Privacy Policy

Last updated: March 2026

This Privacy Policy describes how Axon Labs LLC ("we," "us," or "our"), operating as AI University, collects, uses, and protects your personal information when you use our website at apexaiu.com and related services (the "Service").

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, and profile data when you create an account
• Payment information: Billing details processed securely through Stripe and Whop (we never store full card numbers)
• Communications: Messages you send through our chat widget, support emails, or community posts
• Lead forms: Name and email when you download free resources or sign up for our newsletter

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, course progress, and interaction patterns
• Device information: Browser type, operating system, screen resolution, and device identifiers
• IP address: Used for rate limiting, fraud prevention, and approximate location
• Cookies and similar technologies: Essential cookies for authentication, analytics cookies for improving our service

2. How We Use Your Information

• Provide, maintain, and improve our courses and platform
• Process payments and manage subscriptions
• Send course updates, educational content, and service notifications
• Send marketing emails (with your consent; you can unsubscribe at any time)
• Respond to support requests and community interactions
• Analyze usage patterns to improve the learning experience
• Prevent fraud, abuse, and enforce our Terms of Service
• Power AI features (chat assistant, content recommendations)

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your data based on:

• Contract: Processing necessary to provide the Service you purchased
• Consent: Marketing emails and non-essential cookies (you can withdraw consent at any time)
• Legitimate interest: Analytics, fraud prevention, and service improvement
• Legal obligation: Tax and financial record-keeping

4. Third-Party Data Processors

We share your data with the following third-party services that process data on our behalf:

We do not sell your personal information to third parties. We do not share your data with third parties for their own marketing purposes.

5. Data Retention

• Account data: Retained for as long as your account is active, plus 30 days after deletion
• Payment records: Retained for 7 years for tax and legal compliance
• Lead/email data: Retained until you unsubscribe or request deletion
• Chat messages: Not stored permanently; processed in real-time and discarded
• Analytics data: Aggregated and anonymized after 26 months
• Error logs: Retained for 90 days

6. Your Rights

6.1 All Users

Regardless of your location, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your account and personal data
• Unsubscribe from marketing emails at any time

6.2 EEA/UK/Swiss Residents (GDPR)

You additionally have the right to:

• Data portability — receive your data in a machine-readable format
• Restrict processing of your personal data
• Object to processing based on legitimate interest
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with your local Data Protection Authority

6.3 California Residents (CCPA/CPRA)

Under California law, you have the right to:

• Know what personal information we collect and how it is used
• Delete your personal information
• Opt out of the "sale" of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

In the preceding 12 months, we have collected the categories of information described in Section 1. We have not sold personal information to third parties.

7. Cookies

7.1 Essential Cookies

Required for authentication and core functionality. Cannot be disabled.

7.2 Analytics Cookies

Help us understand how visitors use our site. You can disable these in your browser settings or by using a cookie consent tool.

7.3 Marketing Cookies

Used to deliver relevant ads and track campaign performance. Only set with your consent.

8. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Encrypted databases with row-level security (Supabase)
• Payment data processed by PCI-DSS compliant providers (Stripe)
• Rate limiting and abuse prevention on all endpoints
• Regular security audits and error monitoring (Sentry)

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. For EEA/UK transfers, we rely on Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.

10. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact Us

For privacy questions, data requests, or to exercise your rights, contact us at:

Axon Labs LLC
Email: support@apexaiu.com
Subject line: "Privacy Request"

We will respond to all privacy requests within 30 days (or sooner as required by applicable law).