Privacy Policy

Last updated: July 21, 2026

This explains what data ApexOS handles, why, and what your rights are. Short version: we collect what's needed to run a driving school's front office, we don't sell data to anyone, and schools own their data and can take it with them.

ApexOS is operated by Ai nesvarbu, UAB, company code 306336516, registered at Girulių g. 10-201, LT-12112 Vilnius, Lithuania. For account and website data we act as the data controller; for the student and parent data a school manages through ApexOS, the school is the controller and we process it on the school's instructions. As an EU company, we apply GDPR standards to everyone's data.

1. Who this covers

  • School owners and staff — people with ApexOS accounts.
  • Students and parents — people who book, text, chat, or call a school that runs on ApexOS. For their data, the school is the controller and ApexOS processes it on the school's behalf.
  • Visitors — people browsing apexoshq.com.

2. What we collect

  • Account data: name, email, phone, school details, login credentials (passwords are hashed; Google sign-in is available).
  • School operations data: student records the school enters or imports (names, contact details, permit information and documents where the school uses permit tracking), schedules, bookings, waitlists, lesson notes and signatures.
  • Conversations: texts, webchat, and call interactions handled for the school, including those handled by AI — these are logged so the school can review everything.
  • Payment data: processed by Stripe. Card numbers never touch ApexOS servers. We see transaction outcomes and amounts.
  • Website forms: if you use the plan picker or onboarding form, we store what you submit (answers, email) to follow up.
  • Technical basics: standard server logs (IP, timestamps) for security and debugging. The marketing site runs no advertising trackers.

3. How we use it

  • To run the Service: schedule lessons, send reminders and confirmations, answer chats and calls, refill cancelled slots, show the school its own numbers.
  • To operate AI features: conversation content is sent to our AI provider (Anthropic) to generate replies. It is used to answer on the school's behalf, not to build advertising profiles.
  • To bill subscriptions and pay schools (Stripe).
  • To support customers and improve the product.
  • Never: selling personal data, renting lists, or advertising to students and parents.

4. Who processes data for us

ApexOS runs on a small set of service providers, each processing data only to provide their function: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Twilio (text messages and calls), Anthropic (AI responses), Google Workspace (email). If this list changes materially, this page will be updated.

5. Retention and deletion

  • Active school data is kept while the school's account is active.
  • After cancellation, school data stays available for export for 90 days, then is deleted.
  • Students and parents can ask their school to correct or delete their data; schools can do this in the product or by contacting us. If you contact us directly, we'll route the request with your school and make sure it happens.
  • Opt-outs from texting (STOP) are kept permanently so we never message someone who opted out.

6. Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how it's processed. Email gedas@apexoshq.com and we'll respond within 30 days. If you're in a jurisdiction with a data-protection authority, you also have the right to complain to it.

7. Security

Data is encrypted in transit, access is restricted, payments are handled entirely by Stripe, and permit documents are stored in private storage with expiring access links. No system is perfectly secure; if a breach affects your data, we'll notify you without undue delay.

8. Children

Driving school students are often minors. Their data is entered by their school or their parent/guardian for the purpose of driving instruction, and we process it only for that purpose. We don't knowingly collect children's data for any other use.

9. Changes

Material changes to this policy will be announced to account owners by email and dated at the top of this page.

10. Contact

ApexOS · Ai nesvarbu, UAB · company code 306336516
Girulių g. 10-201, LT-12112 Vilnius, Lithuania · gedas@apexoshq.com
Lithuanian supervisory authority: the State Data Protection Inspectorate (vdai.lrv.lt).