What we collect, and what we don't.

Aptexis LLC operates the Aptexis program and this website. In this policy "we" and "us" mean Aptexis LLC, and "you" means anyone who visits the site, applies to the program, or holds a student account.

We are the controller of the personal information described here. Questions, requests, and complaints go to info@aptexis.com.

Your account: your name and email address, so we can identify you and contact you. Your password is handled entirely by our authentication provider — we never receive, see, or store it.

Your application: your experience level, the program you are applying to, and what you write in the "why now" field. We read it to understand who is joining and where you are starting from, so the help we give you fits.

Your enrollment agreement: the full legal name you type, the signature you draw, the date and time you signed, and a one-way SHA-256 hash of the IP address you signed from. We store the hash, not the address, because the only thing we need it for is showing that two signings came from the same place — which a hash does without keeping the address itself.

Your application fee: the date it was paid, the amount, and the Stripe identifiers for the payment. Card details are entered on Stripe's own page and never reach us. If you ask us to waive the fee, we keep what you wrote and our decision, so the reason it was or was not waived can be looked up later.

Your progress: which steps you have completed, and your quiz attempts and scores. This is what unlocks the next step, and what tells us whether the curriculum is working.

Your mentor sessions: the mentor you picked, the time you asked for, your browser's time zone, the topic, what you wrote about what you are stuck on, and the week you were on when you asked. The mentor you chose sees all of it, because that is the point of asking. It reaches them by email, with a calendar invite attached.

Your conversations with the study assistant: what you type is sent to our AI provider along with your first name, your track, and the lesson you are on, so the answer is about the step in front of you. We do not write those conversations to our database — once the answer has streamed back, our only copy is the one in your browser window.

Your resume checks: the file you upload is read, analysed, and discarded — we do not keep the document. We keep the filename, the score, the word count, whether you supplied a job description, and the report we generated, so you can see your score move over time.

Security records: a short-lived log of sign-in and application attempts, keyed by the email address used. It exists to slow down password guessing, and entries are deleted once they age out of the fifteen-minute window they are counted in.

We do not sell your personal information, and we do not share it for advertising. We run no advertising pixels, no third-party analytics, and no cross-site tracking of any kind.

We do not use your information to train an AI model, and neither does our AI provider: the study assistant runs on Anthropic's API under terms that forbid training on what is sent through it. What is sent, and when, is described above and in "Who processes it for us" below.

The chat box on the public marketing site is a different thing from the study assistant inside your dashboard. It answers from a fixed list of questions and answers built into the page — what you type into that one never leaves your browser and never reaches us or anyone else.

Supabase, for the database, the authentication system that holds your password, and the private file storage that holds your signature image and signed agreement PDF.

Resend, for sending email. We send a receipt when you apply, our decision on your application, password resets, and the emails around a mentor session — the request to your mentor, and the confirmation, decline, or cancellation back to you, each with a calendar invite attached. Your email address and the contents of those messages pass through it. Your signed agreement is never emailed — it is downloaded from your dashboard — so it never leaves our storage.

Anthropic, for the study assistant in your dashboard. Your question, the conversation you are having with it, your first name, your track, and an extract of the lesson you are on are sent to its API to produce each answer. It processes them to return that answer and does not train on them. If we ever switch this to another provider, this policy changes in the same commit.

Stripe, for taking the application fee. You enter your card details on a page hosted by Stripe, not by us — we never see or store a card number. Stripe tells us that a payment succeeded and returns identifiers for the payment, which we keep as the record that the fee was paid.

Cloudflare, for the bot check on the apply form. When you submit an application, Cloudflare receives your IP address and signals about your browser so it can tell a person from a script. It does not receive your name, your email, or anything you typed into the form, and we use it only to decide whether to accept the submission.

Our hosting provider, which runs the application and keeps standard server logs.

Each of these processes your information on our instructions and for no other purpose. Some may store or process data outside your country, including in the United States.

Part of what we do for enrolled students is market them to employers and to our own contacts, put their names forward for roles, and prepare them for interviews. That work happens by hand, off the platform, and it necessarily means giving other people information about you: your name and contact details, your resume, what you built during the program, and how you are getting on.

We only do it for students who want it, we agree with you what goes out before it does, and you can tell us to stop at any time by emailing info@aptexis.com — that costs you nothing else under your enrollment agreement. We do not sell your details to recruiters, and we do not pass them to anyone who is not a genuine prospective employer or a contact we are approaching about a specific role.

An employer we introduce you to becomes responsible for your information in their own right, under their own privacy policy, and what they do with it after that is outside our control.

We set one cookie of our own: the session cookie that keeps you signed in. Your light or dark theme preference is stored in your browser and never sent to us. There are no advertising or analytics cookies.

The bot check on the apply form may set a short-lived Cloudflare cookie while it runs. It exists to carry the result of that one check and is not used to track you between sites.

Course videos are embedded from YouTube using its privacy-enhanced domain, which means YouTube sets no cookies until you press play. Once you do, your viewing of that video is subject to Google's privacy policy, not ours.

Account, application, and progress records are kept while your account exists, and deleted when you ask us to close it.

Your signed enrollment agreement, signature image, and the signing metadata are kept for as long as Aptexis LLC may need them to establish the terms you agreed to, which can outlast your account. This is the one category we cannot delete on request while the agreement is still capable of being relied on.

Resume reports and mentor session records are kept until you delete them or close your account. Security records are deleted as they age out. Study assistant conversations are not kept by us at all.

You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or ask us to send it to you in a portable form. Email info@aptexis.com and we will respond within thirty days.

Depending on where you live, you may have further rights under laws such as the GDPR or the California Consumer Privacy Act — including the right to object to processing and the right to complain to your data protection authority. We will honour those rights whether or not the law in question applies to us.

Passwords are stored and verified only by our authentication provider, never by us. Signature images and signed agreements are held in private storage that is unreadable without going through this application, which checks who you are first. Sign-in attempts are rate limited.

No system is perfectly secure. If a breach affects your personal information, we will tell you and the relevant authority as promptly as the law requires.

The program is not for people under 18, and we do not knowingly collect information from them. If you believe a minor has given us information, email info@aptexis.com and we will delete it.

If we change this policy in a way that materially affects you, we will email you before it takes effect. The effective date at the top always reflects the current version.