Privacy Policy

Apixor is a product of Invoir Inc., a corporation incorporated in the State of Texas, United States. When this policy refers to "we," "us," or "our," it means Invoir Inc. and the Apixor service.

We operate the Apixor platform, which provides third-party API monitoring and alerting services accessible at apixor.ai.

We collect the following categories of information:

• Account information — name, email address, and password when you register.
• OAuth credentials — access tokens granted when you connect a third-party integration (e.g., Stripe, Salesforce, HubSpot). These are encrypted at rest and never logged in plaintext.
• API monitoring data — latency samples, error rates, and endpoint metadata collected from your connected integrations.
• Billing information — payment details processed by Stripe. We do not store card numbers; Stripe handles all payment data under their own PCI-DSS compliance.
• Usage data — log data such as IP addresses, browser type, pages visited, and timestamps, used to operate and improve the service.

We use the information we collect to:

• Provide, operate, and improve the Apixor service.
• Monitor your connected integrations and generate alerts.
• Process payments and manage your subscription.
• Send transactional emails (alerts, incident notifications, billing receipts).
• Respond to support requests sent to support@apixor.com.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

We do not sell your personal data to third parties. We do not use your API monitoring data for any purpose other than providing the service to you.

Each customer's data is row-level isolated in our database. Your incidents, baselines, credentials, and configuration are never accessible to or co-mingled with other customers' data.

We use industry-standard encryption in transit (TLS 1.2+) and at rest. OAuth tokens are encrypted using AES-256 before storage. Access to production systems is restricted to authorized personnel only.

We retain your account data and monitoring history for as long as your account is active. If you cancel your account, we will delete your personal data and monitoring data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

We use the following third-party services to operate Apixor:

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Hosting providers — cloud infrastructure for storing and processing your data within the United States.
• Transactional email providers — for delivering alert and billing emails.

We use essential cookies to maintain your session after login. We do not use advertising or tracking cookies. We do not use third-party analytics services that track you across other websites.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Object to or restrict certain processing.

To exercise any of these rights, email us at support@apixor.com. We will respond within 30 days.

Apixor is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the application. Your continued use of Apixor after the effective date of the updated policy constitutes acceptance of the changes.

If you have questions about this Privacy Policy, please contact us at: