Privacy Policy

1. Introduction

On Spot Solutions LLC ("Company," "we," "us"), operator of Apollo MC ("the Service"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our AI-powered document generation platform.

2. Information We Collect

Account Information

• Email address (used for authentication and communications)
• Full name and company name (provided during signup)

Mission Data

• Industry, deliverable type, and style selections
• Intake form responses (information you provide about your project)
• Uploaded files (reference documents, brand guides, financial data)
• Generated documents and associated metadata

Payment Information

• Payment transactions are processed by Stripe. We do not store credit card numbers, CVVs, or full card details on our servers. We retain only a Stripe customer ID and transaction references.

Automatically Collected

• Browser type, IP address, and device information
• Usage data including pages visited, features used, and session duration
• Cookies necessary for authentication and session management

3. How We Use Your Information

• To authenticate your identity and manage your account
• To process your document generation requests (missions)
• To extract content from uploaded files for document assembly
• To send transactional emails (mission status updates, delivery notifications)
• To process payments via Stripe
• To embed buyer identification watermarks in delivered files
• To improve the quality and accuracy of our AI-generated documents
• To detect and prevent fraud or misuse of the Service

4. Data Storage and Infrastructure

Your data is stored using the following services:

• Supabase — Account data, mission records, intake data, and task metadata are stored in a PostgreSQL database hosted by Supabase with row-level security enabled.
• Amazon Web Services (AWS) S3 — Uploaded files, generated documents, preview images, and build checkpoints are stored in private S3 buckets in the US East (N. Virginia) region. All public access is blocked.
• Amazon Web Services (AWS) SES — Transactional emails are sent via Amazon Simple Email Service from missions@apollomc.ai.
• Vercel — The web application is hosted on Vercel. No persistent customer data is stored on Vercel infrastructure.

5. Third-Party AI Processing

Document content is generated using the Anthropic Claude API. Your intake data and uploaded file content are sent to the Claude API for processing. Anthropic's data handling practices are governed by their own privacy policy and terms of service. We do not use your data to train AI models.

6. Stripe Payment Processing

Payment processing is handled entirely by Stripe, Inc. When you make a payment, your card information is transmitted directly to Stripe and is never stored on our servers. Stripe's privacy policy governs their handling of your payment data. For more information, visit stripe.com/privacy.

7. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

• Service providers — Supabase, AWS, Vercel, Stripe, and Anthropic, solely for operating the Service
• Legal compliance — When required by law, subpoena, or court order
• Business transfer — In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity

8. Data Retention

• Account data is retained for as long as your account is active
• Completed mission files are available for re-download while your account is active
• Build staging files are automatically deleted after 3 days
• Preview images are automatically deleted after 7 days
• Archived missions are retained for 1 year before permanent deletion
• Payment records are retained as required by applicable financial regulations

9. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Our authentication cookies are httpOnly, secure, and scoped to the apollomc.ai domain.

10. Your Rights

All Users

• Access your personal data by logging into your account
• Request correction of inaccurate personal data
• Request deletion of your account and associated data
• Withdraw consent for data processing at any time

California Residents (CCPA)

• Right to know what personal information is collected and how it is used
• Right to request deletion of personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your CCPA rights

EU/EEA Residents (GDPR)

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, contact us at support@apollomc.ai.

11. Security

We implement industry-standard security measures including encrypted data transmission (TLS), row-level security on all database tables, private S3 buckets with all public access blocked, and single-use time-limited delivery tokens for file downloads. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

12. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to your registered account address. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

14. Contact

For privacy-related questions or to exercise your data rights, contact us at: