Privacy Policy

ApexHierarchy collects deliberately little:

• A hashed IP address — when you search for a new profile, we hash your IP address (SHA-256, one-way) and store only the hash, for one purpose: preventing abuse of our rate limits. The hash is deleted after 24 hours and is never linked to a name, account, or profile.
• An email address, only if you provide one — on a "Report incorrect information" or community-submission form, solely so we can follow up with you about that specific report or submission.
• Search query text and per-profile view counts — stored without any IP address, account, or identifier attached, so this is not personal data (there is no way for us to trace a logged search or view back to you); used only to prioritize which profiles are worth researching or double-checking.

We do not require accounts and have no user login or profile of our own for ordinary visitors. We do not run advertising trackers, and do not sell or share personal data with data brokers or advertisers. We use Vercel Analytics for aggregate page-view counts (which pages are visited, how often) — it is cookieless, does not track you across other sites, and does not collect or store any personal data about you.

Profiles on ApexHierarchy are compiled from information already public — news coverage, government and corporate filings, and similar sources, each cited on the profile. We do not collect private data about profile subjects, and being profiled does not require any action or consent from the subject. If you are the subject of a profile and want to dispute or request review of its content, use the "Report incorrect information" link on that profile — every report is reviewed by a person, and profiles are corrected, updated, or removed where warranted.

We use a small number of third-party services to operate the Site:

• Google Gemini — profile research queries (an entity's name and, where provided, a location hint) are sent to Google's Gemini API to generate grounded, cited profile content.
• Vercel — hosting and request infrastructure.
• Neon — our Postgres database provider.

Each processes data only as needed to provide their respective service to us.

If you are in the European Economic Area or UK, the GDPR gives you the right to access, correct, delete, or export any personal data we hold about you, and to object to or restrict how we process it. If you are in India, the Digital Personal Data Protection Act, 2023 gives you equivalent rights to access, correction, and erasure of your personal data (the hashed IP address above is deleted automatically within 24 hours either way; the only other personal data we hold is an email address you chose to give us on a report or submission).

To exercise any of these rights — access, correction, deletion, or export of your data — use our Complaints page (select "Data handling") or that profile's "Report incorrect information" link if it's tied to one specific profile. We do not charge a fee for a legitimate request and aim to respond within 30 days.

ApexHierarchy is not directed at children under 13, and we do not knowingly collect data from them.

We may update this Privacy Policy as the Site evolves; changes take effect when posted here.

Questions about this policy: use the "Report incorrect information" link on any profile, or our Complaints page. See also our Cookie Policy, Terms of Service, and Editorial Disclaimer.