (a hashed hardware ID, not your serial number), the device name and the app version.
- After activation the app checks your license offline. Its only regular network request is an anonymous check for updates and messages, which includes no license key or device ID.
When you visit the website
- Our host keeps standard server logs, including IP addresses, for a short time for security and troubleshooting.
- With your consent where required, advertising and analytics tags (see below) record page views and purchases.
Why we use it
- To process your purchase, issue and manage your license, and deliver downloads (needed to fulfil our contract with you).
- To email your receipt, license key and sign-in links, and to answer support requests.
- To prevent fraud and license abuse (our legitimate interest).
- To measure and improve our advertising (your consent where the law requires it, otherwise our legitimate interest).
- To keep records required for tax and accounting.
Who we share it with
We use these service providers, who process data for us:
- PayPal: payments.
- Supabase (United States): database, accounts and file storage.
- Vercel: website hosting.
- Resend: sending emails (receipts, license keys, sign-in links).
- Meta (Facebook/Instagram), Google (Analytics and Ads), X (Twitter) and Reddit: measuring ad performance, only through their website tags.
Some of these providers are outside India and your country. We don't sell your personal data, and we don't share it with anyone else unless the law requires it.
Cookies and ad tracking
Our ad and analytics tags use cookies and similar technology to count visits and purchases that come from ads. If you're in the EU, EEA, UK or Switzerland, these tags load only after you agree. Everywhere else they load by default, and you can turn them off at any time.
You can also opt out directly with each platform: Meta ad preferences, Google ad settings, Google Analytics opt-out, X privacy settings and Reddit privacy settings. Blocking third-party cookies in your browser works too.
Cookie choices
Change or withdraw your choice for this site:
How long we keep it
- Purchase and license records: as long as you need your license, and up to 8 years for tax and accounting records as Indian law requires.
- Server logs: a short time, usually days.
- Your account: until you ask us to delete it. We may keep purchase records we're legally required to hold.
Your rights
Depending on where you live (including under the EU/UK GDPR and India's Digital Personal Data Protection Act, 2023), you can ask to access, correct or delete your data, object to or restrict how we use it, withdraw consent, and get a copy of it. Email hajipurtech@gmail.com and we'll reply within 30 days. You can also complain to your local data protection authority.
Security
Data is sent over encrypted connections (HTTPS). Database access is restricted, and app downloads are served only through short-lived private links.
Children
Our products aren't aimed at children under 16, and we don't knowingly collect their data.
Changes
We may update this policy. The date at the top shows the latest version. If we make important changes, we'll tell you on this page.