Privacy Policy

Last updated: 07-10-2026

This policy explains what we collect, why, and what your choices are — across araptus.com, dashboard.araptus.com, and the services we operate for our clients. Short version: we collect what we need to run secure services, we don't sell your data, and we don't use your data to train AI models.

Information You Give Us

Contact and lead details — name, email, phone, business name, and anything you submit through contact, booking, outreach, or audit-request forms. Account information — the email address used for sign-in (we use passwordless magic links; we never store a password for you). Communications — messages you send us through dashboard chat, email, SMS, or feedback tools, including screenshots you submit through our feedback widget. Payment details — handled by Stripe; we see billing status and invoice metadata, never your full card number. AI assistant conversations — if your plan includes the AI assistant, your conversations are stored in your account so you can continue them; if you connect your own AI provider key, your use of it is also subject to that provider's terms.

Information Collected Automatically

Usage and analytics — pages visited, referrers, approximate location (country/region), and device type, via privacy-respecting analytics. Security data — IP addresses, request logs, and device characteristics (such as browser, screen, timezone, and platform, combined into a device fingerprint); we use these to verify trusted devices, detect attacks, and block abuse, and IP addresses may be checked against threat-intelligence services. Email engagement — our newsletters and some service emails include an open-tracking pixel and tracked links so we know what's useful; you can opt out of marketing email at any time. Cookies — essential cookies only: session sign-in and a device-verification cookie (valid up to 30 days). We do not use third-party advertising cookies.

Data We Process for Our Clients

When we operate services for a client business (their CRM, booking, or website forms), the personal data inside belongs to that business — we process it on their behalf under our data-processing terms, and their privacy policy governs it. If you are a customer of one of our clients, contact that business first.

How We Use Your Information

To provide, secure, and support our services; to respond to inquiries and deliver proposals; to bill for services; to send service notifications; to send marketing you've opted into; to protect our systems and users from fraud and attack; and to comply with law. We do not sell personal data, share it for targeted advertising, or use it to train AI models.

SMS / Text Messaging

If you opt in to text messages (by submitting a form with SMS consent or texting a keyword to our number): message frequency varies; message and data rates may apply; reply STOP to opt out at any time and HELP for help. Consent to SMS is not a condition of purchasing anything. We keep records of opt-ins and opt-outs.

Who We Share It With

Only service providers that help us run the platform, bound to use your data solely for that purpose: Vercel (hosting), Supabase (database and authentication), Stripe (payments), Twilio (SMS), SMTP2Go / Resend (email), Google (search and performance APIs), Cloudflare (security and delivery), Anthropic (AI assistant processing, where enabled), and AbuseIPDB (IP threat intelligence). We may also disclose information when required by law, or to protect our rights, users, and systems. If Araptus is ever sold or merged, data transfers with the business under this same policy.

How Long We Keep It

Account and client records: for the life of the relationship plus any legally required period. Leads that never become clients: up to 24 months. Security logs: up to 12 months. Marketing lists: until you unsubscribe. Backups age out on a rolling 35-day cycle. When we operate data for a client business, its service agreement's export-and-deletion terms control.

Security

Each client runs on dedicated, isolated infrastructure — their own database project and keys, not shared with anyone else. We use encryption in transit, multi-factor authentication and device verification for administrative access, role-based access, and continuous security monitoring. No system is perfectly secure; if a breach affects your personal data, we will notify you as the law requires.

Your Rights and Choices

You have the right to know what personal data we hold about you, where it came from, and who we shared it with; the right to delete your personal data; the right to correct data that is wrong; the right to data portability — a copy in a portable format; the right to opt out of analytics, marketing email, and SMS; and the right to non-discrimination for exercising any of them. To exercise any right, email info@araptus.com and we'll respond within 30 days — if we refuse, you have a right to appeal by replying to our decision. You can also unsubscribe from marketing via the link in any email, opt out of SMS by replying STOP, and manage analytics and cookies on our Your Privacy Choices page. We honor rights available under applicable law, including the Texas Data Privacy and Security Act.

Children

Our sites and services are for businesses and are not directed to children under 13. We don't knowingly collect children's data; if you believe we have, contact us and we will delete it.

Changes To This Privacy Policy

We will post updates here with a new effective date, and for material changes we will notify account holders by email or dashboard notice.

Contact Us

For privacy-related questions or data requests: info@araptus.com · 281-846-4097 · Araptus, Alvin, TX.

Your Privacy Matters

We take your privacy seriously and are committed to maintaining the trust and confidence of our visitors to our website.

Insights from Araptus: Our Blog

Discover new experience of web development.

Latest from Our Blog

The Machines Are Searching — and They're Not Reading Reddit

We published three pages to test whether AI assistants append 'reddit' to their searches. They don't. Here is a quarter of Search Console data showing what the machines actually type — enumerated batch strings, whole pasted buyer personas, quoted operator syntax — and the modifier that did work.

By Araptus Team • 9/7/2026

Your Data Is in a Database With Ten Thousand Strangers

In almost every business tool you rent, your records and your competitor's sit in the same table. What separates them is a condition in a query that a developer has to get right every single time. Here is what multi-tenancy actually means, why row-level security is a real control that still fails, and what per-client isolation costs.

By Araptus Team • 9/7/2026

Your Website Has No Database to Hack

Most website security is about defending an attack surface. The cheaper answer is not to have one. How static-first architecture removes the database, the CMS login and the plugin layer entirely — and what we learned building honeypots on a site with no server.

By Araptus Team • 9/7/2026

AI Agent Incidents | Nobody Is Going to Tell You | Araptus

Four AI agent incidents in two months and no way to tell which are related. The not-knowing is structural — and it is why you must instrument your own edge.

By Kris Black • 9/6/2026

You Want This!

Transform Your Business Today

Get started with enterprise-grade development solutions.

Or schedule a call: Book a Consultation
24hr Response
Free Consultation
Enterprise Grade
Privacy Policy