Privacy Policy

Last updated: 07-10-2026

This policy explains what we collect, why, and what your choices are — across araptus.com, dashboard.araptus.com, and the services we operate for our clients. Short version: we collect what we need to run secure services, we don't sell your data, and we don't use your data to train AI models.

Information You Give Us

Contact and lead details — name, email, phone, business name, and anything you submit through contact, booking, outreach, or audit-request forms. Account information — the email address used for sign-in (we use passwordless magic links; we never store a password for you). Communications — messages you send us through dashboard chat, email, SMS, or feedback tools, including screenshots you submit through our feedback widget. Payment details — handled by Stripe; we see billing status and invoice metadata, never your full card number. AI assistant conversations — if your plan includes the AI assistant, your conversations are stored in your account so you can continue them; if you connect your own AI provider key, your use of it is also subject to that provider's terms.

Information Collected Automatically

Usage and analytics — pages visited, referrers, approximate location (country/region), and device type, via privacy-respecting analytics. Security data — IP addresses, request logs, and device characteristics (such as browser, screen, timezone, and platform, combined into a device fingerprint); we use these to verify trusted devices, detect attacks, and block abuse, and IP addresses may be checked against threat-intelligence services. Email engagement — our newsletters and some service emails include an open-tracking pixel and tracked links so we know what's useful; you can opt out of marketing email at any time. Cookies — essential cookies only: session sign-in and a device-verification cookie (valid up to 30 days). We do not use third-party advertising cookies.

Data We Process for Our Clients

When we operate services for a client business (their CRM, booking, or website forms), the personal data inside belongs to that business — we process it on their behalf under our data-processing terms, and their privacy policy governs it. If you are a customer of one of our clients, contact that business first.

How We Use Your Information

To provide, secure, and support our services; to respond to inquiries and deliver proposals; to bill for services; to send service notifications; to send marketing you've opted into; to protect our systems and users from fraud and attack; and to comply with law. We do not sell personal data, share it for targeted advertising, or use it to train AI models.

SMS / Text Messaging

If you opt in to text messages (by submitting a form with SMS consent or texting a keyword to our number): message frequency varies; message and data rates may apply; reply STOP to opt out at any time and HELP for help. Consent to SMS is not a condition of purchasing anything. We keep records of opt-ins and opt-outs.

Who We Share It With

Only service providers that help us run the platform, bound to use your data solely for that purpose: Vercel (hosting), Supabase (database and authentication), Stripe (payments), Twilio (SMS), SMTP2Go / Resend (email), Google (search and performance APIs), Cloudflare (security and delivery), Anthropic (AI assistant processing, where enabled), and AbuseIPDB (IP threat intelligence). We may also disclose information when required by law, or to protect our rights, users, and systems. If Araptus is ever sold or merged, data transfers with the business under this same policy.

How Long We Keep It

Account and client records: for the life of the relationship plus any legally required period. Leads that never become clients: up to 24 months. Security logs: up to 12 months. Marketing lists: until you unsubscribe. Backups age out on a rolling 35-day cycle. When we operate data for a client business, its service agreement's export-and-deletion terms control.

Security

Each client runs on dedicated, isolated infrastructure — their own database project and keys, not shared with anyone else. We use encryption in transit, multi-factor authentication and device verification for administrative access, role-based access, and continuous security monitoring. No system is perfectly secure; if a breach affects your personal data, we will notify you as the law requires.

Your Rights and Choices

You have the right to know what personal data we hold about you, where it came from, and who we shared it with; the right to delete your personal data; the right to correct data that is wrong; the right to data portability — a copy in a portable format; the right to opt out of analytics, marketing email, and SMS; and the right to non-discrimination for exercising any of them. To exercise any right, email info@araptus.com and we'll respond within 30 days — if we refuse, you have a right to appeal by replying to our decision. You can also unsubscribe from marketing via the link in any email, opt out of SMS by replying STOP, and manage analytics and cookies on our Your Privacy Choices page. We honor rights available under applicable law, including the Texas Data Privacy and Security Act.

Children

Our sites and services are for businesses and are not directed to children under 13. We don't knowingly collect children's data; if you believe we have, contact us and we will delete it.

Changes To This Privacy Policy

We will post updates here with a new effective date, and for material changes we will notify account holders by email or dashboard notice.

Contact Us

For privacy-related questions or data requests: info@araptus.com · 281-846-4097 · Araptus, Alvin, TX.

Your Privacy Matters

We take your privacy seriously and are committed to maintaining the trust and confidence of our visitors to our website.

Insights from Araptus: Our Blog

Discover new experience of web development.

Latest from Our Blog

My Company Shares a Name With 185 Beetles. Reddit Would Say I'm Doomed.

185 entities in the database behind Google's knowledge graph carry my company's name, and every one is a bark beetle. I audited what that actually does to search and AI answers — and found the real problem somewhere else entirely.

By Kris Black • 8/10/2026

Does the Vercel Firewall Actually Work? Reddit Asks — Here Are 96 Days of Logs

Reddit asks this constantly and nobody posts numbers. Here are mine: 238 probe events from rented cloud servers in 39 days, then zero for the next 57 — with a public third-party record to check it against.

By Kris Black • 8/10/2026

Where Does Bot Traffic Actually Come From? Reddit Asks — I Resolved Every Address

I looked up the network owner of all 194 addresses that touched my system in 96 days. 87% of the hostile ones were rented cloud servers. 90% of everyone else was a home internet connection.

By Kris Black • 8/10/2026

Only the Defender Is Disarmed: The Hugging Face AI Breach and the Guardrail Asymmetry Problem

An autonomous AI agent escaped its sandbox and breached Hugging Face. Then the safety guardrails blocked the defenders — not the attacker. Here's why that asymmetry is a national security problem.

By Araptus Team • 7/29/2026

You Want This!

Transform Your Business Today

Get started with enterprise-grade development solutions.

Or schedule a call: Book a Consultation
24hr Response
Free Consultation
Enterprise Grade
Privacy Policy