Privacy Policy

This Privacy Policy describes how APPHERO TECH LLC, a Nevada limited liability company ("apphero", "we", "us"), collects, uses, shares and protects personal data through the apphero.tech website, our email communications and our commercial relationships. Our Canadian affiliate, 9538-6066 Québec inc., applies the same practices to the relationships it manages.

Product-specific policies, such as the Spread Privacy Policy, govern data processed inside a customer's Salesforce organization. In that context the customer is the data controller and apphero acts as a processor under a separate agreement.

1. Data we collect

• Contact and inquiry data — name, email address, organization, role, phone number and message content submitted through our contact, webinar and event forms.
• Recruitment data — the information and résumé provided when applying to a position through apphero.tech/careers.
• Business relationship data — contact details and exchanges with prospects, customers and partners, recorded in our customer relationship management system.
• Email engagement data — delivery, open and click events for the emails we send, together with subscription and unsubscription records.
• Technical data — IP address, browser type and device information processed by our hosting provider to deliver and secure the website.

2. Purposes and legal bases

apphero does not sell personal data and does not use it to train machine learning models.

3. Email communications

Our marketing emails are sent through Zoho Campaigns from the authenticated domain apphero.tech. Each email records delivery, opens and link clicks for each recipient. These measurements serve to assess the relevance of our communications and to maintain list quality.

Every commercial email identifies apphero, includes our postal address and contains a one-click unsubscribe link. Unsubscription requests take effect immediately and are honored in all cases within ten business days, in accordance with the U.S. CAN-SPAM Act and Canada's Anti-Spam Legislation (CASL). Consent obtained under CASL is documented and retained.

4. Service providers

We rely on a limited set of service providers, each bound by contractual data protection commitments:

• Salesforce, Inc. — customer relationship management;
• Zoho Corporation — email campaigns, accounting and human resources administration;
• Google LLC — Google Workspace email, calendar and documents;
• Lovable and its hosting infrastructure — website hosting, forms and application storage;
• Cloudflare, Inc. — domain name services.

5. Cookies and local storage

The website uses only the storage strictly necessary for its operation: display preferences, such as the light or dark theme, and the session of signed-in customers. apphero.tech uses no advertising cookies and no third-party tracking.

6. International transfers

apphero operates from the United States and Canada. Where personal data originating in the European Union, the United Kingdom or Québec is transferred outside its jurisdiction of origin, the transfer relies on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the privacy impact assessment required by Québec's Law 25.

7. Retention

• Inquiry and business relationship data: for the duration of the relationship, then three years after the last interaction.
• Email engagement data: for as long as the recipient remains subscribed, then three years after unsubscription, the suppression record being retained to guarantee that no further email is sent.
• Recruitment data: two years after the end of the recruitment process, unless the applicant requests earlier deletion.
• Contract and accounting records: for the periods required by tax and corporate law.

8. Security

Access to personal data is limited to authorized personnel, protected by multi-factor authentication and encrypted in transit. Our sending domain is authenticated by SPF, DKIM and DMARC.

9. Your rights

Depending on your jurisdiction, you may request access to your personal data, its correction, its deletion, the restriction of its processing or its portability, and you may object to its processing or withdraw your consent at any time.

• European Union and United Kingdom (GDPR) — you may also lodge a complaint with your supervisory authority.
• Québec (Law 25) — the person in charge of the protection of personal information at apphero can be reached at the address below; you may also contact the Commission d'accès à l'information du Québec.
• United States — residents of states with consumer privacy laws, including California, may exercise the rights those laws provide. apphero does not sell or share personal data for cross-context behavioral advertising.

We respond to every request within thirty days.

10. Contact

Privacy requests — info@apphero.tech

APPHERO TECH LLC
732 S 6th St, Ste N
Las Vegas, NV 89101, USA

11. Changes to this policy

We update this policy when our practices change. The date at the top of the page indicates the current version; material changes are announced on this page before they take effect.