Privacy Policy

1. Information We Collect

We collect information necessary to fulfill automated B2B data transactions and authenticate subscription access. This includes your name, corporate email address, and company name. For Enterprise clients, we also collect internal routing identifiers and technical contact details required for automated AWS S3 pipeline provisioning.

2. Commercial Data Products & Non-PII Notice

Apex Firmographics provides normalized business-to-government (B2G) firmographic intelligence derived exclusively from public federal registries, including SAM.gov, the Small Business Administration (SBA) Dynamic Small Business Search (DSBS), and USAspending.gov.

• Zero Consumer PII: Our datasets and automated delta feeds contain strictly institutional entity records, including legal business names, trade names, CAGE codes, Unique Entity Identifiers (UEI), commercial physical addresses, NAICS/PSC codes, socioeconomic program statuses, and federal contract award metrics. We do not collect, ingest, process, or distribute personal consumer data, personal phone numbers, or individual email addresses.
• Legal Basis & Audit Compliance: All commercial intelligence delivered by Apex Firmographics constitutes non-confidential public sector entity data, curated and enriched under legitimate commercial interest to support enterprise compliance reporting (including FAR 52.219-9 subcontracting requirements).

3. Third-Party Infrastructure & Processors

We do not natively store or process your credit card information. We utilize enterprise-grade infrastructure to securely orchestrate your data delivery:

• Stripe: All enterprise invoicing, checkout sessions, and financial details are securely processed by Stripe.
• Amazon Web Services (AWS): Secure file hosting, automated webhook orchestration (via EventBridge and Lambda), and IAM-scoped payload deliveries are powered by AWS.
• Neon: Customer subscription statuses, order fulfillment states, and secure delivery URIs are logged in our serverless PostgreSQL infrastructure hosted by Neon.

4. How We Use Your Data

Your information is used strictly to process Stripe transactions, provision secure S3 endpoints, deliver automated 20th-of-the-month delta updates, and provide technical support. We absolutely do not sell, rent, or lease your personal or corporate contact information to third parties.

5. Security & Authentication

We implement strict, industry-standard security measures to protect your provisioning data. Enterprise payload deliveries are authenticated via dynamically generated, time-limited presigned S3 URLs or strict IAM policy partitioning. All API, database, and storefront traffic is fully encrypted in transit via HTTPS/TLS.