1. Introduction

CPApex ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform and website.

2. Information We Collect

We collect information in the following categories:

Account information: Name, email address, firm name, phone number.
Usage data: Pages visited, features used, login timestamps.
Client data: Data you input about your clients and engagements — this is your data and you control it.
Payment information: Processed by our PCI-compliant payment processor; we do not store card numbers.
Device and log data: IP address, browser type, operating system.

3. How We Use Your Information

To provide, maintain, and improve CPApex services
To process payments and send billing communications
To send product updates, security notices, and support messages
To comply with legal obligations
To analyze usage patterns and improve the platform

4. Data Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS encryption in transit, regular penetration testing, and SOC 2 compliant infrastructure. However, no system is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active. Upon cancellation, data is retained for 30 days and then permanently deleted unless required by law.

6. Sharing Your Information

We do not sell your personal information. We may share information with trusted service providers who help us operate CPApex (e.g., cloud infrastructure, payment processors) under strict confidentiality agreements.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access, correct, or delete your personal information
Export your data in a portable format
Opt out of marketing communications
Restrict or object to processing

8. Cookies

We use essential cookies for authentication and session management, and optional analytics cookies (with your consent) to improve the platform.

9. Children's Privacy

CPApex is not intended for users under 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or in-app notice at least 30 days before they take effect.

11. Contact Us

For privacy-related questions, contact our Privacy Officer at privacy@cpapex.com.