Contracts
Privacy Policy
Effective December 9th 2024
DownloadTable of Contents
APEX Analytix, LLC Privacy Policy
APEX Analytix, LLC (“APEX,” “we”, or “us”) is sensitive to your concerns about how we use the personal information we collect from you through our website, www.apexanalytix.com (the “Site”) and applications, APIs, or services exchanging information with APEX, including but not limited to apexESG, smartvm, Cyber Risk, AuditView, and any other services sold by APEX or its authorized resellers (“Services”). The Site and Services are sometimes collectively referred to as “Online Services”.
This Privacy Policy is specific to APEX and its headquarters located in the United States and covers APEX’s treatment of the Personal Information (defined below) we collect when you access and use the Online Services (visitors may also be referred to as “you” or “your”). It also governs your visit to the Site and describes the choices available regarding our use of your Personal Information and how you can access and update this information. We are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute an invasion of your privacy.
By using the Online Services, you accept all of the terms of this Privacy Policy. If you do not agree with any terms of this Privacy Policy, do not use the Site or submit any Personal Information through any of our Services.
If you have questions or concerns about the Privacy Policy, please contact us at privacy@apexanalytix.com.
For purposes of data protection laws, APEX Analytix, LLC, 1501 Highwoods Blvd., Suite 200, Greensboro, North Carolina 27410, is the entity responsible for your information.
What Information Do We Collect?
Information You Provide to Us
"Personal Information" (also referred to as “Personal Data”) means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
APEX does not collect Personal Information unless you voluntarily provide it to us, and you may be required to provide us with Personal Information to access and use some of our Services. We collect Personal Information from you when you choose to interact with us. You can provide such information by completing inquiry and/or registration forms or by writing or emailing us. The type of Personal Information collected through our Online Services varies but may include, among other things, your name, address, phone number, company affiliation, and e-mail address.
Information We Collect Automatically
As you interact with the Online Services, we may also collect information automatically about your visit to our Site and/or use of the Services. This information is not Personal Information, but it may disclose aspects of your browsing history or certain information about you, such as an Internet Protocol (“IP”) address and publicly available information (collectively, the "Non-Personal Data"). Non-Personal Data is only used in aggregate form.
Information from Other Sources
We may collect information about you from third parties, such as resellers, marketing partners, customers, and researchers. Our resellers may provide information about you, such as your contact data, to facilitate contracting through our Online Services. We may combine this information with information we collect from you and use it as described in this Privacy Policy.
How Do We Use the Information We Collect?
We use the information we collect from the Online Services, including Personal Information, to:
- provide you with the Online Services;
- contact you when necessary, such as to provide answers to your questions or provide support;
- provide personalized service, such as by answering your emails or online requests;
- deliver and conduct surveys or evaluations;
- analyze and improve the Online Services or any other products and services we provide;
- provide information or materials regarding the Online Services;
- extend invitations to marketing events;
- register for a webcast or other event;
- provide access to content and news from APEX from time to time;
- consider your application for employment with APEX;
- analyze the behavior, habits, and preferences of persons who contact or interact with us to improve our service offerings;
- comply with our legal obligations or as permitted by law;
- protect the safety and/or integrity of our users, employees, third parties, members of the public, and/or the Online Services; and
- prevent fraud and enforce our legal terms.
We also use Non-Personal Data for various purposes, including helping diagnose problems with our server(s), building marketing profiles, aiding strategic development, administering and auditing usage of the Online Services, and improving their usability.
We may combine the information we collect from you through the Online Service with information obtained from other sources. We may also aggregate and/or de-identify information collected through the Online Services. De-identified or aggregated data may be used for any purpose, including, but not limited to, research and marketing purposes.
How Do We Disclose the Information We Receive?
Except as disclosed here, we do not rent, sell, or disclose your Personal Information to third parties. We disclose Personal Information as follows:
Third Parties, including Third Party Marketing
Unless specifically authorized by you, we do not provide Personal Information to third parties for marketing purposes. If we use a third-party service provider to provide any of the processing of Personal Data set forth herein, any third parties that we may share your data with are obliged to keep your details securely and to use them only to fulfill the Service they provide you on our behalf. When they no longer need your data to provide this service, they will dispose of the details in line with our procedures and applicable law. If you express interest in a third-party offer or purchase a package that includes a third-party offer, we may provide your Personal Information to that third party solely in connection with the offer you have selected.
Required by Law
We reserve the right to disclose your Personal Information as required by law, such as in response to lawful requests by public authorities, including law enforcement agencies, or if we are required to do so by law under regulation, a subpoena, court order, or by a government entity, including any requirement to meet national security requirements, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a legal request. In these circumstances, we may also share your Personal Information with our professional advisors.
Other Transfers
We may disclose Personal Information and other data to businesses controlling, controlled by, or under common control with us. If we are merged, acquired, or sold, or if some or all of our assets or equity are transferred, we may disclose or transfer Personal Information and other data in connection with the associated transactions.
Bankruptcy
In the event of an APEX bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or applying laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your personal information is treated, transferred, or used. If such an event occurs, your Personal Information may be treated like any other APEX asset and sold, transferred, or disclosed to third parties in accordance with applicable law or used in ways not contemplated or permitted under this Privacy Policy. In this case, you will be notified via email and/or a prominent notice on our Site and in our Legal Center of any change in ownership or uses of your personal information, and any choices you may have regarding your personal information.
Consent
In addition to the disclosures described in this Privacy Policy, we may disclose information about you whenever you consent to or direct such disclosure.
Uploading Content
You are solely responsible for the Personal Information and other content you post on or through the Online Services. You warrant that you have permission to upload any third-party information, and you agree to indemnify, defend, and hold harmless APEX and its affiliates, owners, directors, and personnel from and against any claim, liability, cost, and expense arising in connection with your provision of that information.
Do Not Track Requests; Third-Party Tracking (applicable to the Site)
We cannot presently omit you from usage analytics to the extent your browser only sends us a “do not track” message and does not otherwise screen you from tracking without any action on our part. Third parties, other than our vendors (such as our website analytics provider), do not have authorization from us to track which websites you visited before and after visiting the Site. That said, we cannot control third-party tracking, and some third-party tracking may occur without our knowledge or consent.
Use of Cookies and Third-Party Websites
We may maintain links to other websites and other websites may maintain links to the Online Services. This Privacy Policy applies only to the Site and not to other websites accessible from us or that you use to access our Online Services, each of which may have privacy policies materially different from this Privacy Policy. If you visit other websites, we are not responsible for the privacy practices or content of those sites. You are responsible for reviewing non-APEX website privacy policies to confirm that you understand and agree with them.
We may use cookies and certain visit recognition software services, such as Google Analytics and LeadLander, to improve the functionality of our Site and build a demographic profile. A cookie is a small piece of information sent by a web server to a web browser, enabling the server to collect information from the browser. You can configure your browser to reject cookies by modifying your browser settings, but if your browser settings do not accept cookies from us, then some Site functions may not operate as intended. Please be aware that the information sent by your browser as part of a web page request, including cookies and your IP address, may be collected through Google Analytics. In that case, Google will also receive this information, and Google's privacy policy governs its use.
Your Options (under the laws of the EU, EEA, UK and Switzerland)
Under the laws of certain countries, you may have certain rights and choices regarding the Personal Information we collect and maintain about you, and how we communicate with you.
If you are a resident of the European Union (“EU”), the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, you can request the following information regarding the Personal Information we store about you and how it is processed:
- Identity and the contact details of the person or organization that has determined how and why to process your data. (In some cases, this will be a representative located in the EU).
- Contact details of the data protection officer, where applicable.
- The purpose of the processing and the legal basis for processing.
- If the processing is based on the legitimate interests of APEX or a third party, information about those interests.
- The categories of Personal Data collected, stored, and processed.
- Recipient(s) or categories of recipients to whom the data is/will be disclosed
If we intend to transfer Personal Data to a third country or international organization, we must ensure this is done securely. The EU has approved sending Personal Data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure specific measures are in place to secure your information. To this end, we need certain information to transfer the Personal Data:
- How long will the data be stored?
- Details of your rights to access, correct, erase, restrict, or object to such processing.
- Information about your right to withdraw consent at any time.
- How to lodge a complaint with the supervisory authority.
- Whether the provision of Personal Data is a statutory or contractual requirement or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the Personal Data and the possible consequences of failing to provide such data.
- The source of Personal Data, if it was not collected directly from you.
Any details on automated decision-making, meaningful information about the logic involved, and the significance and expected consequences of such processing may be requested by the Data Subject. To make such a request, please contact us as described in this Privacy Policy's “Contact Us” section.
We will implement the requested changes as soon as possible, subject to reasonable limitations, such as the need to verify your identity. When you edit or change your preferences, the data you remove may remain in our databases or backup media because it is impossible to completely remove or delete data from these locations.
You have the right to decline to share certain Personal Information with us, but we may not be able to provide you with some of the features and functionality of the Online Services.
You can also opt out of receiving future promotional communications and marketing from us. You may receive periodic email newsletters from us. These newsletters contain information on new features and facilities of note at the Site and within the Online Services. You can opt out of receiving such mailings. The registration forms allow you to tick a box if you do not wish to receive information about our services. If you receive electronic notifications from us through an email list, each message will include instructions on how to unsubscribe from that list. Your choice not to receive future promotional and marketing material will not prevent us from corresponding with you, by email or otherwise, regarding your existing or past business relationships with us.
Data Retention
We will process Personal Data for the period considered strictly necessary to provide the Services and to comply with applicable law. We will endeavor to keep your information accurate and up to date and not keep it longer than necessary. At a minimum, we will retain your information for as long as needed to provide you with the Services and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Therefore, we may maintain some or all of this data in our archives even after removing it from the Online Services. Personal Data processed to provide the Services may be stored for a longer period to enable any disputes concerning the provision of the Service to be handled. We will keep Personal Data processed for marketing purposes from the point at which the data subject provides his/her consent until this consent is revoked or we no longer deem the data to be accurate and up to date, whichever is earlier. Personal Data processed with a job application will only be retained for a year after the position is filled or until the data subject revokes his/her consent, whichever is earlier. If consent is revoked, the Personal Data may no longer be processed for the purposes. However, they may still be stored to comply with local regulations and provisions that the local Data Protection Authority may establish from time to time.
Data Security
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put physical, electronic, and managerial procedures in place to safeguard the information we collect. We strive to ensure our servers and connections (to our servers) incorporate industry-standard encryption and security devices. The Internet, however, cannot be guaranteed to be completely secure; therefore, we cannot warrant the security of any Personal Information you provide. Accordingly, you provide this information at your own risk. WE DISCLAIM LIABILITY FOR THE THEFT, LOSS, OR INTERCEPTION OF OR UNAUTHORIZED ACCESS OR DAMAGE TO YOUR DATA OR COMMUNICATIONS BY USING THE SITE AND/OR OUR ONLINE SERVICES. YOU ACKNOWLEDGE THAT YOU UNDERSTAND AND ASSUME THESE RISKS.
IF YOU BELIEVE YOUR PRIVACY HAS BEEN BREACHED THROUGH THE USE OF OUR WEBSITE OR ONLINE SERVICES, PLEASE CONTACT US IMMEDIATELY AT privacy@apexanalytix.com.
Legal Basis for Use of Your Information
Our legal grounds for processing your information are as follows:
To honor our contractual commitments to you: most of our processing of Personal Data is to meet our contractual obligations to our users. For example, we handle Personal Data on this basis to allow you to sign up for our Online Services.
Consent: Where required by law, and in some other cases, we handle Personal Data based on your implied or express consent, including your consent to the processing of your Personal Data according to this Privacy Policy.
Legitimate interests: In many cases, we handle Personal Data on the basis that it furthers our legitimate interests in commercial activities in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals. This includes operating our business and the Online Services; providing security for our websites, products, software, or applications; marketing; receiving payments; preventing fraud; and knowing the customers we provide the Online Services to.
Legal compliance: We must use and disclose Personal Data in certain ways to comply with our legal obligations (such as disclosing data to tax authorities).
We will not use your Personal Information in a manner inconsistent with the purpose of its original collection unless you have provided your consent.
Data Subject Rights
Residents of the European Economic Area (“EEA”), Switzerland, and the UK can exercise certain data subject rights under applicable data protection laws. Where such rights apply, we will comply with requests to exercise these rights under applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, including if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. If these rights apply to you, they may permit you to request that we:
- provide access to and/or a copy of certain information we hold about you
- prevent the processing of your information for direct marketing purposes (including any direct marketing processing based on profiling)
- update information that is out of date or incorrect
- delete certain information that we are holding about you
- restrict the way that we process and disclose certain of your information
- transfer your information to a third-party provider of services
- revoke your consent for the processing of your information
For more information on exercising these rights, please contact us using the information in the “Contact Us” section below. If applicable, you may file a complaint with the data protection supervisory authority in the country where you are based. Alternatively, you may seek a remedy through local courts if you believe your rights have been breached.
International Data Transfers
Due to the nature of the Internet, if you visit the Site or use Online Services from a country other than the United States, your communications will inevitably transfer information across international boundaries. If you are located outside of the United States, please be advised that any information you provide to us will be transferred to the United States and that by browsing the Site and submitting information to the Site or using the Online Services, you explicitly authorize its transfer. Information submitted to us will be transferred to, processed, and stored in the United States or, for certain customers, the European Union or the United Kingdom. If you post or transfer any information to or through the Online Services, you are agreeing to such information, including Personal Information, being hosted and accessed in the United States, the European Union, and the United Kingdom. Please note that the privacy laws of the United States, the European Union, and the United Kingdom may differ from those where you are a resident.
We adhere and comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. Data Privacy Framework (“UK Extension to the EU-U.S. DPF”), and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), respectively developed by the U.S. Department of Commerce and the European Commission, the UK Government, and the Swiss Federal Administration to provide U.S. organizations with reliable mechanisms of Personal Data transfers to the United States from the European Union / European Economic Area, the United Kingdom (and Gibraltar), and Switzerland, while ensuring data protection that is consistent with EU, UK and Swiss law. Please see the Data Privacy Framework (DPF) Program section below for additional details. Where required, we will use appropriate safeguards for transferring data outside the EEA, Switzerland, and the UK. This may include signing Standard Contractual Clauses that govern the transfers of such data, which may be used with additional safeguards. For more information about these transfer mechanisms, please contact us as detailed in the “Contact Us” section below.
Data Privacy Framework (DPF) Program
We comply with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) concerning the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) regarding the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
APEX and its U.S. subsidiary APEX Analytix HK Holding Corporation adhere to the EU-U.S. DPF Principles regarding Personal Data transferred from the European Union and the United Kingdom and the Swiss-U.S. DPF Principles regarding Personal Data transferred from Switzerland. As described above, we rely on the direct collection of personal information from individuals located outside of the U.S., or we use another basis, such as Standard Contractual Clauses, for cross-border transfers of personal information from the EU member countries and the United Kingdom and from Switzerland to the U.S. We are committed to being subject to the DPF Principles regarding all Personal Data received from the EU, the United Kingdom (and Gibraltar), and Switzerland in reliance on the EU-U.S. DPF. We are subject to the investigatory and enforcement powers of the Federal Trade Commission (“FTC”). We may also incur liability in cases of onward transfers to third parties.
Supplemental Privacy Notice for California Residents
This Supplemental Privacy Notice supplements the information in our Privacy Policy above and, except as provided herein, applies solely to California residents. It applies to personal information we collect on or through the Online Services and through other means (such as information collected offline, in person, and over the telephone). It does not apply to the personal information we collect from our employees and job applicants in their capacity as employees and job applicants. It also does not apply to personal information we process as a service provider.
According to Section 1798.83 of the California Civil Code, residents of California have the right to request from a business with whom the California resident has an established business relationship certain information concerning the types of personal information the business shares with third parties for direct marketing purposes by such third party and the identities of the third parties with whom the business has shared such information in the immediately preceding calendar year. To access this information, please contact us as described in this Privacy Policy's “Contact Us” section.
Summary of Information We Collect
If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and disclose your “personal information” and "sensitive personal information" (as defined in the California Consumer Privacy Act (“CCPA”)).
Throughout our Privacy Policy, we describe the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. Under the CCPA, we also have to provide you with the "categories" of personal information we collect and disclose for “business purposes” (as those terms are defined by applicable law). Those categories include identifiers (such as name, address, email address, phone number, other account information, and cookies); commercial information (such as transaction data); internet or other network or device activity (such as IP address or service usage); geolocation information (general location); professional or employment-related data; other information that identifies or can be reasonably associated with you. The categories of sensitive personal information are account log-in and password or other credentials allowing access to your account.
We collect the categories of personal information identified above from the following sources: (1) directly from you; (2) through your use of the Online Services; (3) affiliates; and (4) third parties such as our resellers and service providers.
We or our service providers may collect and disclose the above categories of information for the purposes described in our Privacy Policy. This includes the following business or commercial purposes (as those terms are defined in applicable law):
- Our or our service provider’s operational purposes;
- consumer interactions on our site;
- Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
- Bug detection and error reporting;
- Customizing content that we or our service providers display on the Online Services;
- Providing Online Services (e.g., account servicing and maintenance); and
- Improving the Online Services and developing new services (e.g., by researching to develop new products or features);
Other uses about which we notify you
We may also use the above categories of personal information to comply with applicable laws and regulations. We may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent the identification of any particular user or device.
We may disclose certain categories of personal information with third parties (as defined by the CCPA) for the business purposes described above. For example, we may disclose identifiers and other information that identifies or can reasonably be associated with you with counterparties to your agreements. We may disclose identifiers with our marketing partners, and we may also disclose any of the categories described above with our subsidiaries and affiliates. If you connect your account with social media services or interact with social media plugins or links on the Online Service, we may disclose identifiers, commercial information, internet or other network or device activity, or general location with those social media services.
Consumer Rights
If you are a California resident, you may have certain rights. California law may permit you to request that we:
- Provide you the categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for "collecting," "selling," or "sharing" your personal information; the categories of third parties to whom we disclose or "sell," or with whom we "share," personal information; and the categories of personal information we "sell."
- Provide access to and/or a copy of certain information we hold about you.
- Delete certain information we have about you.
- Correct inaccurate personal information that we maintain about you.
You may have the right to receive information about the financial incentives we offer you (if any). You also have the right not to be discriminated against for exercising your rights. Certain information may be exempt from such requests under applicable law. We need certain types of information to provide the Online Services to you. If you ask us to delete it, you may no longer be able to access or use the Online Services.
“Sale” of Personal Information
California residents may opt out of the "sale" of their personal information. The CCPA broadly defines "sale" in a way that may include allowing third parties to receive certain information, such as cookie identifiers, IP addresses, and/or browsing behavior, to add to a profile about your device, browser, or you.
Depending on how you use the Service, we may disclose the following categories of information for such interest-based advertising, which may be considered a “sale” as defined by the CCPA: identifiers (such as IP address, device identifiers, and cookies) and internet and device activity. To opt out of such "sales," please submit a request to privacy@apexanalytix.com.
"Sharing" of Personal Information
California residents may opt out of the "sharing" of their personal information. The CCPA defines "sharing" as the targeting of advertising to a consumer based on that consumer's personal information obtained from the consumer's activity across websites.
Children Under 18
The Online Services are not intended for children under the age of 18. We do not knowingly solicit or collect Personal Information from children. If you are under 18, please do not submit your e-mail address or any other personal information to us through the Site or any Online Services. If you are a parent or guardian and believe we may have collected information about your child, please contact us as described in this Privacy Policy's “Contact Us” section.
Sensitive Personal Information
The CCPA also allows you to limit the use or disclosure of your "sensitive personal information" (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for purposes for which you cannot opt-out under the CCPA.
Retention of Your Personal Information: Please see the "Data Retention" section above.
Children’s Privacy
The Online Services are not directed to children under the age of 13. We do not knowingly collect personal information (as that term is defined in the Children’s Online Privacy Protection Act (COPPA)) from children under 13. If we discover that an individual under 13 has provided us with personal information, we will delete the personal information as required by COPPA.
We do not knowingly process data of EU residents under 16 without parental consent. If we become aware that we have collected data from an EU resident under 16 without parental consent, we will take reasonable steps to delete it as soon as possible.
Changes to this Policy
We reserve the right to change or replace this Privacy Policy at our sole discretion. All revisions will be posted to the Legal Center and become effective when the modified policy is posted. If you disagree with being bound by those changes, you should not use the Online Services any further after publication. Your continued use of the Online Services after posting changes to our Privacy Policy means you accept the changes.
Contact Us
We welcome your questions and comments about our Privacy Policy. We want to know if you are or have become aware of a known or suspected privacy or security breach or for purposes of any of the other requests or inquiries outlined in this Privacy Policy.
You may also seek recourse through an independent dispute resolution body designated to address complaints free of charge, including, where applicable, the panel established by the EU Data Protection Authorities and, as applicable, the UK Information Commissioner’s Office (“ICO”) (and the Gibraltar Regulatory Authority (“GRA”)), the Swiss Federal Data Protection and Information Commissioner (“FDPIC”). You may also invoke binding arbitration under certain conditions.
To contact APEX regarding its Privacy Policy, please use the Contact Us link provided or write to us at:
Attention: Data Privacy Officer
APEX Analytix, LLC
1501 Highwoods Blvd., Suite 200
Greensboro, North Carolina 27410 United States
Effective October 25th 2024 to December 9th 2024
DownloadTable of Contents
APEX Analytix, LLC Privacy Policy
APEX Analytix, LLC (“APEX,” “we”, or “us”) is sensitive to your concerns about how we use the personal information we collect from you through our website, www.apexanalytix.com (the “Site”) and applications, APIs, or services exchanging information with APEX, including but not limited to apexESG, smartvm, Cyber Risk, AuditView, and any other services sold by APEX or its authorized resellers (“Services”). The Site and Services are sometimes collectively referred to as “Online Services”.
This Privacy Policy is specific to APEX and its headquarters located in the United States and covers APEX’s treatment of the Personal Information (defined below) we collect when you access and use the Online Services (visitors may also be referred to as “you” or “your”). It also governs your visit to the Site and describes the choices available regarding our use of your Personal Information and how you can access and update this information. We are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute an invasion of your privacy.
By using the Online Services, you accept all of the terms of this Privacy Policy. If you do not agree with any terms of this Privacy Policy, do not use the Site or submit any Personal Information through any of our Services.
If you have questions or concerns about the Privacy Policy, please contact us at privacy@apexanalytix.com.
For purposes of data protection laws, APEX Analytix, LLC, 1501 Highwoods Blvd., Suite 200, Greensboro, North Carolina 27410, is the entity responsible for your information.
What Information Do We Collect?
Information You Provide to Us
"Personal Information" (also referred to as “Personal Data”) means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
APEX does not collect Personal Information unless you voluntarily provide it to us, and you may be required to provide us with Personal Information to access and use some of our Services. We collect Personal Information from you when you choose to interact with us. You can provide such information by completing inquiry and/or registration forms or by writing or emailing us. The type of Personal Information collected through our Online Services varies but may include, among other things, your name, address, phone number, company affiliation, and e-mail address.
Information We Collect Automatically
As you interact with the Online Services, we may also collect information automatically about your visit to our Site and/or use of the Services. This information is not Personal Information, but it may disclose aspects of your browsing history or certain information about you, such as an Internet Protocol (“IP”) address and publicly available information (collectively, the "Non-Personal Data"). Non-Personal Data is only used in aggregate form.
Information from Other Sources
We may collect information about you from third parties, such as resellers, marketing partners, customers, and researchers. Our resellers may provide information about you, such as your contact data, to facilitate contracting through our Online Services. We may combine this information with information we collect from you and use it as described in this Privacy Policy.
How Do We Use the Information We Collect?
We use the information we collect from the Online Services, including Personal Information, to:
- provide you with the Online Services;
- contact you when necessary, such as to provide answers to your questions or provide support;
- provide personalized service, such as by answering your emails or online requests;
- deliver and conduct surveys or evaluations;
- analyze and improve the Online Services or any other products and services we provide;
- provide information or materials regarding the Online Services;
- extend invitations to marketing events;
- register for a webcast or other event;
- provide access to content and news from APEX from time to time;
- consider your application for employment with APEX;
- analyze the behavior, habits, and preferences of persons who contact or interact with us to improve our service offerings;
- comply with our legal obligations or as permitted by law;
- protect the safety and/or integrity of our users, employees, third parties, members of the public, and/or the Online Services; and
- prevent fraud and enforce our legal terms.
We also use Non-Personal Data for various purposes, including helping diagnose problems with our server(s), building marketing profiles, aiding strategic development, administering and auditing usage of the Online Services, and improving their usability.
We may combine the information we collect from you through the Online Service with information obtained from other sources. We may also aggregate and/or de-identify information collected through the Online Services. De-identified or aggregated data may be used for any purpose, including, but not limited to, research and marketing purposes.
How Do We Disclose the Information We Receive?
Except as disclosed here, we do not rent, sell, or disclose your Personal Information to third parties. We disclose Personal Information as follows:
Third Parties, including Third Party Marketing
Unless specifically authorized by you, we do not provide Personal Information to third parties for marketing purposes. If we use a third-party service provider to provide any of the processing of Personal Data set forth herein, any third parties that we may share your data with are obliged to keep your details securely and to use them only to fulfill the Service they provide you on our behalf. When they no longer need your data to provide this service, they will dispose of the details in line with our procedures and applicable law. If you express interest in a third-party offer or purchase a package that includes a third-party offer, we may provide your Personal Information to that third party solely in connection with the offer you have selected.
Required by Law
We reserve the right to disclose your Personal Information as required by law, such as in response to lawful requests by public authorities, including law enforcement agencies, or if we are required to do so by law under regulation, a subpoena, court order, or by a government entity, including any requirement to meet national security requirements, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a legal request. In these circumstances, we may also share your Personal Information with our professional advisors.
Other Transfers
We may disclose Personal Information and other data to businesses controlling, controlled by, or under common control with us. If we are merged, acquired, or sold, or if some or all of our assets or equity are transferred, we may disclose or transfer Personal Information and other data in connection with the associated transactions.
Bankruptcy
In the event of an APEX bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or applying laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your personal information is treated, transferred, or used. If such an event occurs, your Personal Information may be treated like any other APEX asset and sold, transferred, or disclosed to third parties in accordance with applicable law or used in ways not contemplated or permitted under this Privacy Policy. In this case, you will be notified via email and/or a prominent notice on our Site and in our Legal Center of any change in ownership or uses of your personal information, and any choices you may have regarding your personal information.
Consent
In addition to the disclosures described in this Privacy Policy, we may disclose information about you whenever you consent to or direct such disclosure.
Uploading Content
You are solely responsible for the Personal Information and other content you post on or through the Online Services. You warrant that you have permission to upload any third-party information, and you agree to indemnify, defend, and hold harmless APEX and its affiliates, owners, directors, and personnel from and against any claim, liability, cost, and expense arising in connection with your provision of that information.
Do Not Track Requests; Third-Party Tracking (applicable to the Site)
We cannot presently omit you from usage analytics to the extent your browser only sends us a “do not track” message and does not otherwise screen you from tracking without any action on our part. Third parties, other than our vendors (such as our website analytics provider), do not have authorization from us to track which websites you visited before and after visiting the Site. That said, we cannot control third-party tracking, and some third-party tracking may occur without our knowledge or consent.
Use of Cookies and Third-Party Websites
We may maintain links to other websites and other websites may maintain links to the Online Services. This Privacy Policy applies only to the Site and not to other websites accessible from us or that you use to access our Online Services, each of which may have privacy policies materially different from this Privacy Policy. If you visit other websites, we are not responsible for the privacy practices or content of those sites. You are responsible for reviewing non-APEX website privacy policies to confirm that you understand and agree with them.
We may use cookies and certain visit recognition software services, such as Google Analytics and LeadLander, to improve the functionality of our Site and build a demographic profile. A cookie is a small piece of information sent by a web server to a web browser, enabling the server to collect information from the browser. You can configure your browser to reject cookies by modifying your browser settings, but if your browser settings do not accept cookies from us, then some Site functions may not operate as intended. Please be aware that the information sent by your browser as part of a web page request, including cookies and your IP address, may be collected through Google Analytics. In that case, Google will also receive this information, and Google's privacy policy governs its use.
Your Options (under the laws of the EU, EEA, UK and Switzerland)
Under the laws of certain countries, you may have certain rights and choices regarding the Personal Information we collect and maintain about you, and how we communicate with you.
If you are a resident of the European Union (“EU”), the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, you can request the following information regarding the Personal Information we store about you and how it is processed:
- Identity and the contact details of the person or organization that has determined how and why to process your data. (In some cases, this will be a representative located in the EU).
- Contact details of the data protection officer, where applicable.
- The purpose of the processing and the legal basis for processing.
- If the processing is based on the legitimate interests of APEX or a third party, information about those interests.
- The categories of Personal Data collected, stored, and processed.
- Recipient(s) or categories of recipients to whom the data is/will be disclosed
If we intend to transfer Personal Data to a third country or international organization, we must ensure this is done securely. The EU has approved sending Personal Data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure specific measures are in place to secure your information. To this end, we need certain information to transfer the Personal Data:
- How long will the data be stored?
- Details of your rights to access, correct, erase, restrict, or object to such processing.
- Information about your right to withdraw consent at any time.
- How to lodge a complaint with the supervisory authority.
- Whether the provision of Personal Data is a statutory or contractual requirement or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the Personal Data and the possible consequences of failing to provide such data.
- The source of Personal Data, if it was not collected directly from you.
Any details on automated decision-making, meaningful information about the logic involved, and the significance and expected consequences of such processing may be requested by the Data Subject. To make such a request, please get in touch with us as described in the “Contact Us” section of this Privacy Policy.
We will implement the requested changes as soon as possible, subject to reasonable limitations, such as the need to verify your identity. When you edit or change your preferences, the data you remove may remain in our databases or backup media because it is not always possible to completely remove or delete data from these locations.
You have the right to decline to share certain Personal Information with us, but we may not be able to provide you with some of the features and functionality of the Online Services.
You can also opt out of receiving future promotional communications and marketing from us. You may receive periodic email newsletters from us. These newsletters contain information on new features and facilities of note at the Site and within the Online Services. You can opt out of receiving such mailings. The registration forms allow you to tick a box if you do not wish to receive information about our services. If you receive electronic notifications from us through an email list, each message will include instructions on how to unsubscribe from that list. Your choice not to receive future promotional and marketing material will not prevent us from corresponding with you, by email or otherwise, regarding your existing or past business relationships with us.
Data Retention
We will process Personal Data for the period considered strictly necessary to provide the Services and to comply with applicable law. We will endeavor to keep your information accurate and up to date and not keep it longer than necessary. At a minimum, we will retain your information for as long as needed to provide you with the Services and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Therefore, we may maintain some or all of this data in our archives even after removing it from the Online Services. Personal Data processed to provide the Services may be stored for a longer period to enable any disputes concerning the provision of the Service to be handled. Personal Data processed for marketing purposes will be kept by us from the point at which the data subject provides his/her consent until this consent is revoked or we no longer deem the data to be accurate and up to date, whichever is earlier. Personal Data processed with a job application will only be retained for a year after the position is filled or until the data subject revokes his/her consent, whichever is earlier. If consent is revoked, the Personal Data may no longer be processed for the purposes but may still be stored to comply with local regulations and provisions that the local Data Protection Authority may establish from time to time.
Data Security
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put physical, electronic, and managerial procedures in place to safeguard the information we collect. We strive to ensure our servers and connections (to our servers) incorporate industry-standard encryption and security devices. The Internet, however, cannot be guaranteed to be completely secure; therefore, we cannot warrant the security of any Personal Information you provide to us. Accordingly, you provide this information at your own risk. WE DISCLAIM LIABILITY FOR THE THEFT, LOSS, OR INTERCEPTION OF OR UNAUTHORIZED ACCESS OR DAMAGE TO YOUR DATA OR COMMUNICATIONS BY USING THE SITE AND/OR OUR ONLINE SERVICES. YOU ACKNOWLEDGE THAT YOU UNDERSTAND AND ASSUME THESE RISKS.
IF YOU BELIEVE YOUR PRIVACY HAS BEEN BREACHED THROUGH THE USE OF OUR WEBSITE OR ONLINE SERVICES, PLEASE CONTACT US IMMEDIATELY AT privacy@apexanalytix.com.
Legal Basis for Use of Your Information
Our legal grounds for processing your information are as follows:
To honor our contractual commitments to you: most of our processing of Personal Data is to meet our contractual obligations to our users. For example, we handle Personal Data on this basis to allow you to sign up for our Online Services.
Consent: Where required by law, and in some other cases, we handle Personal Data based on your implied or express consent, including your consent to the processing of your Personal Data pursuant to this Privacy Policy.
Legitimate interests: In many cases, we handle Personal Data on the basis that it furthers our legitimate interests in commercial activities in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals. This includes operating our business and the Online Services; providing security for our websites, products, software, or applications; marketing; receiving payments; preventing fraud; and knowing the customers we are providing the Online Services to.
Legal compliance: We need to use and disclose Personal Data in certain ways to comply with our legal obligations (such as disclosing data to tax authorities).
We will not use your Personal Information in a manner inconsistent with the purpose of its original collection unless you have provided your consent.
Data Subject Rights
Residents of the European Economic Area (“EEA”), Switzerland, and the UK can exercise certain data subject rights under applicable data protection laws. Where such rights apply, we will comply with requests to exercise these rights in accordance with applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. If these rights apply to you, they may permit you to request that we:
- provide access to and/or a copy of certain information we hold about you
- prevent the processing of your information for direct marketing purposes (including any direct marketing processing based on profiling)
- update information that is out of date or incorrect
- delete certain information that we are holding about you
- restrict the way that we process and disclose certain of your information
- transfer your information to a third-party provider of services
- revoke your consent for the processing of your information
For more information on how to exercise these rights, please contact us using the information in the “Contact Us” section below. If applicable, you may file a complaint with the data protection supervisory authority in the country where you are based. Alternatively, you may seek a remedy through local courts if you believe your rights have been breached.
International Data Transfers
Due to the nature of the Internet, if you are visiting the Site or using Online Services from a country other than the United States, your communications will inevitably transfer information across international boundaries. If you are located outside of the United States, please be advised that any information you provide to us will be transferred to the United States and that by browsing the Site and submitting information to the Site or using the Online Services, you explicitly authorize its transfer. Information submitted to us will be transferred to, processed, and stored in the United States or, for certain customers, the European Union or the United Kingdom. If you post or transfer any information to or through the Online Services, you are agreeing to such information, including Personal Information, being hosted and accessed in the United States, the European Union, and the United Kingdom. Please note that the privacy laws of the United States, the European Union, and the United Kingdom may differ from those where you are a resident.
We adhere and comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. Data Privacy Framework (“UK Extension to the EU-U.S. DPF”), and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), respectively developed by the U.S. Department of Commerce and the European Commission, the UK Government, and the Swiss Federal Administration to provide U.S. organizations with reliable mechanisms of Personal Data transfers to the United States from the European Union / European Economic Area, the United Kingdom (and Gibraltar), and Switzerland, while ensuring data protection that is consistent with EU, UK and Swiss law. For additional details, please see the Data Privacy Framework (DPF) Program section below. Where required, we will use appropriate safeguards for transferring data outside of the EEA, Switzerland, and the UK. This may include signing Standard Contractual Clauses that govern the transfers of such data, which may be used in conjunction with additional safeguards. For more information about these transfer mechanisms, please contact us as detailed in the “Contact Us” section below.
Data Privacy Framework (DPF) Program
We comply with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) regarding the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
APEX and its U.S. subsidiary APEX Analytix HK Holding Corporation adhere to the EU-U.S. DPF Principles regarding Personal Data transferred from the European Union and the United Kingdom and the Swiss-U.S. DPF Principles regarding Personal Data transferred from Switzerland. As described above, we rely on the direct collection of personal information from individuals located outside of the U.S., or we use another basis, such as Standard Contractual Clauses, for cross-border transfers of personal information from the EU member countries and the United Kingdom and from Switzerland to the U.S. We are committed to being subject to the DPF Principles regarding all Personal Data received from the EU, the United Kingdom (and Gibraltar), and Switzerland in reliance on the EU-U.S. DPF. We are subject to the investigatory and enforcement powers of the Federal Trade Commission (“FTC”). We may also incur liability in cases of onward transfers to third parties.
Supplemental Privacy Notice for California Residents
This Supplemental Privacy Notice supplements the information in our Privacy Policy above and, except as provided herein, applies solely to California residents. It applies to personal information we collect on or through the Online Services and through other means (such as information collected offline, in person, and over the telephone). It does not apply to the personal information we collect from our employees and job applicants in their capacity as employees and job applicants. It also does not apply to personal information we process as a service provider.
According to Section 1798.83 of the California Civil Code, residents of California have the right to request from a business with whom the California resident has an established business relationship certain information with respect to the types of personal information the business shares with third parties for direct marketing purposes by such third party and the identities of the third parties with whom the business has shared such information in the immediately preceding calendar year. To access this information, please get in touch with us as described in the “Contact Us” section of this Privacy Policy.
Summary of Information We Collect
If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and disclose your “personal information” and "sensitive personal information" (as defined in the California Consumer Privacy Act (“CCPA”)).
Throughout our Privacy Policy, we describe the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. Under the CCPA, we also have to provide you with the "categories" of personal information we collect and disclose for “business purposes” (as those terms are defined by applicable law). Those categories include identifiers (such as name, address, email address, phone number, other account information, and cookies); commercial information (such as transaction data); internet or other network or device activity (such as IP address or service usage); geolocation information (general location); professional or employment-related data; other information that identifies or can be reasonably associated with you. The categories of sensitive personal information are account log-in and password or other credentials allowing access to your account.
We collect the categories of personal information identified above from the following sources: (1) directly from you; (2) through your use of the Online Services; (3) affiliates; and (4) third parties such as our resellers and service providers.
We or our service providers may collect and disclose the above categories of information for the purposes described in our Privacy Policy. This includes the following business or commercial purposes (as those terms are defined in applicable law):
- Our or our service provider’s operational purposes;
- consumer interactions on our site;
- Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
- Bug detection and error reporting;
- Customizing content that we or our service providers display on the Online Services;
- Providing Online Services (e.g., account servicing and maintenance); and
- Improving the Online Services and developing new services (e.g., by researching to develop new products or features);
Other uses about which we notify you
We may also use the above categories of personal information to comply with applicable laws and regulations. We may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent the identification of any particular user or device.
We may disclose certain categories of personal information with third parties (as defined by the CCPA) for the business purposes described above. For example, we may disclose identifiers and other information that identifies or can reasonably be associated with you with counterparties to your agreements. We may disclose identifiers with our marketing partners, and we may also disclose any of the categories described above with our subsidiaries and affiliates. If you connect your account with social media services or interact with social media plugins or links on the Online Service, we may disclose identifiers, commercial information, internet or other network or device activity, or general location with those social media services.
Consumer Rights
If you are a California resident, you may have certain rights. California law may permit you to request that we:
- Provide you the categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for "collecting," "selling," or "sharing" your personal information; the categories of third parties to whom we disclose or "sell," or with whom we "share," personal information; and the categories of personal information we "sell."
- Provide access to and/or a copy of certain information we hold about you.
- Delete certain information we have about you.
- Correct inaccurate personal information that we maintain about you.
You may have the right to receive information about the financial incentives we offer you (if any). You also have the right not to be discriminated against for exercising your rights. Certain information may be exempt from such requests under applicable law. We need certain types of information to provide the Online Services to you. If you ask us to delete it, you may no longer be able to access or use the Online Services.
“Sale” of Personal Information
California residents may opt out of the "sale" of their personal information. The CCPA broadly defines "sale" in a way that may include allowing third parties to receive certain information, such as cookie identifiers, IP addresses, and/or browsing behavior, to add to a profile about your device, browser, or you.
Depending on how you use the Service, we may disclose the following categories of information for such interest-based advertising, which may be considered a “sale” as defined by the CCPA: identifiers (such as IP address, device identifiers, and cookies) and internet and device activity. To opt out of such "sales," please submit a request to privacy@apexanalytix.com.
"Sharing" of Personal Information
California residents may opt out of the "sharing" of their personal information. The CCPA defines "sharing" as the targeting of advertising to a consumer based on that consumer's personal information obtained from the consumer's activity across websites.
Children Under 18
The Online Services are not intended for children under the age of 18. We do not knowingly solicit or collect Personal Information from children. If you are under the age of 18, please do not submit your e-mail address or any other personal information to us through the Site or any Online Services. If you are a parent or guardian and believe we may have collected information about your child, please contact us as described in the “Contact Us” section of this Privacy Policy.
Sensitive Personal Information
The CCPA also allows you to limit the use or disclosure of your "sensitive personal information" (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for purposes for which you cannot opt out under the CCPA.
Retention of Your Personal Information: Please see the "Data Retention" section above.
Children’s Privacy
The Online Services are not directed to children under the age of 13. We do not knowingly collect personal information (as that term is defined in the Children’s Online Privacy Protection Act (COPPA)) from children under 13. If we discover that an individual under 13 has provided us with personal information, we will delete the personal information as required by COPPA.
We do not knowingly process data of EU residents under 16 without parental consent. If we become aware that we have collected data from an EU resident under 16 without parental consent, we will take reasonable steps to delete it as soon as possible.
Changes to this Policy
We reserve the right to change or replace this Privacy Policy at our sole discretion. All revisions will be posted to the Legal Center and become effective when the modified policy is posted. If you disagree with being bound by those changes, you should not use the Online Services any further after publication. Your continued use of the Online Services after posting changes to our Privacy Policy means you accept the changes.
Contact Us
We welcome your questions and comments about our Privacy Policy. We want to know if you are or have become aware of a known or suspected privacy or security breach or for purposes of any of the other requests or inquiries outlined in this Privacy Policy.
You may also seek recourse through an independent dispute resolution body designated to address complaints free of charge, including, where applicable, the panel established by the EU Data Protection Authorities and, as applicable, the UK Information Commissioner’s Office (“ICO”) (and the Gibraltar Regulatory Authority (“GRA”)), the Swiss Federal Data Protection and Information Commissioner (“FDPIC”). You may also invoke binding arbitration under certain conditions.
To contact APEX regarding its Privacy Policy, please use the Contact Us link provided or write to us at:
Attention: Data Privacy Officer
APEX Analytix, LLC
1501 Highwoods Blvd., Suite 200
Greensboro, North Carolina 27410 United States
Effective September 10th 2024 to October 25th 2024
DownloadTable of Contents
APEX Analytix, LLC Privacy Policy
APEX Analytix, LLC (“APEX,” “we”, or “us”) is sensitive to your concerns about how we use the personal information we collect from you through our website, www.apexanalytix.com (the “Site”) and applications, APIs, or services exchanging information with APEX, including but not limited to apexESG, smartvm, Cyber Risk, AuditView, and any other services sold by APEX or its authorized resellers (“Services”). The Site and Services are sometimes collectively referred to as “Online Services”.
This Privacy Policy is specific to APEX and its headquarters located in the United States and covers APEX’s treatment of the Personal Information (defined below) we collect when you access and use the Online Services (visitors may also be referred to as “you” or “your”). It also governs your visit to the Site and describes the choices available regarding our use of your Personal Information and how you can access and update this information. We are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute an invasion of your privacy.
By using the Online Services, you accept all of the terms of this Privacy Policy. If you do not agree with any terms of this Privacy Policy, do not use the Site or submit any Personal Information through any of our Services.
If you have questions or concerns about the Privacy Policy, please contact us at privacy@apexanalytix.com.
For purposes of data protection laws, APEX Analytix, LLC, 1501 Highwoods Blvd., Suite 200, Greensboro, North Carolina 27410, is the entity responsible for your information.
What Information Do We Collect?
Information You Provide to Us
"Personal Information" (also referred to as “Personal Data”) means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
APEX does not collect Personal Information unless you voluntarily provide it to us, and you may be required to provide us with Personal Information to access and use some of our Services. We collect Personal Information from you when you choose to interact with us. You can provide such information by completing inquiry and/or registration forms or by writing or emailing us. The type of Personal Information collected through our Online Services varies but may include, among other things, your name, address, phone number, company affiliation, and e-mail address.
Information We Collect Automatically
As you interact with the Online Services, we may also collect information automatically about your visit to our Site and/or use of the Services. This information is not Personal Information, but it may disclose aspects of your browsing history or certain information about you, such as an Internet Protocol (“IP”) address and publicly available information (collectively, the "Non-Personal Data"). Non-Personal Data is only used in aggregate form.
Information from Other Sources
We may collect information about you from third parties, such as resellers, marketing partners, customers, and researchers. Our resellers may provide information about you, such as your contact data, to facilitate contracting through our Online Services. We may combine this information with information we collect from you and use it as described in this Privacy Policy.
How Do We Use the Information We Collect?
We use the information we collect from the Online Services, including Personal Information, to:
- provide you with the Online Services;
- contact you when necessary, such as to provide answers to your questions or provide support;
- provide personalized service, such as by answering your emails or online requests;
- deliver and conduct surveys or evaluations;
- analyze and improve the Online Services or any other products and services we provide;
- provide information or materials regarding the Online Services;
- extend invitations to marketing events;
- register for a webcast or other event;
- provide access to content and news from APEX from time to time;
- consider your application for employment with APEX;
- analyze the behavior, habits, and preferences of persons who contact or interact with us to improve our service offerings;
- comply with our legal obligations or as permitted by law;
- protect the safety and/or integrity of our users, employees, third parties, members of the public, and/or the Online Services; and
- prevent fraud and enforce our legal terms.
We also use Non-Personal Data for various purposes, including helping diagnose problems with our server(s), building marketing profiles, aiding strategic development, administering and auditing usage of the Online Services, and improving their usability.
We may combine the information we collect from you through the Online Service with information obtained from other sources. We may also aggregate and/or de-identify information collected through the Online Services. De-identified or aggregated data may be used for any purpose, including, but not limited to, research and marketing purposes.
How Do We Disclose the Information We Receive?
Except as disclosed here, we do not rent, sell, or disclose your Personal Information to third parties. We disclose Personal Information as follows:
Third Parties, including Third Party Marketing
Unless specifically authorized by you, we do not provide Personal Information to third parties for marketing purposes. If we use a third-party service provider to provide any of the processing of Personal Data set forth herein, any third parties that we may share your data with are obliged to keep your details securely and to use them only to fulfill the Service they provide you on our behalf. When they no longer need your data to provide this service, they will dispose of the details in line with our procedures and applicable law. If you express interest in a third-party offer or purchase a package that includes a third-party offer, we may provide your Personal Information to that third party solely in connection with the offer you have selected.
Required by Law
We reserve the right to disclose your Personal Information as required by law, such as in response to lawful requests by public authorities, including law enforcement agencies, or if we are required to do so by law under regulation, a subpoena, court order, or by a government entity, including any requirement to meet national security requirements, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a legal request. In these circumstances, we may also share your Personal Information with our professional advisors.
Other Transfers
We may disclose Personal Information and other data to businesses controlling, controlled by, or under common control with us. If we are merged, acquired, or sold, or if some or all of our assets or equity are transferred, we may disclose or transfer Personal Information and other data in connection with the associated transactions.
Bankruptcy
In the event of an APEX bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or applying laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your personal information is treated, transferred, or used. If such an event occurs, your Personal Information may be treated like any other APEX asset and sold, transferred, or disclosed to third parties in accordance with applicable law or used in ways not contemplated or permitted under this Privacy Policy. In this case, you will be notified via email and/or a prominent notice on our Site and in our Legal Center of any change in ownership or uses of your personal information, and any choices you may have regarding your personal information.
Consent
In addition to the disclosures described in this Privacy Policy, we may disclose information about you whenever you consent to or direct such disclosure.
Uploading Content
You are solely responsible for the Personal Information and other content you post on or through the Online Services. You warrant that you have permission to upload any third-party information, and you agree to indemnify, defend, and hold harmless APEX and its affiliates, owners, directors, and personnel from and against any claim, liability, cost, and expense arising in connection with your provision of that information.
Do Not Track Requests; Third-Party Tracking (applicable to the Site)
We cannot presently omit you from usage analytics to the extent your browser only sends us a “do not track” message and does not otherwise screen you from tracking without any action on our part. Third parties, other than our vendors (such as our website analytics provider), do not have authorization from us to track which websites you visited before and after visiting the Site. That said, we cannot control third-party tracking, and some third-party tracking may occur without our knowledge or consent.
Use of Cookies and Third-Party Websites
We may maintain links to other websites and other websites may maintain links to the Online Services. This Privacy Policy applies only to the Site and not to other websites accessible from us or that you use to access our Online Services, each of which may have privacy policies materially different from this Privacy Policy. If you visit other websites, we are not responsible for the privacy practices or content of those sites. You are responsible for reviewing non-APEX website privacy policies to confirm that you understand and agree with them.
We may use cookies and certain visit recognition software services, such as Google Analytics and LeadLander, to improve the functionality of our Site and build a demographic profile. A cookie is a small piece of information sent by a web server to a web browser, enabling the server to collect information from the browser. You can configure your browser to reject cookies by modifying your browser settings, but if your browser settings do not accept cookies from us, then some Site functions may not operate as intended. Please be aware that the information sent by your browser as part of a web page request, including cookies and your IP address, may be collected through Google Analytics. In that case, Google will also receive this information, and Google's privacy policy governs its use.
Your Options (under the laws of the EU, EEA, UK and Switzerland)
Under the laws of certain countries, you may have certain rights and choices regarding the Personal Information we collect and maintain about you, and how we communicate with you.
If you are a resident of the European Union (“EU”), the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, you can request the following information regarding the Personal Information we store about you and how it is processed:
- Identity and the contact details of the person or organization that has determined how and why to process your data. (In some cases, this will be a representative located in the EU).
- Contact details of the data protection officer, where applicable.
- The purpose of the processing and the legal basis for processing.
- If the processing is based on the legitimate interests of APEX or a third party, information about those interests.
- The categories of Personal Data collected, stored, and processed.
- Recipient(s) or categories of recipients to whom the data is/will be disclosed
If we intend to transfer Personal Data to a third country or international organization, we must ensure this is done securely. The EU has approved sending Personal Data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure specific measures are in place to secure your information. To this end, we need certain information to transfer the Personal Data:
- How long will the data be stored?
- Details of your rights to access, correct, erase, restrict, or object to such processing.
- Information about your right to withdraw consent at any time.
- How to lodge a complaint with the supervisory authority.
- Whether the provision of Personal Data is a statutory or contractual requirement or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the Personal Data and the possible consequences of failing to provide such data.
- The source of Personal Data, if it was not collected directly from you.
Any details on automated decision-making, meaningful information about the logic involved, and the significance and expected consequences of such processing may be requested by the Data Subject. To make such a request, please get in touch with us as described in the “Contact Us” section of this Privacy Policy.
We will implement the requested changes as soon as possible, subject to reasonable limitations, such as the need to verify your identity. When you edit or change your preferences, the data you remove may remain in our databases or backup media because it is not always possible to completely remove or delete data from these locations.
You have the right to decline to share certain Personal Information with us, but we may not be able to provide you with some of the features and functionality of the Online Services.
You can also opt out of receiving future promotional communications and marketing from us. You may receive periodic email newsletters from us. These newsletters contain information on new features and facilities of note at the Site and within the Online Services. You can opt out of receiving such mailings. The registration forms allow you to tick a box if you do not wish to receive information about our services. If you receive electronic notifications from us through an email list, each message will include instructions on how to unsubscribe from that list. Your choice not to receive future promotional and marketing material will not prevent us from corresponding with you, by email or otherwise, regarding your existing or past business relationships with us.
Data Retention
We will process Personal Data for the period considered strictly necessary to provide the Services and to comply with applicable law. We will endeavor to keep your information accurate and up to date and not keep it longer than necessary. At a minimum, we will retain your information for as long as needed to provide you with the Services and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Therefore, we may maintain some or all of this data in our archives even after removing it from the Online Services. Personal Data processed to provide the Services may be stored for a longer period to enable any disputes concerning the provision of the Service to be handled. Personal Data processed for marketing purposes will be kept by us from the point at which the data subject provides his/her consent until this consent is revoked or we no longer deem the data to be accurate and up to date, whichever is earlier. Personal Data processed with a job application will only be retained for a year after the position is filled or until the data subject revokes his/her consent, whichever is earlier. If consent is revoked, the Personal Data may no longer be processed for the purposes but may still be stored to comply with local regulations and provisions that the local Data Protection Authority may establish from time to time.
Data Security
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put physical, electronic, and managerial procedures in place to safeguard the information we collect. We strive to ensure our servers and connections (to our servers) incorporate industry-standard encryption and security devices. The Internet, however, cannot be guaranteed to be completely secure; therefore, we cannot warrant the security of any Personal Information you provide to us. Accordingly, you provide this information at your own risk. WE DISCLAIM LIABILITY FOR THE THEFT, LOSS, OR INTERCEPTION OF OR UNAUTHORIZED ACCESS OR DAMAGE TO YOUR DATA OR COMMUNICATIONS BY USING THE SITE AND/OR OUR ONLINE SERVICES. YOU ACKNOWLEDGE THAT YOU UNDERSTAND AND ASSUME THESE RISKS.
IF YOU BELIEVE YOUR PRIVACY HAS BEEN BREACHED THROUGH THE USE OF OUR WEBSITE OR ONLINE SERVICES, PLEASE CONTACT US IMMEDIATELY AT privacy@apexanalytix.com.
Legal Basis for Use of Your Information
Our legal grounds for processing your information are as follows:
To honor our contractual commitments to you: most of our processing of Personal Data is to meet our contractual obligations to our users. For example, we handle Personal Data on this basis to allow you to sign up for our Online Services.
Consent: Where required by law, and in some other cases, we handle Personal Data based on your implied or express consent, including your consent to the processing of your Personal Data pursuant to this Privacy Policy.
Legitimate interests: In many cases, we handle Personal Data on the basis that it furthers our legitimate interests in commercial activities in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals. This includes operating our business and the Online Services; providing security for our websites, products, software, or applications; marketing; receiving payments; preventing fraud; and knowing the customers we are providing the Online Services to.
Legal compliance: We need to use and disclose Personal Data in certain ways to comply with our legal obligations (such as disclosing data to tax authorities).
We will not use your Personal Information in a manner inconsistent with the purpose of its original collection unless you have provided your consent.
Data Subject Rights
Residents of the European Economic Area (“EEA”), Switzerland, and the UK can exercise certain data subject rights under applicable data protection laws. Where such rights apply, we will comply with requests to exercise these rights in accordance with applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. If these rights apply to you, they may permit you to request that we:
- provide access to and/or a copy of certain information we hold about you
- prevent the processing of your information for direct marketing purposes (including any direct marketing processing based on profiling)
- update information that is out of date or incorrect
- delete certain information that we are holding about you
- restrict the way that we process and disclose certain of your information
- transfer your information to a third-party provider of services
- revoke your consent for the processing of your information
For more information on how to exercise these rights, please contact us using the information in the “Contact Us” section below. If applicable, you may file a complaint with the data protection supervisory authority in the country where you are based. Alternatively, you may seek a remedy through local courts if you believe your rights have been breached.
International Data Transfers
Due to the nature of the Internet, if you are visiting the Site or using Online Services from a country other than the United States, your communications will inevitably transfer information across international boundaries. If you are located outside of the United States, please be advised that any information you provide to us will be transferred to the United States and that by browsing the Site and submitting information to the Site or using the Online Services, you explicitly authorize its transfer. Information submitted to us will be transferred to, processed, and stored in the United States or, for certain customers, the European Union or the United Kingdom. If you post or transfer any information to or through the Online Services, you are agreeing to such information, including Personal Information, being hosted and accessed in the United States, the European Union, and the United Kingdom. Please note that the privacy laws of the United States, the European Union, and the United Kingdom may differ from those where you are a resident.
We adhere and comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. Data Privacy Framework (“UK Extension to the EU-U.S. DPF”), and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), respectively developed by the U.S. Department of Commerce and the European Commission, the UK Government, and the Swiss Federal Administration to provide U.S. organizations with reliable mechanisms of Personal Data transfers to the United States from the European Union / European Economic Area, the United Kingdom (and Gibraltar), and Switzerland, while ensuring data protection that is consistent with EU, UK and Swiss law. For additional details, please see the Data Privacy Framework (DPF) Program section below. Where required, we will use appropriate safeguards for transferring data outside of the EEA, Switzerland, and the UK. This may include signing Standard Contractual Clauses that govern the transfers of such data, which may be used in conjunction with additional safeguards. For more information about these transfer mechanisms, please contact us as detailed in the “Contact Us” section below.
Data Privacy Framework (DPF) Program
We comply with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) regarding the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
APEX and its U.S. subsidiary APEX Analytix HK Holding Corporation adhere to the EU-U.S. DPF Principles regarding Personal Data transferred from the European Union and the United Kingdom and the Swiss-U.S. DPF Principles regarding Personal Data transferred from Switzerland. As described above, we rely on the direct collection of personal information from individuals located outside of the U.S., or we use another basis, such as Standard Contractual Clauses, for cross-border transfers of personal information from the EU member countries and the United Kingdom and from Switzerland to the U.S. We are committed to being subject to the DPF Principles regarding all Personal Data received from the EU, the United Kingdom (and Gibraltar), and Switzerland in reliance on the EU-U.S. DPF. We are subject to the investigatory and enforcement powers of the Federal Trade Commission (“FTC”). We may also incur liability in cases of onward transfers to third parties.
Supplemental Privacy Notice for California Residents
This Supplemental Privacy Notice supplements the information in our Privacy Policy above and, except as provided herein, applies solely to California residents. It applies to personal information we collect on or through the Online Services and through other means (such as information collected offline, in person, and over the telephone). It does not apply to the personal information we collect from our employees and job applicants in their capacity as employees and job applicants. It also does not apply to personal information we process as a service provider.
According to Section 1798.83 of the California Civil Code, residents of California have the right to request from a business with whom the California resident has an established business relationship certain information with respect to the types of personal information the business shares with third parties for direct marketing purposes by such third party and the identities of the third parties with whom the business has shared such information in the immediately preceding calendar year. To access this information, please get in touch with us as described in the “Contact Us” section of this Privacy Policy.
Summary of Information We Collect
If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and disclose your “personal information” and "sensitive personal information" (as defined in the California Consumer Privacy Act (“CCPA”)).
Throughout our Privacy Policy, we describe the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. Under the CCPA, we also have to provide you with the "categories" of personal information we collect and disclose for “business purposes” (as those terms are defined by applicable law). Those categories include identifiers (such as name, address, email address, phone number, other account information, and cookies); commercial information (such as transaction data); internet or other network or device activity (such as IP address or service usage); geolocation information (general location); professional or employment-related data; other information that identifies or can be reasonably associated with you. The categories of sensitive personal information are account log-in and password or other credentials allowing access to your account.
We collect the categories of personal information identified above from the following sources: (1) directly from you; (2) through your use of the Online Services; (3) affiliates; and (4) third parties such as our resellers and service providers.
We or our service providers may collect and disclose the above categories of information for the purposes described in our Privacy Policy. This includes the following business or commercial purposes (as those terms are defined in applicable law):
- Our or our service provider’s operational purposes;
- consumer interactions on our site;
- Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
- Bug detection and error reporting;
- Customizing content that we or our service providers display on the Online Services;
- Providing Online Services (e.g., account servicing and maintenance); and
- Improving the Online Services and developing new services (e.g., by researching to develop new products or features);
Other uses about which we notify you
We may also use the above categories of personal information to comply with applicable laws and regulations. We may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent the identification of any particular user or device.
We may disclose certain categories of personal information with third parties (as defined by the CCPA) for the business purposes described above. For example, we may disclose identifiers and other information that identifies or can reasonably be associated with you with counterparties to your agreements. We may disclose identifiers with our marketing partners, and we may also disclose any of the categories described above with our subsidiaries and affiliates. If you connect your account with social media services or interact with social media plugins or links on the Online Service, we may disclose identifiers, commercial information, internet or other network or device activity, or general location with those social media services.
Consumer Rights
If you are a California resident, you may have certain rights. California law may permit you to request that we:
- Provide you the categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for "collecting," "selling," or "sharing" your personal information; the categories of third parties to whom we disclose or "sell," or with whom we "share," personal information; and the categories of personal information we "sell."
- Provide access to and/or a copy of certain information we hold about you.
- Delete certain information we have about you.
- Correct inaccurate personal information that we maintain about you.
You may have the right to receive information about the financial incentives we offer you (if any). You also have the right not to be discriminated against for exercising your rights. Certain information may be exempt from such requests under applicable law. We need certain types of information to provide the Online Services to you. If you ask us to delete it, you may no longer be able to access or use the Online Services.
“Sale” of Personal Information
California residents may opt out of the "sale" of their personal information. The CCPA broadly defines "sale" in a way that may include allowing third parties to receive certain information, such as cookie identifiers, IP addresses, and/or browsing behavior, to add to a profile about your device, browser, or you.
Depending on how you use the Service, we may disclose the following categories of information for such interest-based advertising, which may be considered a “sale” as defined by the CCPA: identifiers (such as IP address, device identifiers, and cookies) and internet and device activity. To opt out of such "sales," please submit a request to privacy@apexanalytix.com.
"Sharing" of Personal Information
California residents may opt out of the "sharing" of their personal information. The CCPA defines "sharing" as the targeting of advertising to a consumer based on that consumer's personal information obtained from the consumer's activity across websites.
Children Under 18
The Online Services are not intended for children under the age of 18. We do not knowingly solicit or collect Personal Information from children. If you are under the age of 18, please do not submit your e-mail address or any other personal information to us through the Site or any Online Services. If you are a parent or guardian and believe we may have collected information about your child, please contact us as described in the “Contact Us” section of this Privacy Policy.
Sensitive Personal Information
The CCPA also allows you to limit the use or disclosure of your "sensitive personal information" (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for purposes for which you cannot opt out under the CCPA.
Retention of Your Personal Information: Please see the "Data Retention" section above.
Children’s Privacy
The Online Services are not directed to children under the age of 13. We do not knowingly collect personal information (as that term is defined in the Children’s Online Privacy Protection Act (COPPA)) from children under 13. If we discover that an individual under 13 has provided us with personal information, we will delete the personal information as required by COPPA.
We do not knowingly process data of EU residents under 16 without parental consent. If we become aware that we have collected data from an EU resident under 16 without parental consent, we will take reasonable steps to delete it as soon as possible.
Changes to this Policy
We reserve the right to change or replace this Privacy Policy at our sole discretion. All revisions will be posted to the Legal Center and become effective when the modified policy is posted. If you disagree with being bound by those changes, you should not use the Online Services any further after publication. Your continued use of the Online Services after posting changes to our Privacy Policy means you accept the changes.
Contact Us
We welcome your questions and comments about our Privacy Policy. We want to know if you are or have become aware of a known or suspected privacy or security breach or for purposes of any of the other requests or inquiries outlined in this Privacy Policy.
You may also seek recourse through an independent dispute resolution body designated to address complaints free of charge, including, where applicable, the panel established by the EU Data Protection Authorities and, as applicable, the UK Information Commissioner’s Office (“ICO”) (and the Gibraltar Regulatory Authority (“GRA”)), the Swiss Federal Data Protection and Information Commissioner (“FDPIC”). You may also invoke binding arbitration under certain conditions.
To contact APEX regarding its Privacy Policy, please use the Contact Us link provided or write to us at:
Attention: Data Privacy Officer
APEX Analytix, LLC
1501 Highwoods Blvd., Suite 200
Greensboro, North Carolina 27410 United States
Effective September 10th 2024 to September 10th 2024
DownloadSummary of changes
Table of Contents
APEX Analytix, LLC Privacy Policy
APEX Analytix, LLC (“APEX,” “we”, or “us”) is sensitive to your concerns about how we use the personal information we collect from you through our website, www.apexanalytix.com (the “Site”) and applications, APIs, or services exchanging information with APEX, including but not limited to apexESG, smartvm, Cyber Risk, AuditView, and any other services sold by APEX or its authorized resellers (“Services”). The Site and Services are sometimes collectively referred to as “Online Services”.
This Privacy Policy is specific to APEX and its headquarters located in the United States and covers APEX’s treatment of the Personal Information (defined below) we collect when you access and use the Online Services (visitors may also be referred to as “you” or “your”). It also governs your visit to the Site and describes the choices available regarding our use of your Personal Information and how you can access and update this information. We are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute an invasion of your privacy.
By using the Online Services, you accept all of the terms of this Privacy Policy. If you do not agree with any terms of this Privacy Policy, do not use the Site or submit any Personal Information through any of our Services.
If you have questions or concerns about the Privacy Policy, please contact us at privacy@apexanalytix.com.
For purposes of data protection laws, APEX Analytix, LLC, 1501 Highwoods Blvd., Suite 200, Greensboro, North Carolina 27410, is the entity responsible for your information.
What Information Do We Collect?
Information You Provide to Us
"Personal Information" (also referred to as “Personal Data”) means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
APEX does not collect Personal Information unless you voluntarily provide it to us, and you may be required to provide us with Personal Information to access and use some of our Services. We collect Personal Information from you when you choose to interact with us. You can provide such information by completing inquiry and/or registration forms or by writing or emailing us. The type of Personal Information collected through our Online Services varies but may include, among other things, your name, address, phone number, company affiliation, and e-mail address.
Information We Collect Automatically
As you interact with the Online Services, we may also collect information automatically about your visit to our Site and/or use of the Services. This information is not Personal Information, but it may disclose aspects of your browsing history or certain information about you, such as an Internet Protocol (“IP”) address and publicly available information (collectively, the "Non-Personal Data"). Non-Personal Data is only used in aggregate form.
Information from Other Sources
We may collect information about you from third parties, such as resellers, marketing partners, customers, and researchers. Our resellers may provide information about you, such as your contact data, to facilitate contracting through our Online Services. We may combine this information with information we collect from you and use it as described in this Privacy Policy.
How Do We Use the Information We Collect?
We use the information we collect from the Online Services, including Personal Information, to:
- provide you with the Online Services;
- contact you when necessary, such as to provide answers to your questions or provide support;
- provide personalized service, such as by answering your emails or online requests;
- deliver and conduct surveys or evaluations;
- analyze and improve the Online Services or any other products and services we provide;
- provide information or materials regarding the Online Services;
- extend invitations to marketing events;
- register for a webcast or other event;
- provide access to content and news from APEX from time to time;
- consider your application for employment with APEX;
- analyze the behavior, habits, and preferences of persons who contact or interact with us to improve our service offerings;
- comply with our legal obligations or as permitted by law;
- protect the safety and/or integrity of our users, employees, third parties, members of the public, and/or the Online Services; and
- prevent fraud and enforce our legal terms.
We also use Non-Personal Data for various purposes, including helping diagnose problems with our server(s), building marketing profiles, aiding strategic development, administering and auditing usage of the Online Services, and improving their usability.
We may combine the information we collect from you through the Online Service with information obtained from other sources. We may also aggregate and/or de-identify information collected through the Online Services. De-identified or aggregated data may be used for any purpose, including, but not limited to, research and marketing purposes.
How Do We Disclose the Information We Receive?
Except as disclosed here, we do not rent, sell, or disclose your Personal Information to third parties. We disclose Personal Information as follows:
Third Parties, including Third Party Marketing
Unless specifically authorized by you, we do not provide Personal Information to third parties for marketing purposes. If we use a third-party service provider to provide any of the processing of Personal Data set forth herein, any third parties that we may share your data with are obliged to keep your details securely and to use them only to fulfill the Service they provide you on our behalf. When they no longer need your data to provide this service, they will dispose of the details in line with our procedures and applicable law. If you express interest in a third-party offer or purchase a package that includes a third-party offer, we may provide your Personal Information to that third party solely in connection with the offer you have selected.
Required by Law
We reserve the right to disclose your Personal Information as required by law, such as in response to lawful requests by public authorities, including law enforcement agencies, or if we are required to do so by law under regulation, a subpoena, court order, or by a government entity, including any requirement to meet national security requirements, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a legal request. In these circumstances, we may also share your Personal Information with our professional advisors.
Other Transfers
We may disclose Personal Information and other data to businesses controlling, controlled by, or under common control with us. If we are merged, acquired, or sold, or if some or all of our assets or equity are transferred, we may disclose or transfer Personal Information and other data in connection with the associated transactions.
Bankruptcy
In the event of an APEX bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or applying laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your personal information is treated, transferred, or used. If such an event occurs, your Personal Information may be treated like any other APEX asset and sold, transferred, or disclosed to third parties in accordance with applicable law or used in ways not contemplated or permitted under this Privacy Policy. In this case, you will be notified via email and/or a prominent notice on our Site and in our Legal Center of any change in ownership or uses of your personal information, and any choices you may have regarding your personal information.
Consent
In addition to the disclosures described in this Privacy Policy, we may disclose information about you whenever you consent to or direct such disclosure.
Uploading Content
You are solely responsible for the Personal Information and other content you post on or through the Online Services. You warrant that you have permission to upload any third-party information, and you agree to indemnify, defend, and hold harmless APEX and its affiliates, owners, directors, and personnel from and against any claim, liability, cost, and expense arising in connection with your provision of that information.
Do Not Track Requests; Third-Party Tracking (applicable to the Site)
We cannot presently omit you from usage analytics to the extent your browser only sends us a “do not track” message and does not otherwise screen you from tracking without any action on our part. Third parties, other than our vendors (such as our website analytics provider), do not have authorization from us to track which websites you visited before and after visiting the Site. That said, we cannot control third-party tracking, and some third-party tracking may occur without our knowledge or consent.
Use of Cookies and Third-Party Websites
We may maintain links to other websites and other websites may maintain links to the Online Services. This Privacy Policy applies only to the Site and not to other websites accessible from us or that you use to access our Online Services, each of which may have privacy policies materially different from this Privacy Policy. If you visit other websites, we are not responsible for the privacy practices or content of those sites. You are responsible for reviewing non-APEX website privacy policies to confirm that you understand and agree with them.
We may use cookies and certain visit recognition software services, such as Google Analytics and LeadLander, to improve the functionality of our Site and build a demographic profile. A cookie is a small piece of information sent by a web server to a web browser, enabling the server to collect information from the browser. You can configure your browser to reject cookies by modifying your browser settings, but if your browser settings do not accept cookies from us, then some Site functions may not operate as intended. Please be aware that the information sent by your browser as part of a web page request, including cookies and your IP address, may be collected through Google Analytics. In that case, Google will also receive this information, and Google's privacy policy governs its use.
Your Options (under the laws of the EU, EEA, UK and Switzerland)
Under the laws of certain countries, you may have certain rights and choices regarding the Personal Information we collect and maintain about you, and how we communicate with you.
If you are a resident of the European Union (“EU”), the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, you can request the following information regarding the Personal Information we store about you and how it is processed:
- Identity and the contact details of the person or organization that has determined how and why to process your data. (In some cases, this will be a representative located in the EU).
- Contact details of the data protection officer, where applicable.
- The purpose of the processing and the legal basis for processing.
- If the processing is based on the legitimate interests of APEX or a third party, information about those interests.
- The categories of Personal Data collected, stored, and processed.
- Recipient(s) or categories of recipients to whom the data is/will be disclosed
If we intend to transfer Personal Data to a third country or international organization, we must ensure this is done securely. The EU has approved sending Personal Data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure specific measures are in place to secure your information. To this end, we need certain information to transfer the Personal Data:
- How long will the data be stored?
- Details of your rights to access, correct, erase, restrict, or object to such processing.
- Information about your right to withdraw consent at any time.
- How to lodge a complaint with the supervisory authority.
- Whether the provision of Personal Data is a statutory or contractual requirement or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the Personal Data and the possible consequences of failing to provide such data.
- The source of Personal Data, if it was not collected directly from you.
Any details on automated decision-making, meaningful information about the logic involved, and the significance and expected consequences of such processing may be requested by the Data Subject. To make such a request, please get in touch with us as described in the “Contact Us” section of this Privacy Policy.
We will implement the requested changes as soon as possible, subject to reasonable limitations, such as the need to verify your identity. When you edit or change your preferences, the data you remove may remain in our databases or backup media because it is not always possible to completely remove or delete data from these locations.
You have the right to decline to share certain Personal Information with us, but we may not be able to provide you with some of the features and functionality of the Online Services.
You can also opt out of receiving future promotional communications and marketing from us. You may receive periodic email newsletters from us. These newsletters contain information on new features and facilities of note at the Site and within the Online Services. You can opt out of receiving such mailings. The registration forms allow you to tick a box if you do not wish to receive information about our services. If you receive electronic notifications from us through an email list, each message will include instructions on how to unsubscribe from that list. Your choice not to receive future promotional and marketing material will not prevent us from corresponding with you, by email or otherwise, regarding your existing or past business relationships with us.
Data Retention
We will process Personal Data for the period considered strictly necessary to provide the Services and to comply with applicable law. We will endeavor to keep your information accurate and up to date and not keep it longer than necessary. At a minimum, we will retain your information for as long as needed to provide you with the Services and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Therefore, we may maintain some or all of this data in our archives even after removing it from the Online Services. Personal Data processed to provide the Services may be stored for a longer period to enable any disputes concerning the provision of the Service to be handled. Personal Data processed for marketing purposes will be kept by us from the point at which the data subject provides his/her consent until this consent is revoked or we no longer deem the data to be accurate and up to date, whichever is earlier. Personal Data processed with a job application will only be retained for a year after the position is filled or until the data subject revokes his/her consent, whichever is earlier. If consent is revoked, the Personal Data may no longer be processed for the purposes but may still be stored to comply with local regulations and provisions that the local Data Protection Authority may establish from time to time.
Data Security
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put physical, electronic, and managerial procedures in place to safeguard the information we collect. We strive to ensure our servers and connections (to our servers) incorporate industry-standard encryption and security devices. The Internet, however, cannot be guaranteed to be completely secure; therefore, we cannot warrant the security of any Personal Information you provide to us. Accordingly, you provide this information at your own risk. WE DISCLAIM LIABILITY FOR THE THEFT, LOSS, OR INTERCEPTION OF OR UNAUTHORIZED ACCESS OR DAMAGE TO YOUR DATA OR COMMUNICATIONS BY USING THE SITE AND/OR OUR ONLINE SERVICES. YOU ACKNOWLEDGE THAT YOU UNDERSTAND AND ASSUME THESE RISKS.
IF YOU BELIEVE YOUR PRIVACY HAS BEEN BREACHED THROUGH THE USE OF OUR WEBSITE OR ONLINE SERVICES, PLEASE CONTACT US IMMEDIATELY AT privacy@apexanalytix.com.
Legal Basis for Use of Your Information
Our legal grounds for processing your information are as follows:
To honor our contractual commitments to you: most of our processing of Personal Data is to meet our contractual obligations to our users. For example, we handle Personal Data on this basis to allow you to sign up for our Online Services.
Consent: Where required by law, and in some other cases, we handle Personal Data based on your implied or express consent, including your consent to the processing of your Personal Data pursuant to this Privacy Policy.
Legitimate interests: In many cases, we handle Personal Data on the basis that it furthers our legitimate interests in commercial activities in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals. This includes operating our business and the Online Services; providing security for our websites, products, software, or applications; marketing; receiving payments; preventing fraud; and knowing the customers we are providing the Online Services to.
Legal compliance: We need to use and disclose Personal Data in certain ways to comply with our legal obligations (such as disclosing data to tax authorities).
We will not use your Personal Information in a manner inconsistent with the purpose of its original collection unless you have provided your consent.
Data Subject Rights
Residents of the European Economic Area (“EEA”), Switzerland, and the UK can exercise certain data subject rights under applicable data protection laws. Where such rights apply, we will comply with requests to exercise these rights in accordance with applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. If these rights apply to you, they may permit you to request that we:
- provide access to and/or a copy of certain information we hold about you
- prevent the processing of your information for direct marketing purposes (including any direct marketing processing based on profiling)
- update information that is out of date or incorrect
- delete certain information that we are holding about you
- restrict the way that we process and disclose certain of your information
- transfer your information to a third-party provider of services
- revoke your consent for the processing of your information
For more information on how to exercise these rights, please contact us using the information in the “Contact Us” section below. If applicable, you may file a complaint with the data protection supervisory authority in the country where you are based. Alternatively, you may seek a remedy through local courts if you believe your rights have been breached.
International Data Transfers
Due to the nature of the Internet, if you are visiting the Site or using Online Services from a country other than the United States, your communications will inevitably transfer information across international boundaries. If you are located outside of the United States, please be advised that any information you provide to us will be transferred to the United States and that by browsing the Site and submitting information to the Site or using the Online Services, you explicitly authorize its transfer. Information submitted to us will be transferred to, processed, and stored in the United States or, for certain customers, the European Union or the United Kingdom. If you post or transfer any information to or through the Online Services, you are agreeing to such information, including Personal Information, being hosted and accessed in the United States, the European Union, and the United Kingdom. Please note that the privacy laws of the United States, the European Union, and the United Kingdom may differ from those where you are a resident.
We adhere and comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. Data Privacy Framework (“UK Extension to the EU-U.S. DPF”), and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), respectively developed by the U.S. Department of Commerce and the European Commission, the UK Government, and the Swiss Federal Administration to provide U.S. organizations with reliable mechanisms of Personal Data transfers to the United States from the European Union / European Economic Area, the United Kingdom (and Gibraltar), and Switzerland, while ensuring data protection that is consistent with EU, UK and Swiss law. For additional details, please see the Data Privacy Framework (DPF) Program section below. Where required, we will use appropriate safeguards for transferring data outside of the EEA, Switzerland, and the UK. This may include signing Standard Contractual Clauses that govern the transfers of such data, which may be used in conjunction with additional safeguards. For more information about these transfer mechanisms, please contact us as detailed in the “Contact Us” section below.
Data Privacy Framework (DPF) Program
We comply with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) regarding the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
APEX and its U.S. subsidiary APEX Analytix HK Holding Corporation adhere to the EU-U.S. DPF Principles regarding Personal Data transferred from the European Union and the United Kingdom and the Swiss-U.S. DPF Principles regarding Personal Data transferred from Switzerland. As described above, we rely on the direct collection of personal information from individuals located outside of the U.S., or we use another basis, such as Standard Contractual Clauses, for cross-border transfers of personal information from the EU member countries and the United Kingdom and from Switzerland to the U.S. We are committed to being subject to the DPF Principles regarding all Personal Data received from the EU, the United Kingdom (and Gibraltar), and Switzerland in reliance on the EU-U.S. DPF. We are subject to the investigatory and enforcement powers of the Federal Trade Commission (“FTC”). We may also incur liability in cases of onward transfers to third parties.
Supplemental Privacy Notice for California Residents
This Supplemental Privacy Notice supplements the information in our Privacy Policy above and, except as provided herein, applies solely to California residents. It applies to personal information we collect on or through the Online Services and through other means (such as information collected offline, in person, and over the telephone). It does not apply to the personal information we collect from our employees and job applicants in their capacity as employees and job applicants. It also does not apply to personal information we process as a service provider.
According to Section 1798.83 of the California Civil Code, residents of California have the right to request from a business with whom the California resident has an established business relationship certain information with respect to the types of personal information the business shares with third parties for direct marketing purposes by such third party and the identities of the third parties with whom the business has shared such information in the immediately preceding calendar year. To access this information, please get in touch with us as described in the “Contact Us” section of this Privacy Policy.
Summary of Information We Collect
If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and disclose your “personal information” and "sensitive personal information" (as defined in the California Consumer Privacy Act (“CCPA”)).
Throughout our Privacy Policy, we describe the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. Under the CCPA, we also have to provide you with the "categories" of personal information we collect and disclose for “business purposes” (as those terms are defined by applicable law). Those categories include identifiers (such as name, address, email address, phone number, other account information, and cookies); commercial information (such as transaction data); internet or other network or device activity (such as IP address or service usage); geolocation information (general location); professional or employment-related data; other information that identifies or can be reasonably associated with you. The categories of sensitive personal information are account log-in and password or other credentials allowing access to your account.
We collect the categories of personal information identified above from the following sources: (1) directly from you; (2) through your use of the Online Services; (3) affiliates; and (4) third parties such as our resellers and service providers.
We or our service providers may collect and disclose the above categories of information for the purposes described in our Privacy Policy. This includes the following business or commercial purposes (as those terms are defined in applicable law):
- Our or our service provider’s operational purposes;
- consumer interactions on our site;
- Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
- Bug detection and error reporting;
- Customizing content that we or our service providers display on the Online Services;
- Providing Online Services (e.g., account servicing and maintenance); and
- Improving the Online Services and developing new services (e.g., by researching to develop new products or features);
Other uses about which we notify you
We may also use the above categories of personal information to comply with applicable laws and regulations. We may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent the identification of any particular user or device.
We may disclose certain categories of personal information with third parties (as defined by the CCPA) for the business purposes described above. For example, we may disclose identifiers and other information that identifies or can reasonably be associated with you with counterparties to your agreements. We may disclose identifiers with our marketing partners, and we may also disclose any of the categories described above with our subsidiaries and affiliates. If you connect your account with social media services or interact with social media plugins or links on the Online Service, we may disclose identifiers, commercial information, internet or other network or device activity, or general location with those social media services.
Consumer Rights
If you are a California resident, you may have certain rights. California law may permit you to request that we:
- Provide you the categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for "collecting," "selling," or "sharing" your personal information; the categories of third parties to whom we disclose or "sell," or with whom we "share," personal information; and the categories of personal information we "sell."
- Provide access to and/or a copy of certain information we hold about you.
- Delete certain information we have about you.
- Correct inaccurate personal information that we maintain about you.
You may have the right to receive information about the financial incentives we offer you (if any). You also have the right not to be discriminated against for exercising your rights. Certain information may be exempt from such requests under applicable law. We need certain types of information to provide the Online Services to you. If you ask us to delete it, you may no longer be able to access or use the Online Services.
“Sale” of Personal Information
California residents may opt out of the "sale" of their personal information. The CCPA broadly defines "sale" in a way that may include allowing third parties to receive certain information, such as cookie identifiers, IP addresses, and/or browsing behavior, to add to a profile about your device, browser, or you.
Depending on how you use the Service, we may disclose the following categories of information for such interest-based advertising, which may be considered a “sale” as defined by the CCPA: identifiers (such as IP address, device identifiers, and cookies) and internet and device activity. To opt out of such "sales," please submit a request to privacy@apexanalytix.com.
"Sharing" of Personal Information
California residents may opt out of the "sharing" of their personal information. The CCPA defines "sharing" as the targeting of advertising to a consumer based on that consumer's personal information obtained from the consumer's activity across websites.
Children Under 18
The Online Services are not intended for children under the age of 18. We do not knowingly solicit or collect Personal Information from children. If you are under the age of 18, please do not submit your e-mail address or any other personal information to us through the Site or any Online Services. If you are a parent or guardian and believe we may have collected information about your child, please contact us as described in the “Contact Us” section of this Privacy Policy.
Sensitive Personal Information
The CCPA also allows you to limit the use or disclosure of your "sensitive personal information" (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for purposes for which you cannot opt out under the CCPA.
Retention of Your Personal Information: Please see the "Data Retention" section above.
Children’s Privacy
The Online Services are not directed to children under the age of 13. We do not knowingly collect personal information (as that term is defined in the Children’s Online Privacy Protection Act (COPPA)) from children under 13. If we discover that an individual under 13 has provided us with personal information, we will delete the personal information as required by COPPA.
We do not knowingly process data of EU residents under 16 without parental consent. If we become aware that we have collected data from an EU resident under 16 without parental consent, we will take reasonable steps to delete it as soon as possible.
Changes to this Policy
We reserve the right to change or replace this Privacy Policy at our sole discretion. All revisions will be posted to the Legal Center and become effective when the modified policy is posted. If you disagree with being bound by those changes, you should not use the Online Services any further after publication. Your continued use of the Online Services after posting changes to our Privacy Policy means you accept the changes.
Contact Us
We welcome your questions and comments about our Privacy Policy. We want to know if you are or have become aware of a known or suspected privacy or security breach or for purposes of any of the other requests or inquiries outlined in this Privacy Policy.
You may also seek recourse through an independent dispute resolution body designated to address complaints free of charge, including, where applicable, the panel established by the EU Data Protection Authorities and, as applicable, the UK Information Commissioner’s Office (“ICO”) (and the Gibraltar Regulatory Authority (“GRA”)), the Swiss Federal Data Protection and Information Commissioner (“FDPIC”). You may also invoke binding arbitration under certain conditions.
To contact APEX regarding its Privacy Policy, please use the Contact Us link provided or write to us at:
Attention: Data Privacy Officer
APEX Analytix, LLC
1501 Highwoods Blvd., Suite 200
Greensboro, North Carolina 27410 United States
Effective September 6th 2024 to September 10th 2024
DownloadTable of Contents
APEX Analytix, LLC Privacy Policy
APEX Analytix, LLC (“APEX,” “we”, or “us”) is sensitive to your concerns about how we use the personal information we collect from you through our website, www.apexanalytix.com (the “Site”) and applications, APIs, or services exchanging information with APEX, including but not limited to apexESG, smartvm, Cyber Risk, AuditView, and any other services sold by APEX or its authorized resellers (“Services”). The Site and Services are sometimes collectively referred to as “Online Services”.
This Privacy Policy is specific to APEX and its headquarters located in the United States and covers APEX’s treatment of the Personal Information (defined below) we collect when you access and use the Online Services (visitors may also be referred to as “you” or “your”). It also governs your visit to the Site and describes the choices available to you regarding our use of your Personal Information and how you can access and update this information. We are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute an invasion of your privacy.
By using the Online Services, you accept all of the terms of this Privacy Policy. If you do not agree with any terms of this Privacy Policy, do not use the Site or submit any Personal Information through any of our Services.
If you have questions or concerns about the Privacy Policy, please contact us at privacy@apexanalytix.com.
For purposes of data protection laws, APEX Analytix, LLC, 1501 Highwoods Blvd., Suite 200, Greensboro, North Carolina 27410, is the entity responsible for your information.
What Information Do We Collect?
Information You Provide to Us
"Personal Information" (also referred to as “Personal Data”) means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
APEX does not collect Personal Information unless you voluntarily provide it to us, and you may be required to provide us with Personal Information to access and use some of our Services. We collect Personal Information from you when you choose to interact with us. You can provide such information to us by completing inquiry and/or registration forms or by writing or emailing us. The type of Personal Information collected through our Online Services varies but may include, among other things, your name, address, phone number, company affiliation, and e-mail address.
Information We Collect Automatically
As you interact with the Online Services, we may also collect information automatically about your visit to our Site and/or use of the Services. This information is not Personal Information, but it may disclose aspects of your browsing history or certain information about you, such as an Internet Protocol (“IP”) address and publicly available information (collectively, the "Non-Personal Data"). Non-Personal Data is only used in aggregate form.
Information from Other Sources
We may collect information about you from third parties, such as resellers, marketing partners, customers, and researchers. Our resellers may provide information about you, such as your contact data, to facilitate contracting through our Online Services. We may combine this information with information we collect from you and use it as described in this Privacy Policy.
How Do We Use the Information We Collect?
We use the information we collect from the Online Services, including Personal Information, to:
- provide you with the Online Services;
- contact you when necessary, such as to provide answers to your questions or provide support;
- provide personalized service, such as by answering your emails or online requests;
- deliver and conduct surveys or evaluations;
- analyze and improve the Online Services or any other products and services we provide;
- provide information or materials regarding the Online Services;
- extend invitations to marketing events;
- register for a webcast or other event;
- provide access to content and news from APEX from time to time;
- consider your application for employment with APEX;
- analyze the behavior, habits, and preferences of persons who contact or interact with us to improve our service offerings;
- comply with our legal obligations or as permitted by law;
- protect the safety and/or integrity of our users, employees, third parties, members of the public, and/or the Online Services; and
- prevent fraud and enforce our legal terms.
We also use Non-Personal Data for various purposes, including helping diagnose problems with our server(s), building marketing profiles, aiding strategic development, administering and auditing usage of the Online Services, and improving their usability.
We may combine the information we collect from you through the Online Service with information obtained from other sources. We may also aggregate and/or de-identify information collected through the Online Services. De-identified or aggregated data may be used for any purpose, including, but not limited to, research and marketing purposes.
How Do We Disclose the Information We Receive?
Except as disclosed here, we do not rent, sell, or disclose your Personal Information to third parties. We disclose Personal Information as follows:
Third Parties, including Third Party Marketing
Unless specifically authorized by you, we do not provide Personal Information to third parties for marketing purposes. If we use a third-party service provider to provide any of the processing of Personal Data set forth herein, any third parties that we may share your data with are obliged to keep your details securely and to use them only to fulfill the Service they provide you on our behalf. When they no longer need your data to provide this service, they will dispose of the details in line with our procedures and applicable law. If you express interest in a third-party offer or purchase a package that includes a third-party offer, we may provide your Personal Information to that third party solely in connection with the offer you have selected.
Required by Law
We reserve the right to disclose your Personal Information as required by law, such as in response to lawful requests by public authorities, including law enforcement agencies, or if we are required to do so by law under regulation, a subpoena, court order, or by a government entity, including any requirement to meet national security requirements, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a legal request. In these circumstances, we may also share your Personal information with our professional advisors.
Other Transfers
We may disclose Personal Information and other data to businesses controlling, controlled by, or under common control with us. If we are merged, acquired, or sold, or if some or all of our assets or equity are transferred, we may disclose or transfer Personal Information and other data in connection with the associated transactions.
Bankruptcy
In the event of an APEX bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or applying laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your personal information is treated, transferred, or used. If such an event occurs, your Personal Information may be treated like any other APEX asset and sold, transferred, or disclosed to third parties in accordance with applicable law or used in ways not contemplated or permitted under this Privacy Policy. In this case, you will be notified via email and/or a prominent notice on our Site and in our Legal Center of any change in ownership or uses of your personal information, and any choices you may have regarding your personal information.
Consent
In addition to the disclosures described in this Privacy Policy, we may disclose information about you whenever you consent to or direct such disclosure.
Uploading Content
You are solely responsible for the Personal Information and other content you post on or through the Online Services. You warrant that you have permission to upload any third-party information, and you agree to indemnify, defend, and hold harmless APEX and its affiliates, owners, directors, and personnel from and against any claim, liability, cost, and expense arising in connection with your provision of that information.
Do Not Track Requests; Third-Party Tracking (applicable to the Site)
We cannot presently omit you from usage analytics to the extent your browser only sends us a “do not track” message and does not otherwise screen you from tracking without any action on our part. Third parties, other than our vendors (such as our website analytics provider), do not have authorization from us to track which websites you visited before and after visiting the Site. That said, we cannot control third-party tracking, and some third-party tracking may occur without our knowledge or consent.
Use of Cookies and Third-Party Websites
We may maintain links to other websites and other websites may maintain links to the Online Services. This Privacy Policy applies only to the Site and not to other websites accessible from us or that you use to access our Online Services, each of which may have privacy policies materially different from this Privacy Policy. If you visit other websites, we are not responsible for the privacy practices or content of those sites. You are responsible for reviewing non-APEX website privacy policies to confirm that you understand and agree with them.
We may use cookies and certain visit recognition software services, such as Google Analytics and LeadLander, to improve the functionality of our Site and build a demographic profile. A cookie is a small piece of information sent by a web server to a web browser, enabling the server to collect information from the browser. You can configure your browser to reject cookies by modifying your browser settings, but if your browser settings do not accept cookies from us, then some Site functions may not operate as intended. Please be aware that the information sent by your browser as part of a web page request, including cookies and your IP address, may be collected through Google Analytics. In that case, Google will also receive this information and its use of it is governed by Google's Privacy Policy.
Your Options (under the laws of the EU, EEA, UK and Switzerland)
Under the laws of certain countries, you may have certain rights and choices regarding the Personal Information we collect and maintain about you, and how we communicate with you.
If you are a resident of the European Union (“EU”), the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, you can request the following information regarding the Personal Information we store about you and how it is processed:
- Identity and the contact details of the person or organization that has determined how and why to process your data. (In some cases, this will be a representative located in the EU).
- Contact details of the data protection officer, where applicable.
- The purpose of the processing and the legal basis for processing.
- If the processing is based on the legitimate interests of APEX or a third party, information about those interests.
- The categories of Personal Data collected, stored, and processed.
- Recipient(s) or categories of recipients to whom the data is/will be disclosed
If we intend to transfer Personal Data to a third country or international organization, we must ensure this is done securely. The EU has approved sending Personal Data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure specific measures are in place to secure your information. To this end, we need certain information to transfer the Personal Data:
- How long will the data be stored?
- Details of your rights to access, correct, erase, restrict, or object to such processing.
- Information about your right to withdraw consent at any time.
- How to lodge a complaint with the supervisory authority.
- Whether the provision of Personal Data is a statutory or contractual requirement or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the Personal Data and the possible consequences of failing to provide such data.
- The source of Personal Data, if it was not collected directly from you.
Any details on automated decision-making, meaningful information about the logic involved, and the significance and expected consequences of such processing may be requested by the Data Subject. To make such a request, please get in touch with us as described in the “Contact Us” section of this Privacy Policy.
We will implement the requested changes as soon as possible, subject to reasonable limitations, such as the need to verify your identity. When you edit or change your preferences, the data you remove may remain in our databases or backup media because it is not always possible to completely remove or delete data from these locations.
You have the right to decline to share certain Personal Information with us, but we may not be able to provide you with some of the features and functionality of the Online Services.
You can also opt-out of receiving future promotional communications and marketing from us. You may receive periodic email newsletters from us. These newsletters contain information on new features and facilities of note at the Site and within the Online Services. You can opt-out of receiving such mailings. The registration forms allow you to tick a box if you do not wish to receive information about our services. If you receive electronic notifications from us through an email list, each message will include instructions on how to unsubscribe from that list. Your choice not to receive future promotional and marketing material will not prevent us from corresponding with you, by email or otherwise, regarding your existing or past business relationships with us.
Data Retention
We will process Personal Data for the period considered strictly necessary to provide the Services and to comply with applicable law. We will endeavor to keep your information accurate and up to date and not keep it longer than necessary. At a minimum, we will retain your information for as long as needed to provide you with the Services and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Therefore, we may maintain some or all of this data in our archives even after removing it from the Online Services. Personal Data processed to provide the Services may be stored for a longer period to enable any disputes concerning the provision of the Service to be handled. Personal Data processed for marketing purposes will be kept by us from the point at which the data subject provides his/her consent until this consent is revoked or we no longer deem the data to be accurate and up to date, whichever is earlier. Personal Data processed in association with a job application will only be retained for a year after the position is filled or until the data subject revokes his/her consent, whichever is earlier. If consent is revoked, the Personal Data may no longer be processed for the purposes but may still be stored to comply with local regulations and provisions that the local Data Protection Authority may establish from time to time.
Data Security
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put physical, electronic, and managerial procedures in place to safeguard the information we collect. We strive to ensure our servers and connections (to our servers) incorporate industry-standard encryption and security devices. The Internet, however, cannot be guaranteed to be completely secure; therefore, we cannot warrant the security of any Personal Information you provide to us. Accordingly, you provide this information at your own risk. WE DISCLAIM LIABILITY FOR THE THEFT, LOSS, OR INTERCEPTION OF OR UNAUTHORIZED ACCESS OR DAMAGE TO YOUR DATA OR COMMUNICATIONS BY USING THE SITE AND/OR OUR ONLINE SERVICES. YOU ACKNOWLEDGE THAT YOU UNDERSTAND AND ASSUME THESE RISKS.
IF YOU BELIEVE YOUR PRIVACY HAS BEEN BREACHED THROUGH THE USE OF OUR WEBSITE OR ONLINE SERVICES
PLEASE CONTACT US IMMEDIATELY AT privacy@apexanalytix.com.
Legal Basis for Use of Your Information
Our legal grounds for processing your information are as follows:
To honor our contractual commitments to you: most of our processing of Personal Data is to meet our contractual obligations to our users. For example, we handle Personal Data on this basis to allow you to sign up for our Online Services.
Consent: Where required by law, and in some other cases, we handle Personal Data based on your implied or express consent, including your consent to the processing of your Personal Data pursuant to this Privacy Policy.
Legitimate interests: In many cases, we handle Personal Data on the basis that it furthers our legitimate interests in commercial activities in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals. This includes operating our business and the Online Services; providing security for our websites, products, software, or applications; marketing; receiving payments; preventing fraud; and knowing the customer to whom we are providing the Online Services.
Legal compliance: We need to use and disclose Personal Data in certain ways to comply with our legal obligations (such as disclosing data to tax authorities).
We will not use your Personal Information in a manner inconsistent with the purpose of its original collection unless you have provided your consent.
Data Subject Rights
Residents of the European Economic Area (“EEA”), Switzerland, and the UK can exercise certain data subject rights available to them under applicable data protection laws. Where such rights apply, we will comply with requests to exercise these rights in accordance with applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. If these rights apply to you, they may permit you to request that we:
- provide access to and/or a copy of certain information we hold about you
- prevent the processing of your information for direct marketing purposes (including any direct marketing processing based on profiling)
- update information that is out of date or incorrect
- delete certain information that we are holding about you
- restrict the way that we process and disclose certain of your information
- transfer your information to a third-party provider of services
- revoke your consent for the processing of your information
For more information on how to exercise these rights, please contact us using the information in the “Contact Us” section below. If applicable, you may make a complaint to the data protection supervisory authority in the country where you are based. Alternatively, you may seek a remedy through local courts if you believe your rights have been breached.
International Data Transfers
Due to the nature of the Internet, if you are visiting the Site or using Online Services from a country other than the United States, your communications will inevitably transfer information across international boundaries. If you are located outside of the United States, please be advised that any information you provide to us will be transferred to the United States and that by browsing the Site and submitting information to the Site or using the Online Services, you explicitly authorize its transfer. Information submitted to us will be transferred to, processed, and stored in the United States or, for certain customers, the European Union or the United Kingdom. If you post or transfer any information to or through the Online Services, you are agreeing to such information, including Personal Information, being hosted and accessed in the United States, the European Union, and the United Kingdom. Please note that the privacy laws of the United States, the European Union, and the United Kingdom may be different from those in the place where you are a resident.
We adhere and comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. Data Privacy Framework (“UK Extension to the EU-U.S. DPF”), and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), respectively developed by the U.S. Department of Commerce and the European Commission, the UK Government, and the Swiss Federal Administration to provide U.S. organizations with reliable mechanisms of Personal Data transfers to the United States from the European Union / European Economic Area, the United Kingdom (and Gibraltar), and Switzerland, while ensuring data protection that is consistent with EU, UK and Swiss law. For additional details, please see the Data Privacy Framework (DPF) Program section below. Where required, we will use appropriate safeguards for transferring data outside of the EEA, Switzerland, and the UK. This may include signing Standard Contractual Clauses that govern the transfers of such data, which may be used in conjunction with additional safeguards. For more information about these transfer mechanisms, please contact us as detailed in the “Contact Us” section below.
Data Privacy Framework (DPF) Program
We comply with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) regarding the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
APEX and its U.S. subsidiary APEX Analytix HK Holding Corporation adhere to the EU-U.S. DPF Principles regarding Personal Data transferred from the European Union and the United Kingdom and the Swiss-U.S. DPF Principles regarding Personal Data transferred from Switzerland. As described above, we rely on the direct collection of personal information from individuals located outside of the U.S., or we use another basis, such as Standard Contractual Clauses, for cross-border transfers of personal information from the EU member countries and the United Kingdom and from Switzerland to the U.S. We are committed to being subject to the DPF Principles regarding all Personal Data received from the EU, the United Kingdom (and Gibraltar), and Switzerland in reliance on the EU-U.S. DPF. We are subject to the investigatory and enforcement powers of the Federal Trade Commission (“FTC”). We may also incur liability in cases of onward transfers to third parties.
Supplemental Privacy Notice for California Residents
This Supplemental Privacy Notice supplements the information in our Privacy Policy above and, except as provided herein, applies solely to California residents. It applies to personal information we collect on or through the Online Services and through other means (such as information collected offline, in person, and over the telephone). It does not apply to the personal information we collect from our employees and job applicants in their capacity as employees and job applicants. It also does not apply to personal information we process as a service provider.
Pursuant to Section 1798.83 of the California Civil Code, residents of California have the right to request from a business with whom the California resident has an established business relationship, certain information with respect to the types of personal information the business shares with third parties for direct marketing purposes by such third party and the identities of the third parties with whom the business has shared such information in the immediately preceding calendar year. To access this information, please contact us as described in the “Contact Us” section of this Privacy Policy.
Summary of Information We Collect
If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and disclose your “personal information” and "sensitive personal information" (as defined in the California Consumer Privacy Act (“CCPA”)).
Throughout our Privacy Policy, we describe the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. Under the CCPA, we also have to provide you with the "categories" of personal information we collect and disclose for “business purposes” (as those terms are defined by applicable law). Those categories include identifiers (such as name, address, email address, phone number, other account information, and cookies); commercial information (such as transaction data); internet or other network or device activity (such as IP address or service usage); geolocation information (general location); professional or employment-related data; other information that identifies or can be reasonably associated with you. The categories of sensitive personal information are account log-in and password or other credentials allowing access to your account.
We collect the categories of personal information identified above from the following sources: (1) directly from you; (2) through your use of the Online Services; (3) affiliates; and (4) third parties such as our resellers and service providers.
We or our service providers may collect and disclose the above categories of information for the purposes described in our Privacy Policy. This includes the following business or commercial purposes (as those terms are defined in applicable law):
- Our or our service provider’s operational purposes;
- consumer interactions on our site;
- Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
- Bug detection and error reporting;
- Customizing content that we or our service providers display on the Online Services;
- Providing Online Services (e.g., account servicing and maintenance); and
- Improving the Online Services and developing new services (e.g., by conducting research to develop new products or features);
Other uses about which we notify you
We may also use the above categories of personal information to comply with applicable laws and regulations. We may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent the identification of any particular user or device.
We may disclose certain categories of personal information with third parties (as defined by the CCPA) for the business purposes described above. For example, we may disclose identifiers and other information that identifies or can reasonably be associated with you with counterparties to your agreements. We may disclose identifiers with our marketing partners, and we may also disclose any of the categories described above with our subsidiaries and affiliates. If you connect your account with social media services or interact with social media plugins or links on the Online Service, we may disclose identifiers, commercial information, internet or other network or device activity, or general location with those social media services.
Consumer Rights
If you are a California resident, you may have certain rights. California law may permit you to request that we:
- Provide you the categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for "collecting," "selling," or "sharing" your personal information; the categories of third parties to whom we disclose or "sell," or with whom we "share," personal information; and the categories of personal information we "sell."
- Provide access to and/or a copy of certain information we hold about you.
- Delete certain information we have about you.
- Correct inaccurate personal information that we maintain about you.
You may have the right to receive information about the financial incentives we offer you (if any). You also have the right not to be discriminated against for exercising your rights. Certain information may be exempt from such requests under applicable law. We need certain types of information so that we can provide the Online Services to you. If you ask us to delete it, you may no longer be able to access or use the Online Services.
“Sale” of Personal Information
California residents may opt out of the "sale" of their personal information. The CCPA broadly defines "sale" in a way that may include allowing third parties to receive certain information, such as cookie identifiers, IP addresses, and/or browsing behavior, to add to a profile about your device, browser, or you.
Depending on how you use the Service, we may disclose the following categories of information for such interest-based advertising, which may be considered a “sale” as defined by the CCPA: identifiers (such as IP address, device identifiers, and cookies) and internet and device activity. To opt out of such "sales," please submit a request to privacy@apexanalytix.com.
"Sharing" of Personal Information
California residents may opt out of the "sharing" of their personal information. The CCPA defines "sharing" as the targeting of advertising to a consumer based on that consumer's personal information obtained from the consumer's activity across websites.
Children Under 18
The Online Services are not intended for children under the age of 18. We do not knowingly solicit or collect Personal Information from children. If you are under the age of 18, please do not submit your e-mail address or any other personal information to us through the Site or any Online Services. If you are a parent or guardian and believe we may have collected information about your child, please contact us as described in the “Contact Us” section of this Privacy Policy.
Sensitive Personal Information
The CCPA also allows you to limit the use or disclosure of your "sensitive personal information" (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for purposes for which you cannot opt-out under the CCPA.
Retention of Your Personal Information Please see the "Data Retention" section above.
Children’s Privacy
The Online Services are not directed to children under the age of 13. We do not knowingly collect personal information (as that term is defined in the Children’s Online Privacy Protection Act (COPPA)) from children under 13. If we discover that an individual under 13 has provided us with personal information, we will delete the personal information as required by COPPA.
We do not knowingly process data of EU residents under the age of 16 without parental consent. If we become aware that we have collected data from an EU resident under the age of 16 without parental consent, we will take reasonable steps to delete it as soon as possible.
Changes to this Policy
We reserve the right to change or replace this Privacy Policy at our sole discretion. All revisions will be posted to the Legal Center and become effective when the modified policy is posted. If you disagree with being bound by those changes, you should not use the Online Services any further after publication. Your continued use of the Online Services after posting changes to our Privacy Policy means you accept the changes.
Contact Us
We welcome your questions and comments about our Privacy Policy. We want to know if you are or have become aware of a known or suspected privacy or security breach or for purposes of any of the other requests or inquiries set forth in this Privacy Policy.
You may also seek recourse through an independent dispute resolution body designated to address complaints free of charge, including, where applicable, the panel established by the EU Data Protection Authorities and, as applicable, the UK Information Commissioner’s Office (“ICO”) (and the Gibraltar Regulatory Authority (“GRA”)), the Swiss Federal Data Protection and Information Commissioner (“FDPIC”). You may also invoke binding arbitration under certain conditions.
To contact APEX regarding its Privacy Policy, please use the Contact Us link provided or write to us at:
Attention: Data Privacy Officer
APEX Analytix, LLC
1501 Highwoods Blvd., Suite 200
Greensboro, North Carolina 27410 United States
Effective September 6th 2024 to September 6th 2024
DownloadTable of Contents
APEX Analytix, LLC Privacy Policy
APEX Analytix, LLC (“APEX,” “we”, or “us”) is sensitive to your concerns about how we use the personal information we collect from you through our website, www.apexanalytix.com (the “Site”) and applications, APIs, or services exchanging information with APEX, including but not limited to apexESG, smartvm, Cyber Risk, AuditView, and any other services sold by APEX or its authorized resellers (“Services”). The Site and Services are sometimes collectively referred to as “Online Services”.
This Privacy Policy is specific to APEX and its headquarters located in the United States and covers APEX’s treatment of the Personal Information (defined below) we collect when you access and use the Online Services (visitors may also be referred to as “you” or “your”). It also governs your visit to the Site and describes the choices available to you regarding our use of your Personal Information and how you can access and update this information. We are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute an invasion of your privacy.
By using the Online Services, you accept all of the terms of this Privacy Policy. If you do not agree with any terms of this Privacy Policy, do not use the Site or submit any Personal Information through any of our Services.
If you have questions or concerns about the Privacy Policy, please contact us at privacy@apexanalytix.com.
For purposes of data protection laws, APEX Analytix, LLC, 1501 Highwoods Blvd., Suite 200, Greensboro, North Carolina 27410, is the entity responsible for your information.
What Information Do We Collect?
Information You Provide to Us
"Personal Information" (also referred to as “Personal Data”) means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
APEX does not collect Personal Information unless you voluntarily provide it to us, and you may be required to provide us with Personal Information to access and use some of our Services. We collect Personal Information from you when you choose to interact with us. You can provide such information to us by completing inquiry and/or registration forms or by writing or emailing us. The type of Personal Information collected through our Online Services varies but may include, among other things, your name, address, phone number, company affiliation, and e-mail address.
Information We Collect Automatically
As you interact with the Online Services, we may also collect information automatically about your visit to our Site and/or use of the Services. This information is not Personal Information, but it may disclose aspects of your browsing history or certain information about you, such as an Internet Protocol (“IP”) address and publicly available information (collectively, the "Non-Personal Data"). Non-Personal Data is only used in aggregate form.
Information from Other Sources
We may collect information about you from third parties, such as resellers, marketing partners, customers, and researchers. Our resellers may provide information about you, such as your contact data, to facilitate contracting through our Online Services. We may combine this information with information we collect from you and use it as described in this Privacy Policy.
How Do We Use the Information We Collect?
We use the information we collect from the Online Services, including Personal Information, to:
- provide you with the Online Services;
- contact you when necessary, such as to provide answers to your questions or provide support;
- provide personalized service, such as by answering your emails or online requests;
- deliver and conduct surveys or evaluations;
- analyze and improve the Online Services or any other products and services we provide;
- provide information or materials regarding the Online Services;
- extend invitations to marketing events;
- register for a webcast or other event;
- provide access to content and news from APEX from time to time;
- consider your application for employment with APEX;
- analyze the behavior, habits, and preferences of persons who contact or interact with us to improve our service offerings;
- comply with our legal obligations or as permitted by law;
- protect the safety and/or integrity of our users, employees, third parties, members of the public, and/or the Online Services; and
- prevent fraud and enforce our legal terms.
We also use Non-Personal Data for various purposes, including helping diagnose problems with our server(s), building marketing profiles, aiding strategic development, administering and auditing usage of the Online Services, and improving their usability.
We may combine the information we collect from you through the Online Service with information obtained from other sources. We may also aggregate and/or de-identify information collected through the Online Services. De-identified or aggregated data may be used for any purpose, including, but not limited to, research and marketing purposes.
How Do We Disclose the Information We Receive?
Except as disclosed here, we do not rent, sell, or disclose your Personal Information to third parties. We disclose Personal Information as follows:
Third Parties, including Third Party Marketing
Unless specifically authorized by you, we do not provide Personal Information to third parties for marketing purposes. If we use a third-party service provider to provide any of the processing of Personal Data set forth herein, any third parties that we may share your data with are obliged to keep your details securely and to use them only to fulfill the Service they provide you on our behalf. When they no longer need your data to provide this service, they will dispose of the details in line with our procedures and applicable law. If you express interest in a third-party offer or purchase a package that includes a third-party offer, we may provide your Personal Information to that third party solely in connection with the offer you have selected.
Required by Law
We reserve the right to disclose your Personal Information as required by law, such as in response to lawful requests by public authorities, including law enforcement agencies, or if we are required to do so by law under regulation, a subpoena, court order, or by a government entity, including any requirement to meet national security requirements, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a legal request. In these circumstances, we may also share your Personal information with our professional advisors.
Other Transfers
We may disclose Personal Information and other data to businesses controlling, controlled by, or under common control with us. If we are merged, acquired, or sold, or if some or all of our assets or equity are transferred, we may disclose or transfer Personal Information and other data in connection with the associated transactions.
Bankruptcy
In the event of an APEX bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or applying laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your personal information is treated, transferred, or used. If such an event occurs, your Personal Information may be treated like any other APEX asset and sold, transferred, or disclosed to third parties in accordance with applicable law or used in ways not contemplated or permitted under this Privacy Policy. In this case, you will be notified via email and/or a prominent notice on our Site and in our Legal Center of any change in ownership or uses of your personal information, and any choices you may have regarding your personal information.
Consent
In addition to the disclosures described in this Privacy Policy, we may disclose information about you whenever you consent to or direct such disclosure.
Uploading Content
You are solely responsible for the Personal Information and other content you post on or through the Online Services. You warrant that you have permission to upload any third-party information, and you agree to indemnify, defend, and hold harmless APEX and its affiliates, owners, directors, and personnel from and against any claim, liability, cost, and expense arising in connection with your provision of that information.
Do Not Track Requests; Third-Party Tracking (applicable to the Site)
We cannot presently omit you from usage analytics to the extent your browser only sends us a “do not track” message and does not otherwise screen you from tracking without any action on our part. Third parties, other than our vendors (such as our website analytics provider), do not have authorization from us to track which websites you visited before and after visiting the Site. That said, we cannot control third-party tracking, and some third-party tracking may occur without our knowledge or consent.
Use of Cookies and Third-Party Websites
We may maintain links to other websites and other websites may maintain links to the Online Services. This Privacy Policy applies only to the Site and not to other websites accessible from us or that you use to access our Online Services, each of which may have privacy policies materially different from this Privacy Policy. If you visit other websites, we are not responsible for the privacy practices or content of those sites. You are responsible for reviewing non-APEX website privacy policies to confirm that you understand and agree with them.
We may use cookies and certain visit recognition software services, such as Google Analytics and LeadLander, to improve the functionality of our Site and build a demographic profile. A cookie is a small piece of information sent by a web server to a web browser, enabling the server to collect information from the browser. You can configure your browser to reject cookies by modifying your browser settings, but if your browser settings do not accept cookies from us, then some Site functions may not operate as intended. Please be aware that the information sent by your browser as part of a web page request, including cookies and your IP address, may be collected through Google Analytics. In that case, Google will also receive this information and its use of it is governed by Google's Privacy Policy.
Your Options (under the laws of the EU, EEA, UK and Switzerland)
Under the laws of certain countries, you may have certain rights and choices regarding the Personal Information we collect and maintain about you, and how we communicate with you.
If you are a resident of the European Union (“EU”), the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, you can request the following information regarding the Personal Information we store about you and how it is processed:
- Identity and the contact details of the person or organization that has determined how and why to process your data. (In some cases, this will be a representative located in the EU).
- Contact details of the data protection officer, where applicable.
- The purpose of the processing and the legal basis for processing.
- If the processing is based on the legitimate interests of APEX or a third party, information about those interests.
- The categories of Personal Data collected, stored, and processed.
- Recipient(s) or categories of recipients to whom the data is/will be disclosed
If we intend to transfer Personal Data to a third country or international organization, we must ensure this is done securely. The EU has approved sending Personal Data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure specific measures are in place to secure your information. To this end, we need certain information to transfer the Personal Data:
- How long will the data be stored?
- Details of your rights to access, correct, erase, restrict, or object to such processing.
- Information about your right to withdraw consent at any time.
- How to lodge a complaint with the supervisory authority.
- Whether the provision of Personal Data is a statutory or contractual requirement or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the Personal Data and the possible consequences of failing to provide such data.
- The source of Personal Data, if it was not collected directly from you.
Any details on automated decision-making, meaningful information about the logic involved, and the significance and expected consequences of such processing may be requested by the Data Subject. To make such a request, please get in touch with us as described in the “Contact Us” section of this Privacy Policy.
We will implement the requested changes as soon as possible, subject to reasonable limitations, such as the need to verify your identity. When you edit or change your preferences, the data you remove may remain in our databases or backup media because it is not always possible to completely remove or delete data from these locations.
You have the right to decline to share certain Personal Information with us, but we may not be able to provide you with some of the features and functionality of the Online Services.
You can also opt-out of receiving future promotional communications and marketing from us. You may receive periodic email newsletters from us. These newsletters contain information on new features and facilities of note at the Site and within the Online Services. You can opt-out of receiving such mailings. The registration forms allow you to tick a box if you do not wish to receive information about our services. If you receive electronic notifications from us through an email list, each message will include instructions on how to unsubscribe from that list. Your choice not to receive future promotional and marketing material will not prevent us from corresponding with you, by email or otherwise, regarding your existing or past business relationships with us.
Data Retention
We will process Personal Data for the period considered strictly necessary to provide the Services and to comply with applicable law. We will endeavor to keep your information accurate and up to date and not keep it longer than necessary. At a minimum, we will retain your information for as long as needed to provide you with the Services and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Therefore, we may maintain some or all of this data in our archives even after removing it from the Online Services. Personal Data processed to provide the Services may be stored for a longer period to enable any disputes concerning the provision of the Service to be handled. Personal Data processed for marketing purposes will be kept by us from the point at which the data subject provides his/her consent until this consent is revoked or we no longer deem the data to be accurate and up to date, whichever is earlier. Personal Data processed in association with a job application will only be retained for a year after the position is filled or until the data subject revokes his/her consent, whichever is earlier. If consent is revoked, the Personal Data may no longer be processed for the purposes but may still be stored to comply with local regulations and provisions that the local Data Protection Authority may establish from time to time.
Data Security
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put physical, electronic, and managerial procedures in place to safeguard the information we collect. We strive to ensure our servers and connections (to our servers) incorporate industry-standard encryption and security devices. The Internet, however, cannot be guaranteed to be completely secure; therefore, we cannot warrant the security of any Personal Information you provide to us. Accordingly, you provide this information at your own risk. WE DISCLAIM LIABILITY FOR THE THEFT, LOSS, OR INTERCEPTION OF OR UNAUTHORIZED ACCESS OR DAMAGE TO YOUR DATA OR COMMUNICATIONS BY USING THE SITE AND/OR OUR ONLINE SERVICES. YOU ACKNOWLEDGE THAT YOU UNDERSTAND AND ASSUME THESE RISKS.
IF YOU BELIEVE YOUR PRIVACY HAS BEEN BREACHED THROUGH THE USE OF OUR WEBSITE OR ONLINE SERVICES
PLEASE CONTACT US IMMEDIATELY AT privacy@apexanalytix.com.
Legal Basis for Use of Your Information
Our legal grounds for processing your information are as follows:
To honor our contractual commitments to you: most of our processing of Personal Data is to meet our contractual obligations to our users. For example, we handle Personal Data on this basis to allow you to sign up for our Online Services.
Consent: Where required by law, and in some other cases, we handle Personal Data based on your implied or express consent, including your consent to the processing of your Personal Data pursuant to this Privacy Policy.
Legitimate interests: In many cases, we handle Personal Data on the basis that it furthers our legitimate interests in commercial activities in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals. This includes operating our business and the Online Services; providing security for our websites, products, software, or applications; marketing; receiving payments; preventing fraud; and knowing the customer to whom we are providing the Online Services.
Legal compliance: We need to use and disclose Personal Data in certain ways to comply with our legal obligations (such as disclosing data to tax authorities).
We will not use your Personal Information in a manner inconsistent with the purpose of its original collection unless you have provided your consent.
Data Subject Rights
Residents of the European Economic Area (“EEA”), Switzerland, and the UK can exercise certain data subject rights available to them under applicable data protection laws. Where such rights apply, we will comply with requests to exercise these rights in accordance with applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. If these rights apply to you, they may permit you to request that we:
- provide access to and/or a copy of certain information we hold about you
- prevent the processing of your information for direct marketing purposes (including any direct marketing processing based on profiling)
- update information that is out of date or incorrect
- delete certain information that we are holding about you
- restrict the way that we process and disclose certain of your information
- transfer your information to a third-party provider of services
- revoke your consent for the processing of your information
For more information on how to exercise these rights, please contact us using the information in the “Contact Us” section below. If applicable, you may make a complaint to the data protection supervisory authority in the country where you are based. Alternatively, you may seek a remedy through local courts if you believe your rights have been breached.
International Data Transfers
Due to the nature of the Internet, if you are visiting the Site or using Online Services from a country other than the United States, your communications will inevitably transfer information across international boundaries. If you are located outside of the United States, please be advised that any information you provide to us will be transferred to the United States and that by browsing the Site and submitting information to the Site or using the Online Services, you explicitly authorize its transfer. Information submitted to us will be transferred to, processed, and stored in the United States or, for certain customers, the European Union or the United Kingdom. If you post or transfer any information to or through the Online Services, you are agreeing to such information, including Personal Information, being hosted and accessed in the United States, the European Union, and the United Kingdom. Please note that the privacy laws of the United States, the European Union, and the United Kingdom may be different from those in the place where you are a resident.
We adhere and comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. Data Privacy Framework (“UK Extension to the EU-U.S. DPF”), and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), respectively developed by the U.S. Department of Commerce and the European Commission, the UK Government, and the Swiss Federal Administration to provide U.S. organizations with reliable mechanisms of Personal Data transfers to the United States from the European Union / European Economic Area, the United Kingdom (and Gibraltar), and Switzerland, while ensuring data protection that is consistent with EU, UK and Swiss law. For additional details, please see the Data Privacy Framework (DPF) Program section below. Where required, we will use appropriate safeguards for transferring data outside of the EEA, Switzerland, and the UK. This may include signing Standard Contractual Clauses that govern the transfers of such data, which may be used in conjunction with additional safeguards. For more information about these transfer mechanisms, please contact us as detailed in the “Contact Us” section below.
Data Privacy Framework (DPF) Program
We comply with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have submitted our self-certification to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) regarding the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
APEX and its U.S. subsidiary APEX Analytix HK Holding Corporation adhere to the EU-U.S. DPF Principles regarding Personal Data transferred from the European Union and the United Kingdom and the Swiss-U.S. DPF Principles regarding Personal Data transferred from Switzerland. As described above, we rely on the direct collection of personal information from individuals located outside of the U.S., or we use another basis, such as Standard Contractual Clauses, for cross-border transfers of personal information from the EU member countries and the United Kingdom and from Switzerland to the U.S. We are committed to being subject to the DPF Principles regarding all Personal Data received from the EU, the United Kingdom (and Gibraltar), and Switzerland in reliance on the EU-U.S. DPF. We are subject to the investigatory and enforcement powers of the Federal Trade Commission (“FTC”). We may also incur liability in cases of onward transfers to third parties.
Supplemental Privacy Notice for California Residents
This Supplemental Privacy Notice supplements the information in our Privacy Policy above and, except as provided herein, applies solely to California residents. It applies to personal information we collect on or through the Online Services and through other means (such as information collected offline, in person, and over the telephone). It does not apply to the personal information we collect from our employees and job applicants in their capacity as employees and job applicants. It also does not apply to personal information we process as a service provider.
Pursuant to Section 1798.83 of the California Civil Code, residents of California have the right to request from a business with whom the California resident has an established business relationship, certain information with respect to the types of personal information the business shares with third parties for direct marketing purposes by such third party and the identities of the third parties with whom the business has shared such information in the immediately preceding calendar year. To access this information, please contact us as described in the “Contact Us” section of this Privacy Policy.
Summary of Information We Collect
If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and disclose your “personal information” and "sensitive personal information" (as defined in the California Consumer Privacy Act (“CCPA”)).
Throughout our Privacy Policy, we describe the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. Under the CCPA, we also have to provide you with the "categories" of personal information we collect and disclose for “business purposes” (as those terms are defined by applicable law). Those categories include identifiers (such as name, address, email address, phone number, other account information, and cookies); commercial information (such as transaction data); internet or other network or device activity (such as IP address or service usage); geolocation information (general location); professional or employment-related data; other information that identifies or can be reasonably associated with you. The categories of sensitive personal information are account log-in and password or other credentials allowing access to your account.
We collect the categories of personal information identified above from the following sources: (1) directly from you; (2) through your use of the Online Services; (3) affiliates; and (4) third parties such as our resellers and service providers.
We or our service providers may collect and disclose the above categories of information for the purposes described in our Privacy Policy. This includes the following business or commercial purposes (as those terms are defined in applicable law):
- Our or our service provider’s operational purposes;
- consumer interactions on our site;
- Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
- Bug detection and error reporting;
- Customizing content that we or our service providers display on the Online Services;
- Providing Online Services (e.g., account servicing and maintenance); and
- Improving the Online Services and developing new services (e.g., by conducting research to develop new products or features);
Other uses about which we notify you
We may also use the above categories of personal information to comply with applicable laws and regulations. We may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent the identification of any particular user or device.
We may disclose certain categories of personal information with third parties (as defined by the CCPA) for the business purposes described above. For example, we may disclose identifiers and other information that identifies or can reasonably be associated with you with counterparties to your agreements. We may disclose identifiers with our marketing partners, and we may also disclose any of the categories described above with our subsidiaries and affiliates. If you connect your account with social media services or interact with social media plugins or links on the Online Service, we may disclose identifiers, commercial information, internet or other network or device activity, or general location with those social media services.
Consumer Rights
If you are a California resident, you may have certain rights. California law may permit you to request that we:
- Provide you the categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for "collecting," "selling," or "sharing" your personal information; the categories of third parties to whom we disclose or "sell," or with whom we "share," personal information; and the categories of personal information we "sell."
- Provide access to and/or a copy of certain information we hold about you.
- Delete certain information we have about you.
- Correct inaccurate personal information that we maintain about you.
You may have the right to receive information about the financial incentives we offer you (if any). You also have the right not to be discriminated against for exercising your rights. Certain information may be exempt from such requests under applicable law. We need certain types of information so that we can provide the Online Services to you. If you ask us to delete it, you may no longer be able to access or use the Online Services.
“Sale” of Personal Information
California residents may opt out of the "sale" of their personal information. The CCPA broadly defines "sale" in a way that may include allowing third parties to receive certain information, such as cookie identifiers, IP addresses, and/or browsing behavior, to add to a profile about your device, browser, or you.
Depending on how you use the Service, we may disclose the following categories of information for such interest-based advertising, which may be considered a “sale” as defined by the CCPA: identifiers (such as IP address, device identifiers, and cookies) and internet and device activity. To opt out of such "sales," please submit a request to privacy@apexanalytix.com.
"Sharing" of Personal Information
California residents may opt out of the "sharing" of their personal information. The CCPA defines "sharing" as the targeting of advertising to a consumer based on that consumer's personal information obtained from the consumer's activity across websites.
Children Under 18
The Online Services are not intended for children under the age of 18. We do not knowingly solicit or collect Personal Information from children. If you are under the age of 18, please do not submit your e-mail address or any other personal information to us through the Site or any Online Services. If you are a parent or guardian and believe we may have collected information about your child, please contact us as described in the “Contact Us” section of this Privacy Policy.
Sensitive Personal Information
The CCPA also allows you to limit the use or disclosure of your "sensitive personal information" (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for purposes for which you cannot opt-out under the CCPA.
Retention of Your Personal Information Please see the "Data Retention" section above.
Children’s Privacy
The Online Services are not directed to children under the age of 13. We do not knowingly collect personal information (as that term is defined in the Children’s Online Privacy Protection Act (COPPA)) from children under 13. If we discover that an individual under 13 has provided us with personal information, we will delete the personal information as required by COPPA.
We do not knowingly process data of EU residents under the age of 16 without parental consent. If we become aware that we have collected data from an EU resident under the age of 16 without parental consent, we will take reasonable steps to delete it as soon as possible.
Changes to this Policy
We reserve the right to change or replace this Privacy Policy at our sole discretion. All revisions will be posted to the Legal Center and become effective when the modified policy is posted. If you disagree with being bound by those changes, you should not use the Online Services any further after publication. Your continued use of the Online Services after posting changes to our Privacy Policy means you accept the changes.
Contact Us
We welcome your questions and comments about our Privacy Policy. We want to know if you are or have become aware of a known or suspected privacy or security breach or for purposes of any of the other requests or inquiries set forth in this Privacy Policy.
You may also seek recourse through an independent dispute resolution body designated to address complaints free of charge, including, where applicable, the panel established by the EU Data Protection Authorities and, as applicable, the UK Information Commissioner’s Office (“ICO”) (and the Gibraltar Regulatory Authority (“GRA”)), the Swiss Federal Data Protection and Information Commissioner (“FDPIC”). You may also invoke binding arbitration under certain conditions.
To contact APEX regarding its Privacy Policy, please use the Contact Us link provided or write to us at:
Attention: Data Privacy Officer
APEX Analytix, LLC
1501 Highwoods Blvd., Suite 200
Greensboro, North Carolina 27410 United States
Cyber Risk API Terms of Use
Effective October 25th 2024
DownloadTable of Contents
Cyber Risk API Terms of Use
These Cyber Risk API terms of use (“API Terms”) define the terms that apply when you use, contact, or interact with our application programming interface (“API”) and form a binding contract between you and us. These API Terms do not apply to your use of any of our software, website, applications, application plug-ins, solutions, or other APEX services (“Services”). Your use of the APEX Services is subject to a separate End-User Services Agreement.
Who We Are and How to Contact Us:
Dark Beam Ltd., which operates the Cyber Risk API, is registered in England and Wales with company number 10839564. Our registered office is Desk Lodge House, Redcliffe Way, Bristol, England, BS1 6NL. Dark Beam Ltd. is owned by APEX Analytix, LLC, a Delaware limited liability company with a corporate headquarters located at 1501 Highwoods Boulevard, Suite 200, Greensboro, NC 27410, USA. APEX Analytix, LLC, is referred to herein as “we” or “us.”
“You” and “your” refer to the individual, company, or other legal entity on behalf of which the Cyber Risk APIs are used.
If you are using the Cyber Risk APIs on behalf of a company or other legal entity, you represent that you have the authority to bind such entity to these API Terms. If you do not have such authority or do not agree with these terms, you must not use the Cyber Risk APIs.
Acceptance of Terms
Using our API, you confirm that you accept this policy's terms and agree to comply. If you disagree with these terms, you must not use our API. We may amend these terms from time to time without notice. Please check the Legal Center for the most updated version of these API Terms.
Restrictions on Use
When using or attempting to use the APIs, you agree:
- To adhere to any applicable guidelines, restrictions, or requirements set forth in any API documentation;
- Not to share any API keys or authentication tokens with any other individuals, companies, or entities outside of your own (each a “third party”), including our potential competitors, and to keep these secure at all times;
- Not to mask or misrepresent your identity or your systems’ identity;
- Not to remove any proprietary notices or intellectual property from the APIs;
- That to protect the security, integrity, and operability of the APIs, we may place limits on your use of the APIs (e.g. call limits), and you accept that: (i) we determine in our sole discretion what constitutes abuse or excess use or exploitation; (ii) you will not use or attempt to use the APIs in a manner that exceeds the limitations; and (iii) we may monitor the volume of requests or calls send to the APIs for compliance with these API Terms;
- Not use the APIs in a manner that poses a security risk to other users of the APIs or APEX Services or tests the vulnerability of our systems or networks or those of any third party;
- Not to use the APIs in any manner that compromises, breaks, or circumvents any of our technical processes or security measures associated with the APIs or Services;
- Not to use the APIs for competitive analysis or to disseminate performance information relating to the APIs or Services;
- Not to modify, translate, reverse engineer, disassemble, reconstruct, decompile, copy, or create derivative works of the APIs, Services, any data, or any portion thereof to compete with us;
- Not to replicate, copy, frame, mimic, mirror, or compete with aspects of the Services or their functionality, or to develop or utilize an application or integration to compete with us;
- Not to use the APIs in any manner or for any purpose that infringes, misappropriates, or otherwise violates the intellectual property or other rights of us or any third parties;
- To only use the API to embed Cyber Risk data into your own solutions and not for any other commercial purposes;
- Not to license, distribute, lease, give, sell, rent, timeshare, sublicense, disclose, publish, assign, market, transfer, or distribute any API portion to any third party.
Prohibited Uses
You may use our API only for lawful purposes. You may not use our API: (a) in any way that breaches any applicable local, national, or international law or regulation; (b) in any way that is unlawful or fraudulent or has any unlawful or fraudulent purpose or effect; (c) to transmit, or procure the sending of, any unsolicited or unauthorized advertising or promotional material or any other form of similar solicitation (spam); or (d) to knowingly transmit any data, send or upload any material that contains viruses, Trojan horses, worms, time-bombs, keystroke loggers, spyware, adware, or any other harmful programs or similar computer code designed to affect the operation of any computer software or hardware adversely.
Consequences of Misuse
Without prejudice to any other rights we may have, in the event of your failure to adhere to the restrictions on use or prohibited uses set out above, or any other failure to comply with the API Terms, you shall be responsible for and shall indemnify us against all costs, losses, liabilities, damages, claims, and expenses suffered or incurred by us or any of our affiliates, subsidiaries, officers, directors, employees, suppliers, consultants, and agents, arising directly or indirectly out of or connected to your breach, including but not limited to any of the aforesaid costs, losses, liabilities, damages, claims, and expenses relating to damage to or destruction or corruption of data.
We shall be entitled (without notice) to suspend, modify, restrict, or otherwise limit your use of the API. We may monitor your API use to verify compliance with these API Terms. You shall permit us and/or our representatives to perform such audit and/or verification of your use of the API and to inspect and access your premises and/or systems or information as reasonably required by us in connection with your use of the API.
Processing of Personal Data
Any personal data processed related to your use of the APIs will be processed in accordance with APEX’s Privacy Policy.
Export
The APIs are subject to US global trade control laws and regulations, including the U.S. Export Administration Regulations and various sanctions programs administered by the U.S. Office of Foreign Assets Control. You will not, directly or indirectly, export, re-export, release, or make the APIs available for use in contravention of these laws and regulations.
Warranty
To the fullest extent permitted by law, the API is provided and made available “as is” without any warranties of any kind. We disclaim any implied warranties, including, without limitation, any implied warranty of merchantability or fitness for a particular purpose.
Term and Termination
These API Terms shall remain in effect until termination. You may terminate these API Terms anytime by ceasing all use of the APIs and any relevant keys or tokens. Unless you purchased the APIs for a predetermined period, we reserve the right to terminate these APIs or these API Terms immediately at any time without further obligation to you.
All rights and licenses granted herein shall expire upon termination, and you must stop using the APIs. The terms of these API Terms that by their nature would survive shall continue to apply.
Modification
We reserve the right (without liability to you or any other person) to modify, amend, alter, or otherwise deal with the API in any manner, and we do not guarantee that it will continue to be available for use.
Governing Law
This Agreement shall be governed by the laws of the state of North Carolina, without giving effect to its choice of law principles, and in accordance with applicable federal laws of the United States.
Severability
If a court of competent jurisdiction holds any provision of these API Terms unenforceable, the court shall modify it and interpret it to best accomplish the original provision to the fullest extent permitted by law, and the remaining provisions of these API Terms shall remain in effect.
Effective September 10th 2024 to October 25th 2024
DownloadTable of Contents
Cyber Risk API Terms of Use
These Cyber Risk API terms of use (“API Terms”) define the terms that apply when you use, contact, or interact with our application programming interface (“API”) and form a binding contract between you and us. These API Terms do not apply to your use of any of our software, website, applications, application plug-ins, solutions, or other APEX services (“Services”). Your use of the APEX Services is subject to a separate End-User Services Agreement.
Who We Are and How to Contact Us:
Dark Beam Ltd., which operates the Cyber Risk API, is registered in England and Wales with company number 10839564. Our registered office is Desk Lodge House, Redcliffe Way, Bristol, England, BS1 6NL. Dark Beam Ltd. is owned by APEX Analytix, LLC, a Delaware limited liability company with a corporate headquarters located at 1501 Highwoods Boulevard, Suite 200, Greensboro, NC 27410, USA. APEX Analytix, LLC, is referred to herein as “we” or “us.”
“You” and “your” refer to the individual, company, or other legal entity on behalf of which the Cyber Risk APIs are used.
If you are using the Cyber Risk APIs on behalf of a company or other legal entity, you represent that you have the authority to bind such entity to these API Terms. If you do not have such authority or do not agree with these terms, you must not use the Cyber Risk APIs.
Acceptance of Terms
Using our API, you confirm that you accept this policy's terms and agree to comply. If you disagree with these terms, you must not use our API. We may amend these terms from time to time without notice. Please check the Legal Center for the most updated version of these API Terms.
Restrictions on Use
When using or attempting to use the APIs, you agree:
- To adhere to any applicable guidelines, restrictions, or requirements set forth in any API documentation;
- Not to share any API keys or authentication tokens with any other individuals, companies, or entities outside of your own (each a “third party”), including our potential competitors, and to keep these secure at all times;
- Not to mask or misrepresent your identity or your systems’ identity;
- Not to remove any proprietary notices or intellectual property from the APIs;
- That to protect the security, integrity, and operability of the APIs, we may place limits on your use of the APIs (e.g. call limits), and you accept that: (i) we determine in our sole discretion what constitutes abuse or excess use or exploitation; (ii) you will not use or attempt to use the APIs in a manner that exceeds the limitations; and (iii) we may monitor the volume of requests or calls send to the APIs for compliance with these API Terms;
- Not use the APIs in a manner that poses a security risk to other users of the APIs or APEX Services or tests the vulnerability of our systems or networks or those of any third party;
- Not to use the APIs in any manner that compromises, breaks, or circumvents any of our technical processes or security measures associated with the APIs or Services;
- Not to use the APIs for competitive analysis or to disseminate performance information relating to the APIs or Services;
- Not to modify, translate, reverse engineer, disassemble, reconstruct, decompile, copy, or create derivative works of the APIs, Services, any data, or any portion thereof to compete with us;
- Not to replicate, copy, frame, mimic, mirror, or compete with aspects of the Services or their functionality, or to develop or utilize an application or integration to compete with us;
- Not to use the APIs in any manner or for any purpose that infringes, misappropriates, or otherwise violates the intellectual property or other rights of us or any third parties;
- To only use the API to embed Cyber Risk data into your own solutions and not for any other commercial purposes;
- Not to license, distribute, lease, give, sell, rent, timeshare, sublicense, disclose, publish, assign, market, transfer, or distribute any API portion to any third party.
Prohibited Uses
You may use our API only for lawful purposes. You may not use our API: (a) in any way that breaches any applicable local, national, or international law or regulation; (b) in any way that is unlawful or fraudulent or has any unlawful or fraudulent purpose or effect; (c) to transmit, or procure the sending of, any unsolicited or unauthorized advertising or promotional material or any other form of similar solicitation (spam); or (d) to knowingly transmit any data, send or upload any material that contains viruses, Trojan horses, worms, time-bombs, keystroke loggers, spyware, adware, or any other harmful programs or similar computer code designed to affect the operation of any computer software or hardware adversely.
Consequences of Misuse
Without prejudice to any other rights we may have, in the event of your failure to adhere to the restrictions on use or prohibited uses set out above, or any other failure to comply with the API Terms, you shall be responsible for and shall indemnify us against all costs, losses, liabilities, damages, claims, and expenses suffered or incurred by us or any of our affiliates, subsidiaries, officers, directors, employees, suppliers, consultants, and agents, arising directly or indirectly out of or connected to your breach, including but not limited to any of the aforesaid costs, losses, liabilities, damages, claims, and expenses relating to damage to or destruction or corruption of data.
We shall be entitled (without notice) to suspend, modify, restrict, or otherwise limit your use of the API. We may monitor your API use to verify compliance with these API Terms. You shall permit us and/or our representatives to perform such audit and/or verification of your use of the API and to inspect and access your premises and/or systems or information as reasonably required by us in connection with your use of the API.
Processing of Personal Data
Any personal data processed related to your use of the APIs will be processed in accordance with APEX’s Privacy Policy.
Export
The APIs are subject to US global trade control laws and regulations, including the U.S. Export Administration Regulations and various sanctions programs administered by the U.S. Office of Foreign Assets Control. You will not, directly or indirectly, export, re-export, release, or make the APIs available for use in contravention of these laws and regulations.
Warranty
To the fullest extent permitted by law, the API is provided and made available “as is” without any warranties of any kind. We disclaim any implied warranties, including, without limitation, any implied warranty of merchantability or fitness for a particular purpose.
Term and Termination
These API Terms shall remain in effect until termination. You may terminate these API Terms anytime by ceasing all use of the APIs and any relevant keys or tokens. Unless you purchased the APIs for a predetermined period, we reserve the right to terminate these APIs or these API Terms immediately at any time without further obligation to you.
All rights and licenses granted herein shall expire upon termination, and you must stop using the APIs. The terms of these API Terms that by their nature would survive shall continue to apply.
Modification
We reserve the right (without liability to you or any other person) to modify, amend, alter, or otherwise deal with the API in any manner, and we do not guarantee that it will continue to be available for use.
Governing Law
This Agreement shall be governed by the laws of the state of North Carolina, without giving effect to its choice of law principles, and in accordance with applicable federal laws of the United States.
Severability
If a court of competent jurisdiction holds any provision of these API Terms unenforceable, the court shall modify it and interpret it to best accomplish the original provision to the fullest extent permitted by law, and the remaining provisions of these API Terms shall remain in effect.
Cyber Risk API Descrption
Effective September 10th 2024
DownloadTable of Contents
Cyber Risk API Description
Background
Numerous Partners have successfully used the APEX Analytix Cyber Risk API for many years. In the last several months, the Cyber Risk solution has seen considerable changes (not least a name change), reflected in the API. This and feedback from Partners has led us to create different API versions according to the Partners' needs.
“Partner” is a Customer of APEX Analytix, LLC (“we” or “us”) and has entered into an End-User Services Agreement for Cyber Risk solutions, including one or more of the APIs described herein.
API Versions
Development API
This is a fully functioning version of the API to allow Partners to develop the integration of Cyber Risk functionality into their applications. This version provides access to:
- All third-party vulnerability reporting data, including the new “Digital Footprint” category.
- Cyber Threat Intelligence allows the API to query Cyber Risk’s wide range of dark web crawlers to identify threats against third parties.
- Breached credentials, which enables real-time searches for any stolen credentials associated with a domain.
This version also provides access to a new feature, the API widgets. There are 2 widgets:
- Vulnerability Widget—This allows the Partner to integrate the Cyber Risk Vulnerability Report page in the Partner application using our CDN. The widget is fully customizable in terms of design so that the Partners can include their own styles.
- Threat Intelligence Record Widget—This widget provides the same functionality as the Vulnerability Widget but for Cyber Threat Intelligence records.
These widgets benefit the Partner by giving them great flexibility regarding how Cyber Risk reports are embedded in their applications.
Usage
Partners may only use the development API in their sandbox environments for development or demonstration purposes. We monitor the API's usage and will notify the relevant Partner account manager if there is any noticeable upward trend in usage that could indicate that it is being used for commercial purposes.
Freemium API
This version of the API is intended for Partners to enable all their clients to see summary cyber risk vulnerability data for all their Third Parties. The Freemium API is available to all Partners as part of their agreement with us.
The API provides access to the following endpoints:
- Overall Cyber Risk score
- Scores for all 7 vulnerability categories
- The number of high, medium, and low-risk items. These are indicators of which individual tests carried out during a Cyber Risk vulnerability scan need to be addressed in order of priority.
The Freemium API does not provide access to the full vulnerability report, threat intelligence, or breached credential data. Hence, the widgets do not apply to this version of the API.
Usage
Depending on the commercial agreement between the Partner and us, this version of the API can be used freely by all customers and their associated third parties.
The API provides a quick and easy way to add third-party cyber risk data to the Partners application and provides a route to upgrade to the Premium APIs.
Premium APIs
There are 3 versions of the Premium API:
- Vulnerability Premium-This version provides full access to all detailed third-party vulnerability data but no access to any threat intelligence data
- Threat Premium-This version provides full access to threat intelligence data and only summary access to vulnerability data.
- Full Premium-This version provides unrestricted access to all Cyber Risk data, including:
- All third-party vulnerability reporting functions, including the new “Digital Footprint” category;
- Cyber Threat Intelligence, which allows the API to query Cyber Risk’s wide range of dark web crawlers to identify threats against third parties; and,
- Breached credentials, which enables real-time searches for any stolen credentials associated with a domain.
Usage
The Premium APIs are only available for Partner clients who pay for this functionality. Hence, a commercial agreement must be in place between you and us that specifies the customer's name and level of access, plus all standard commercial terms.
We will issue a new API key for each premium-use customer. This allows us to monitor key usage, review trends, and notify account managers of anomalous usage.
API keys and upgrades
Once the End-User Services Agreement is in place, all Partners who require it will be provided with two API keys, one for Freemium and one for Development usage. Partners will also be provided access to the developer's Documentation for the API.
Once the keys have been issued, we will start monitoring their usage. This is particularly true for the Development API, where any use considered outside expected patterns will be notified to the relevant account manager.
To gain access to Premium functionality, the Cyber Risk Product Management team should be provided with details of the commercial agreement with the Partner that licenses premium access by the relevant account manager. On confirmation of this agreement, a new Premium API will be issued to the Partner based on the access allowed. A new API will be provided for each client based on the license agreements provided.
If a Partner's client wishes to upgrade from either the Vulnerability or Threat Premium APIs to the Full Premium, the product management team should provide proof of the new commercial agreement and a new API key will be issued.
End-User Service Agreement
Effective October 25th 2024
DownloadTable of Contents
END-USER SERVICE AGREEMENT
This End-User Service Agreement (“Agreement”) governs access to and use of the APEX Analytix, LLC software, website, applications, application plug-ins, solutions, application programming interfaces (“APIs”), and other services provided by us to you (collectively, the “Services”).
This Agreement is in addition to, and does not nullify, any other agreement between you and us or any other applicable terms and conditions found on the Services.
PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SERVICES. THIS AGREEMENT CONTAINS IMPORTANT INFORMATION REGARDING YOUR LEGAL RIGHTS, REMEDIES AND OBLIGATIONS, INCLUDING VARIOUS LIMITATIONS AND EXCLUSIONS OF LIABILITY, YOUR OBLIGATION NOT TO UPLOAD ANY SENSITIVE DATA WITHOUT THE DATA SUBJECT’S PRIOR WRITTEN CONSENT, AND A DISPUTE RESOLUTION CLAUSE THAT GOVERNS HOW AND WHERE DISPUTES WILL BE RESOLVED.
Acceptance of Terms; Eligibility
By clicking a box indicating acceptance or using the Services, you are signifying that you have read, understand, and agree to be bound by the Agreement (whether on behalf of yourself or any legal entity you represent). You also agree to comply with all applicable laws and regulations and all rules and restrictions posted on the Service. You agree that you are at least 18 years old and legally can enter into a contract.
If you enter into the Agreement on behalf of an organization or entity, you represent and warrant that you are authorized to bind the organization or entity (and its Affiliates if applicable) to this Agreement (in which case, the references to “you” and “your” in this Agreement refer to that organization or entity, also referred to as “Customer”). If you do not have such authority or disagree with the terms of the Agreement, you must cease using the Services immediately.
Definitions
“Affiliate” means any individual or entity (e.g., corporation, partnership limited liability company, joint venture, etc.) that, at the applicable time, directly or indirectly controls, is controlled with or by or is under common control with, a party, where “control” means, with respect to a corporation, the ownership, directly or indirectly, of fifty percent (50%) or more of the voting power to elect directors thereof, or with respect to any other entity, the power to direct the management of such entity.
“Authorized User” refers to your personnel employed, retained, or contracted (by you) with access to the Services. These personnel may include supplier personnel providing services to you.
“APEX,” “we,” or “us” refers to APEX Analytix, LLC and its Affiliates and subsidiaries.
“Applicable Data Protection Law” refers to all applicable laws and regulations regarding processing Personal Data in connection with this Agreement. These applicable laws and regulations may include: (i) the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”), as amended and supplemented, as the case may be, by the relevant EU Member States laws and regulations in which the Customer directly or indirectly operates; (ii) the UK Data Protection Act 2018 and the UK General Data Protection Regulation (“UK GDPR”); (iii) the Australian Privacy Act 1988 and National Privacy Principles; (iv) the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and any related regulations or guidance (collectively, the “CCPA”); (v) the Canadian Personal Information Protection and Electronic Documents Act (the “PIPEDA”); and (vi) any other international, federal, state, provincial, and local privacy or data protection laws, rules, regulations, directives and governmental requirements currently in effect and as they become effective.
“Confidential Information” refers to (a) nonpublic confidential, proprietary, or trade secret information, including without limitation technical, business, or financial information that the Reseller or APEX designates as being confidential or (b) nonpublic information which, given the nature of the disclosure or the circumstances surrounding disclosure, the receiving party should treat as confidential.
“Customer” refers to any legal entity (other than the Reseller or its Affiliates) that is an end user of the Services.
“Customer Content” refers to the data the Customer or its Authorized Users provide to APEX through the Services.
“Documentation” means the current electronic user manuals, operating manuals, and other materials that describe our Service modules' functionality, components, technical requirements, and features as generally made available to our customers.
“Order” refers to the purchasing document between you and APEX or a Reseller for the Services.
“Personal Data” refers to any information that APEX processes which (i) identifies or relates to an individual who can be identified directly or indirectly from that data alone or in combination with other information in APEX’s possession or control, or (ii) the Applicable Data Protection Law otherwise defines as protected personal data or personal information.
“Reseller” means an entity authorized to resell APEX Services to Customers.
“Sensitive Data” refers to, but is not limited to, Personal Data consisting of information about physical or mental health or condition, racial or ethnic origin, sex life, sexual orientation, trade union membership, genetic data, biometric data to uniquely identify a natural person, religious or philosophical beliefs, political opinions or criminal records concerning an individual.
“Third-Party Data” or “Third-Party Database” means data or databases provided through the Portal Registration module, SmartVM®, or other Service, which may include or reflect data or databases acquired by the APEX from third-party licensors, providers, government agencies, foreign country commissions, and global cooperatives.
“Usage Metrics” means the quantity or other limits on the use of an applicable Service specified in the Order, which may be based on the number of Authorized Users, the amount of data processed or stored through the Service, the number of requests permitted to the Service programming interface, or other limits applicable to a particular Service.
APEX Account
When you create an account to use or access the Service, you must provide complete and accurate information as requested on the registration form and maintain and update such information to keep it complete and accurate. You will also be required to provide a username and password. You are responsible for maintaining your password's confidentiality and all activities (whether by you or your Authorized Users) occurring under your password or account. You may not use a third party’s account, username, or password at any time, and you will not allow anyone other than Authorized Users to access or use the Service from your account. You agree to notify APEX immediately of unauthorized use of your account, username, or password. APEX shall not be liable for any losses you incur due to someone else’s use of your account or password, either with or without your knowledge. You may be liable for any losses incurred by APEX, our Affiliates, officers, directors, employees, consultants, agents, and representatives due to someone else’s use of your account or password.
You will promptly notify APEX of any suspected violation of this Agreement by an Authorized User, and you will reasonably cooperate with APEX to address the alleged violation. APEX may suspend or terminate any Authorized User’s access to the Service upon notice to you if APEX reasonably determines that such Authorized User violated this Agreement.
Acceptable Use
APEX shall make the Service available to you for the term and subject to the applicable Usage Metric(s) outlined in an Order to remotely access and use the Services solely to process Client Content for your internal business purposes, including commercial services, and by and subject to the terms of this Agreement and any associated Documentation that may be provided for the Service.
You may not:
- use the Services in a manner that is prohibited by any law or regulation or to facilitate the violation of any law or regulation, including without limitation those pertaining to privacy, data protection, and export control;
- reverse-engineer, disassemble, decode, decompile, adapt, or otherwise derive or gain access to the source code or other trade secrets of the Service or any software or other technology used to provide the Service;
- copy, modify, or create derivative works of or to the Service, or access the Service to build a competitive product or service, or copy its features or user interface;
- give, sell, rent, lease, timeshare, sublicense, disclose, publish, assign, market, transfer, or distribute any portion of the Service to any third party;
- use the Services in a manner that infringes or violates the intellectual property or proprietary rights of APEX or any third party, including rights of privacy and publicity;
- remove, alter, or conceal any copyright notices, proprietary notices, trademarks, or other notices or marks that may appear on the Service or Documentation or any reports generated by the Service, including any attribution that may be required by third-party owners or licensors;
- modify, alter, or translate any portion of the Services without APEX’s prior written consent; or
- violate or tamper with the security of the Service, any APEX systems, or networks connected to any APEX systems through hacking, password mining, social engineering, or any other means;
- use or attempt to use any deep-link, scraper, robot, bot, spider, data mining, computer code, or any other device, program, tool, algorithm, process, or methodology to process having similar functionality, to access, acquire, copy or monitor any portion of the Services; or,
- use the Service in conjunction with any machine learning, neural network, deep learning, predictive analytics, or other artificial intelligence computer or software program.
If APEX has reasonable grounds to believe that you are utilizing the Services for any illegal or disruptive purpose, or violating any of the acceptable use provisions, then APEX may suspend the Services immediately with or without notice to you. APEX may terminate the Agreement if you fail to adhere to the acceptable use standards.
Your Responsibilities
You shall be responsible for the following: (i) procuring, maintaining, and supporting all your systems and other products and services required to access and use the Services; (ii) the compatibility of your system and other software used with the Services; (iii) your Authorized Users’ compliance with the terms of this Agreement; (iv) providing and maintaining back-up and disaster recovery procedures and facilities in connection with your system(s) used to access and use the Services; and (v) the accuracy, quality, integrity, and legality of all Customer Content transmitted by you when using the Services. APEX makes no representations, warranties, or assurances that your system will be compatible with the Services.
Fees and Payment
The fees you are obligated to pay and the manner of payment are set forth in the Order for the Services. If your Order is with APEX, you agree to pay us all applicable fees in full, without deduction or setoff of any kind, in the currency outlined in the Order within thirty (30) days of the invoice date. Fees are payable annually in advance; the first invoice will coincide with the Order's effective date. We offer our Services on an annual subscription basis; you cannot terminate any Order for your convenience during the applicable subscription term. Amounts payable under this Agreement are nonrefundable. If you do not pay us on time, in addition to any other rights we may have at law or in equity (including, without limitation, our rights to suspend your access to the Service), we reserve the right to charge you interest on past due amounts at 1.5% per month or the highest interest rate allowed by law, whichever is less, and to additionally charge all expenses of recovery.
All payments required by this Agreement are stated exclusive of all taxes, duties, levies, imposts, fines, or similar governmental assessments, including sales and use taxes, value-added taxes, goods and services taxes, excise, business, service, and similar transactional taxes imposed by any jurisdiction and the interest and penalties thereon (collectively, “Taxes”). You are responsible for and bear Taxes associated with the purchase of, payment for, access to, or use of the Services. Each party is responsible for and shall bear Taxes imposed on its net income. The purpose of this subsection is to preserve the payments to us from being reduced because of withholding taxes, duties, and other taxes and assessments that may be imposed by a jurisdiction in which you operate or are otherwise subject to taxation.
In the future, we reserve the right to require payment of fees for certain or all aspects of the Service, change prices, or institute new charges upon notice to you, which may be emailed or posted on the Service. Upon such notification, your continued use of the Service constitutes your acceptance of any new or increased charges.
If your Order is through a Reseller, the Reseller’s payment terms shall apply.
Intellectual Property Rights
Subject to the limited rights expressly granted hereunder, APEX (and as may be applicable, its providers and licensors) reserves, retains, and owns all rights, title, and interest in and associated with the Services, including all Intellectual Property Rights, without limitation. “Intellectual Property Rights” shall include but not be limited to patents, trademarks, copyrights, trade secrets, design rights, database rights, service marks, trademarks, know-how, and any other intellectual property or proprietary rights, whether registered or unregistered, and any application for registration of any of the foregoing, and any right to file any such application, which may exist anywhere in the world, as well as all derivative works, improvements, upgrades, enhancements, modifications or translations of the foregoing. You acknowledge and agree that you have not and will not obtain any rights or license hereunder except as expressly set forth or granted herein. All present and future Intellectual Property Rights, including rights in and to all applications and registrations relating to the Service, shall between you and us, at all times, remain the sole and exclusive property of APEX (and as may be applicable, its providers and licensors).
The trademarks, logos, taglines, and service marks displayed on the Service (collectively, the “Trademarks”) are registered and unregistered Trademarks of APEX and others. The Trademarks may not be used without our prior express written permission. We acknowledge the Trademarks of other organizations for their respective products or services mentioned on or incorporated within the Service. Other than as provided in this Agreement, your use of the Trademarks or any other content is strictly prohibited.
When you provide suggestions, enhancement requests, recommendations, or other feedback relating to the operation of the Services (”Feedback”), you: (1) grant APEX a royalty-free, fully-paid, sublicensable, transferable, worldwide, irrevocable, perpetual right and license to use, make, sell, offer for sale, import, incorporate or otherwise exploit these ideas into the Services, without restriction, (2) agree that your Feedback will not violate any right of a third party, including intellectual property or other personal or proprietary rights, (3) will not contain any libelous or unlawful material.
Any software, reports, or other materials available for downloading through the Service (“Materials”) are the copyrighted work of APEX and its third-party providers and licensors. Use of these Materials is limited to your internal business use and is subject to the terms of this Agreement. Unauthorized reproduction or distribution of the Materials is expressly prohibited by law and may result in civil and criminal penalties. Violators may be prosecuted.
APEX owns all Intellectual Property Rights in and to (i) the Service and its underlying technology, software, databases, and analytics; (ii) any Materials provided in association with the Service, (iii) the Trademarks, (iv) the Documentation, (v) Feedback, and (vi) any models, methods, algorithms, discoveries, inventions, modifications, customizations, enhancements, extensions, derivatives, materials, ideas and other work product that is conceived of, originated or prepared in connection with the Services or related to the provision of the Services.
Third-Party Content
The Service may contain links to external websites or other means of access to Third-Party Data or Third-Party Database(s). APEX is not responsible for and expressly disclaims any liability or obligation for the information, content, availability, or performance of any Third-Party Data or Third-Party Database. APEX does not represent or warrant in any manner that the Third-Party Data is accurate, current, complete, or complies with laws, rules, and/or regulations of the jurisdiction in which the Third-Party Data is used or that it is suitable for your purposes.
APEX may lose access to certain Third-Party Data, including governments, as they may become unavailable during the Term. APEX will notify you through the Service(s) if any Third-Party Data source becomes unavailable during the Term for which no substitute is available.
Representations, Covenants, and Warranties
You hereby represent and warrant to APEX that: (a) you have all requisite rights and authority to use the Service under this Agreement and to grant all applicable rights herein; (b) you are, at minimum, the age of majority in your jurisdiction of residence and you are an individual who is capable of forming legally binding contracts under applicable law on behalf of the entity you represent; (c) you are responsible for all use of the Service associated with its Account; (d) you are solely responsible for maintaining the confidentiality of your Account names and password(s); (e) you agree to immediately notify APEX of any unauthorized use of your Account of which you become aware; (f) you agree that APEX will not be liable for any losses incurred as a result of a third party's use of your Account, regardless of whether such use is with or without your knowledge and consent; (g) you will use the Service for lawful purposes only and subject to this Agreement and all applicable laws, regulations, and policies; (h) any information or Customer Content you submit to APEX is true, accurate, and correct; (i) if you are not the owner of the Customer Content that is being provided, you have the full consent of the owner to agree to the terms of this Agreement on their behalf and that you have fully informed the owner of these terms and their effect on the owner, and you have their consent to provide the Customer Content; (j) you will not attempt to gain unauthorized access to the Service, other accounts of the Service not purchased by you, computer systems, or networks under the control or responsibility of APEX through hacking, cracking, password mining, or any other unauthorized means; and (k) your use of the Services and APEX’s processing of Customer Content (including any Personal Data contained therein) will not violate the rights of any third party or any Applicable Data Protection Laws.
Each Party represents and warrants that no consent, approval, authorization, designation, declaration, or filing with any governmental authority is required concerning the valid execution, delivery, and performance of this Agreement.
Each Party shall, at its own expense, comply with all laws, regulations, and other legal requirements that apply to it and this Agreement, including copyright, privacy, and communications decency laws.
EXCEPT AS OUTLINED IN THIS SECTION, APEX, ITS AFFILIATES, RESELLERS, SUPPLIERS, OR LICENSORS MAKE NO REPRESENTATIONS, WARRANTIES, OR GUARANTEES OF ANY KIND WHATSOEVER, EITHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, ORAL OR WRITTEN, CONCERNING THE SERVICES, INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTY OR CONDITION (I) OF MERCHANTABILITY, (II) OF FITNESS FOR A PARTICULAR PURPOSE, (III) ACCURACY, (IV) OF NONINFRINGEMENT, (V) OF RESULTS TO BE DERIVED FROM USING OR INTEGRATING WITH THE SERVICES PROVIDED, (VI) ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, OR (VII) THAT THE USE OF THE SERVICES WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT ALL ERRORS WILL BE CORRECTED.
You assume sole responsibility and liability for your use of and conclusions drawn from the results obtained from the Services.
CERTAIN STATE LAWS DO NOT ALLOW LIMITATIONS ON IMPLIED WARRANTIES. IF THESE LAWS APPLY TO YOU, SOME OR ALL OF THE FOREGOING DISCLAIMERS, EXCLUSIONS, AND LIMITATIONS MAY NOT APPLY TO YOU, AND YOU MIGHT HAVE ADDITIONAL RIGHTS.
Confidentiality
You shall not disclose or use any of APEX’s Confidential Information for any purpose other than for your legitimate internal business purposes as necessary to benefit from the Services offered by APEX. You must protect APEX’s Confidential Information as you would protect your own confidential information. You will limit access to APEX’s Confidential Information to only those Authorized Users needing such access to use the Services.
Confidential Information compelled to be provided under legal proceedings may be disclosed, but only to the extent necessary. The affected party that owns the disclosed Confidential Information must be given prior notice as soon as practicable and as allowed by law, and the compelled party must reasonably cooperate with the affected party to protect the Confidential Information.
Data Security
APEX will maintain the following minimum security measures: (i) appropriate technical, physical, administrative and organizational controls designed to maintain the confidentiality, security, and integrity of a Customer’s Confidential Information; (ii) systems and procedures for detecting, preventing and responding to attacks, intrusions, and system failures, and regular testing and monitoring of the effectiveness of such systems and procedures, including, without limitation, through vulnerability scans and penetration testing; (iii) a team of employees dedicated to implementation and maintenance of security controls; and (iv) annual assessment of risks that could result in unauthorized disclosure, misuse, alteration, destruction or other compromises of a Customer’s Confidential Information, and the sufficiency of systems and procedures in place to mitigate those risks.
APEX may store your data in one or more locations. These locations include the APEX office in Greensboro, North Carolina, U.S.A., and within a QTS data center facility in Suwanee, Georgia, U.S.A. QTS is a third-party company that provides building, security, and surveillance services. QTS will not be able to access APEX equipment or data. APEX reserves the right to use reasonably secure cloud-based data backups. A SOC 2 Type II independent audit report is available upon written request, but such a request requires the requestor to sign a non-disclosure agreement. More information regarding APEX’s data storage and processing can be found in the Data Processing Addendum (“DPA”) at https://legal.apexanalytix.com/data-processing-addendum.
You acknowledge and agree that APEX will process data following the DPA. The DPA is effectively incorporated into this Agreement by reference. You also acknowledge and agree that you must comply with all applicable obligations under the DPA.
Data Privacy
APEX’s Privacy Policy at https://legal.apexanalytix.com/privacy-policy (“Privacy Policy”) applies to the Customer Content and any other information it collects through the Services. The Privacy Policy is effectively incorporated into this Agreement by reference.
Updates to Data Security and Data Privacy
APEX’s Privacy Policy and DPA are subject to updates to comply with applicable laws and regulations. The current versions of these policies will be uploaded at the posted links. You are responsible for regularly reviewing these policies for updates. If you disagree with the updated policies, you must discontinue using the Services. You may terminate your subscription to the Services at the end of your contracted term.
Personal Data
While providing the Services, APEX will process personal data following the EU GDPR and the UK GDPR. Under the EU GDPR and the UK GDPR, consent must be actively given by the data subject before Sensitive Data may be uploaded. Processing will conform to the protective measures in the Data Security and Privacy clauses. By uploading Sensitive Data, you represent that you have the necessary consent of the data subject.
Customer Content and Proprietary Rights
You are responsible for the Customer Content that you or your Authorized Users input or upload into the Service. You are further responsible for obtaining any necessary consent, permission, rights, or licenses for using the Customer Content by you and us as contemplated in this Agreement or as required to provide the Services to you. You agree that you have the legal right and authority to access, use, and disclose to us any Customer Content. You hereby grant to APEX a non-exclusive, transferable, fully paid up, worldwide, irrevocable license and right to use, modify, copy, reproduce, transmit, sub-license, index, model, aggregate, publish, display, and distribute this uploaded content as necessary for APEX (a) to provide, operate, manage, maintain, and improve the Services, including but not limited to adding new features to enhance user experience and investigating and addressing security or integrity issues related to the Services, (b) to develop new technologies, solutions, applications, and services, and (c) to fulfill our obligations and exercise our rights under this Agreement, in each case without affecting your confidentiality or privacy rights. You and your Authorized Users acknowledge that APEX may process Customer Content per the Privacy Policy.
Service Suspension Rights
We have the right, in our sole discretion, to suspend your ability to access any Service (in whole or in part), without liability, under the following circumstances: (i) for scheduled or emergency maintenance to the Service or any part thereof; (ii) if we reasonably believe that you are using the Service in breach of this Agreement or violation of applicable law; (iii) if we reasonably believe that your use of the Service poses a security risk to us or any third party; (iv) if required by law enforcement or government agency, or otherwise to comply with applicable law or regulation; (v) if you are using the Service other than for the intended purpose; or (vi) if you fail to fulfill your payment obligations hereunder. APEX may modify or suspend the Services as necessary to comply with any applicable law and/or the restrictions on use set forth in this Agreement as reasonably determined by APEX, and you acknowledge and understand that the Services may contain code that enables APEX to disable or deactivate the Services for such purpose. To the extent there is an investigation by APEX or governmental authorities in association with any alleged inappropriate or illegal use of the Services, you will reasonably cooperate in any resulting investigation. If you fail to cooperate with any investigation or reasonably or fails to rectify, within a commercially reasonable timeframe, any illegal use of the Services prohibited by this Agreement, then APEX may immediately suspend or terminate your access to or use of any or all of the Service.
Indemnification for Third-Party Claims
You will defend, indemnify, and hold APEX and APEX’s Affiliates, officers, directors, employees, suppliers, consultants, and agents harmless from any and all third-party claims, liability damages, and costs (including, but not limited to, attorneys’ fees) arising from or related to, as applicable: (i) your access to and use of the Services; (ii) any violation of this Agreement by you or Authorized User(s); (iii) infringement of any Intellectual Property Rights by you or your Authorized Users; (iv) the nature and content of all Customer Content processed by the Service; or (v) any products or services purchased or obtained by you used in connection with the Services.
APEX reserves the exclusive right to settle, compromise, and pay, without your consent, any claims or causes of action brought against us. You agree not to settle any matter in which we are named as a defendant and/or for which you have indemnity obligations without our prior written consent. We will use reasonable efforts to notify you of any such claim, action, or proceeding upon becoming aware of it.
Limitation of Liability
To the maximum extent permitted by law, APEX will not be liable for any loss of use, lost revenue or profit, or loss of data or for any indirect, incidental, consequential, exemplary, special, or punitive damages that result from the use of or inability to use the Services, or damages that result from mistakes, omissions, interruptions, errors, defects, viruses, delays in operation or transmission, failure of performance, whether arising out of breach of contract, tort (expressly including, but not limited to, negligence) or otherwise, regardless of whether such damages was foreseeable and whether or not advised of the possibility of such damages. APEX’s aggregate liability arising from or relating to this Agreement shall not exceed the amounts paid by or due from you to APEX in the 12 months immediately preceding the event giving rise to such liability. If you are dissatisfied with any portion of the Services, you agree that your sole and exclusive remedy is to discontinue using the Services.
SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF PUNITIVE, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, SO THE PRIOR LIMITATION OR EXCLUSION MAY NOT APPLY TO YOU. THE FOREGOING LIMITATIONS AND EXCLUSIONS OF LIABILITY AND DISCLAIMERS FORM AN ESSENTIAL BASIS OF THE BARGAIN BETWEEN THE PARTIES, AND APEX WOULD NOT ENTER INTO THIS AGREEMENT WITHOUT SUCH LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS.
Disputes and Governing Laws
Before filing a claim against APEX, you agree to attempt to resolve the dispute informally by contacting APEX. Upon receiving contact and learning of the issue, APEX will reasonably attempt to resolve the dispute informally. If you and APEX cannot resolve the dispute informally, a party seeking to bring a formal proceeding must first send the other, by certified mail, a written Notice of Dispute (“Notice”). The Notice should be sent to 1501 Highwoods Blvd, Suite 200, Greensboro, NC 27410, Attn: Legal Department, with a copy via email to contractnotice@apexanalytix.com. The Notice must (i) describe the nature and basis of the dispute or claim and (ii) set forth the specific relief sought for the dispute or claim. If you and APEX cannot resolve the dispute within sixty (60) days after receiving the Notice, you or APEX may commence an arbitration proceeding.
You and APEX agree that any dispute, arbitration, or lawsuit arising out of or in connection with this Agreement will be brought in the state or federal courts of Guilford County, North Carolina. This Agreement shall be governed by the laws of the state of North Carolina without giving effect to the choice of law principles thereof and in accordance with applicable federal laws of the United States, subject to the arbitration provisions below. You and APEX consent to venue and personal jurisdiction in such courts. If you reside in a country with laws that give consumers the right to bring disputes in their local courts, this paragraph doesn’t affect those requirements. The United Nations Convention on Contracts for International Sale of Goods is hereby expressly excluded. The Uniform Computer Information Transactions Act shall not apply to this Agreement.
YOU EXPRESSLY WAIVE ANY RIGHT TO INVOKE OR CLAIM THE APPLICATION OF ANY OTHER LAW TO GOVERN THE CONCLUSION, PERFORMANCE, FAILURE TO PERFORM, TERMINATION, OR EXPIRATION OF THIS AGREEMENT.
Arbitration; Class Action
Where applicable, you and APEX agree to resolve any claims relating to these terms or our Services through final and binding arbitration by a single arbitrator. This is subject to exceptions, as mentioned below. These claims include disputes arising from or relating to the interpretation or application of this Arbitration and Class Action section, including its enforceability, revocability, or validity.
The American Arbitration Association (“AAA”) will administer the arbitration under its Commercial Arbitration Rules and Consumer Related Disputes Supplementary Procedures. The arbitration process will occur in Guilford County, North Carolina, U.S.A., or any other location of APEX’s choosing. The AAA rules will govern the payment of all arbitration fees.
Exceptions to this Arbitration section include claims where parties seek injunctive relief to stop unauthorized use or abuse of the Services, breach of confidentiality obligations, or Intellectual Property Rights infringement. These exceptional claims may be brought in the Guilford County, North Carolina state court.
You may only resolve disputes with APEX individually. You may not bring a claim as a plaintiff or a class member in a class, consolidated, or representative action. Class arbitrations, class actions, private attorney general actions, and consolidations with other arbitrations aren’t allowed.
Effect of Termination
When this Agreement or any Order terminates or expires: (i) you will no longer have the right to use or access the Services(s) identified in the terminated Order as of the date of termination; (ii) all use and access rights and licenses we grant you in this Agreement, or Order, as applicable, will immediately cease to exist as of the date of termination; (iii) if you owe us any fees before such termination, you will pay those fees in accordance with this Agreement; (iv) we may delete your Client Content, and we will not be responsible or liable to you if you are unable to access or recover your Client Content following the termination of your subscription; and (v) each of us will promptly destroy (or, if the other party requests it in writing, return to the other) all Confidential Information belonging to the other.
Unless otherwise specified in an Order, we are not obligated to retain backups of Client Content for more than three months following the end of the Order term.
General
International Trade Compliance. You agree, in connection with any business with or involving APEX, not to engage with or use, directly or indirectly the government of, or any entity within, any country that is the target of any laws administered by the US Office of Foreign Assets Control, Department of the Treasury or any other governmental entity around the world imposing economic sanctions (“Embargoed Country”); and any government, entity, group, or individual who is named on the Office of Foreign Assets Control List (“OFAC List”) of Specially Designated Nationals and Blocked Persons or other similar lists maintained by any governmental entity (“Sanctioned Party”). You represent and warrant that you are not: (i) a Sanctioned Party; (ii) owned or controlled by, or acting on behalf of, a Sanctioned Party; or (iii) directly or indirectly owned, controlled by, or acting on behalf of an Embargoed Country.
Severability. If any provision of this Agreement is held unenforceable, the remaining provisions will remain in full effect, and an enforceable term will be substituted to reflect APEX’s intent as closely as possible.
Modifications and Changes. APEX reserves the right, in its sole discretion, to modify this Agreement (including any document incorporated into this Agreement by reference) at any time by posting an updated version in its Legal Center. If the changes include material changes that affect your rights or obligations, APEX will notify you by reasonable means, which could include notification through the Service or via email. You are responsible for reviewing this Agreement regularly. If you disagree with the updated Agreement, you must discontinue using the Services. Your continued use of the Service following the effective date of any changes to this Agreement constitutes acceptance of those changes.
Force Majeure. APEX shall not be deemed to be in default of any provision of this Agreement or be liable to you or any Authorized User for any delay, error, failure in performance, or interruption of performance due to any act of God, war, insurrection, acts of terrorism, riot, boycott, strikes, interruption of power service, interruption of Internet or communications service, labor or civil disturbance, acts of any other person not under our control or other cause beyond our reasonable control.
Interpretation. Any ambiguities in interpreting these Terms shall not be construed against the drafting party.
Headings. The headings used throughout these Terms are solely for convenience of reference.
Waiver. The waiver by either you or us of any breach of any provision of this Agreement does not waive any other breach. The failure of any party to insist on strict performance of any covenant or obligation will not be a waiver of such party’s right to demand strict compliance in the future, nor will the same be construed as a novation of the Agreement.
Electronic Communications. You agree to receive all communications and notices that we provide in connection with the Service (“Communications”), including, but not limited to, Communications related to our delivery of the Service or terms applicable to the Service via electronic means, including by e-mail, text, or by posting them in the Service or the Legal Center. You agree that all Communications we provide to you electronically satisfy any legal requirement that such Communications be in writing or delivered in a particular manner. You also agree to keep your account contact information current.
Assignability. You may not assign your rights or obligations or delegate your responsibilities hereunder without our written consent. If consent is given, this Agreement will bind your successors and assigns. Any attempt by you to transfer your rights, duties, or obligations under this Agreement except as expressly provided herein is void. We may freely assign our rights, duties, and obligations hereunder without notice to you at any time.
Relationship of the Parties. At all times, you and APEX are independent parties and are not agents or representatives of the other. These terms are not intended to create a joint venture, partnership, or franchise relationship between the parties. Non-parties do not benefit from and cannot enforce this Agreement. There are no third-party beneficiaries to this Agreement other than APEX’s Affiliates, its providers of Third-Party Data, and any of its providers or licensors of any portion of the Services.
Controlling Language. The original version of this Agreement is in English, and the English version shall prevail in case of any conflict with any version or portion thereof that has been translated into another language.
Entire Agreement. This Agreement and any addendum or policies incorporated by reference constitute the entire agreement between you and us for the Services and supersedes all prior or contemporaneous agreements and communications between you and us.
Effective September 10th 2024 to October 25th 2024
DownloadTable of Contents
END-USER SERVICE AGREEMENT
This End-User Service Agreement (“Agreement”) governs access to and use of the APEX Analytix, LLC software, website, applications, application plug-ins, solutions, application programming interfaces (“APIs”), and other services provided by us to you (collectively, the “Services”).
This Agreement is in addition to, and does not nullify, any other agreement between you and us or any other applicable terms and conditions found on the Services.
PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SERVICES. THIS AGREEMENT CONTAINS IMPORTANT INFORMATION REGARDING YOUR LEGAL RIGHTS, REMEDIES AND OBLIGATIONS, INCLUDING VARIOUS LIMITATIONS AND EXCLUSIONS OF LIABILITY, YOUR OBLIGATION NOT TO UPLOAD ANY SENSITIVE DATA WITHOUT THE DATA SUBJECT’S PRIOR WRITTEN CONSENT, AND A DISPUTE RESOLUTION CLAUSE THAT GOVERNS HOW AND WHERE DISPUTES WILL BE RESOLVED.
Acceptance of Terms; Eligibility
By clicking a box indicating acceptance or using the Services, you are signifying that you have read, understand, and agree to be bound by the Agreement (whether on behalf of yourself or any legal entity you represent). You also agree to comply with all applicable laws and regulations and all rules and restrictions posted on the Service. You agree that you are at least 18 years old and legally can enter into a contract.
If you enter into the Agreement on behalf of an organization or entity, you represent and warrant that you are authorized to bind the organization or entity (and its Affiliates if applicable) to this Agreement (in which case, the references to “you” and “your” in this Agreement refer to that organization or entity, also referred to as “Customer”). If you do not have such authority or disagree with the terms of the Agreement, you must cease using the Services immediately.
Definitions
“Affiliate” means any individual or entity (e.g., corporation, partnership limited liability company, joint venture, etc.) that, at the applicable time, directly or indirectly controls, is controlled with or by or is under common control with, a party, where “control” means, with respect to a corporation, the ownership, directly or indirectly, of fifty percent (50%) or more of the voting power to elect directors thereof, or with respect to any other entity, the power to direct the management of such entity.
“Authorized User” refers to your personnel employed, retained, or contracted (by you) with access to the Services. These personnel may include supplier personnel providing services to you.
“APEX,” “we,” or “us” refers to APEX Analytix, LLC and its Affiliates and subsidiaries.
“Applicable Data Protection Law” refers to all applicable laws and regulations regarding processing Personal Data in connection with this Agreement. These applicable laws and regulations may include: (i) the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”), as amended and supplemented, as the case may be, by the relevant EU Member States laws and regulations in which the Customer directly or indirectly operates; (ii) the UK Data Protection Act 2018 and the UK General Data Protection Regulation (“UK GDPR”); (iii) the Australian Privacy Act 1988 and National Privacy Principles; (iv) the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and any related regulations or guidance (collectively, the “CCPA”); (v) the Canadian Personal Information Protection and Electronic Documents Act (the “PIPEDA”); and (vi) any other international, federal, state, provincial, and local privacy or data protection laws, rules, regulations, directives and governmental requirements currently in effect and as they become effective.
“Confidential Information” refers to (a) nonpublic confidential, proprietary, or trade secret information, including without limitation technical, business, or financial information that the Reseller or APEX designates as being confidential or (b) nonpublic information which, given the nature of the disclosure or the circumstances surrounding disclosure, the receiving party should treat as confidential.
“Customer” refers to any legal entity (other than the Reseller or its Affiliates) that is an end user of the Services.
“Customer Content” refers to the data the Customer or its Authorized Users provide to APEX through the Services.
“Documentation” means the current electronic user manuals, operating manuals, and other materials that describe our Service modules' functionality, components, technical requirements, and features as generally made available to our customers.
“Order” refers to the purchasing document between you and APEX or a Reseller for the Services.
“Personal Data” refers to any information that APEX processes which (i) identifies or relates to an individual who can be identified directly or indirectly from that data alone or in combination with other information in APEX’s possession or control, or (ii) the Applicable Data Protection Law otherwise defines as protected personal data or personal information.
“Reseller” means an entity authorized to resell APEX Services to Customers.
“Sensitive Data” refers to, but is not limited to, Personal Data consisting of information about physical or mental health or condition, racial or ethnic origin, sex life, sexual orientation, trade union membership, genetic data, biometric data to uniquely identify a natural person, religious or philosophical beliefs, political opinions or criminal records concerning an individual.
“Third-Party Data” or “Third-Party Database” means data or databases provided through the Portal Registration module, SmartVM®, or other Service, which may include or reflect data or databases acquired by the APEX from third-party licensors, providers, government agencies, foreign country commissions, and global cooperatives.
“Usage Metrics” means the quantity or other limits on the use of an applicable Service specified in the Order, which may be based on the number of Authorized Users, the amount of data processed or stored through the Service, the number of requests permitted to the Service programming interface, or other limits applicable to a particular Service.
APEX Account
When you create an account to use or access the Service, you must provide complete and accurate information as requested on the registration form and maintain and update such information to keep it complete and accurate. You will also be required to provide a username and password. You are responsible for maintaining your password's confidentiality and all activities (whether by you or your Authorized Users) occurring under your password or account. You may not use a third party’s account, username, or password at any time, and you will not allow anyone other than Authorized Users to access or use the Service from your account. You agree to notify APEX immediately of unauthorized use of your account, username, or password. APEX shall not be liable for any losses you incur due to someone else’s use of your account or password, either with or without your knowledge. You may be liable for any losses incurred by APEX, our Affiliates, officers, directors, employees, consultants, agents, and representatives due to someone else’s use of your account or password.
You will promptly notify APEX of any suspected violation of this Agreement by an Authorized User, and you will reasonably cooperate with APEX to address the alleged violation. APEX may suspend or terminate any Authorized User’s access to the Service upon notice to you if APEX reasonably determines that such Authorized User violated this Agreement.
Acceptable Use
APEX shall make the Service available to you for the term and subject to the applicable Usage Metric(s) outlined in an Order to remotely access and use the Services solely to process Client Content for your internal business purposes, including commercial services, and by and subject to the terms of this Agreement and any associated Documentation that may be provided for the Service.
You may not:
- use the Services in a manner that is prohibited by any law or regulation or to facilitate the violation of any law or regulation, including without limitation those pertaining to privacy, data protection, and export control;
- reverse-engineer, disassemble, decode, decompile, adapt, or otherwise derive or gain access to the source code or other trade secrets of the Service or any software or other technology used to provide the Service;
- copy, modify, or create derivative works of or to the Service, or access the Service to build a competitive product or service, or copy its features or user interface;
- give, sell, rent, lease, timeshare, sublicense, disclose, publish, assign, market, transfer, or distribute any portion of the Service to any third party;
- use the Services in a manner that infringes or violates the intellectual property or proprietary rights of APEX or any third party, including rights of privacy and publicity;
- remove, alter, or conceal any copyright notices, proprietary notices, trademarks, or other notices or marks that may appear on the Service or Documentation or any reports generated by the Service, including any attribution that may be required by third-party owners or licensors;
- modify, alter, or translate any portion of the Services without APEX’s prior written consent; or
- violate or tamper with the security of the Service, any APEX systems, or networks connected to any APEX systems through hacking, password mining, social engineering, or any other means;
- use or attempt to use any deep-link, scraper, robot, bot, spider, data mining, computer code, or any other device, program, tool, algorithm, process, or methodology to process having similar functionality, to access, acquire, copy or monitor any portion of the Services; or,
- use the Service in conjunction with any machine learning, neural network, deep learning, predictive analytics, or other artificial intelligence computer or software program.
If APEX has reasonable grounds to believe that you are utilizing the Services for any illegal or disruptive purpose, or violating any of the acceptable use provisions, then APEX may suspend the Services immediately with or without notice to you. APEX may terminate the Agreement if you fail to adhere to the acceptable use standards.
Your Responsibilities
You shall be responsible for the following: (i) procuring, maintaining, and supporting all your systems and other products and services required to access and use the Services; (ii) the compatibility of your system and other software used with the Services; (iii) your Authorized Users’ compliance with the terms of this Agreement; (iv) providing and maintaining back-up and disaster recovery procedures and facilities in connection with your system(s) used to access and use the Services; and (v) the accuracy, quality, integrity, and legality of all Customer Content transmitted by you when using the Services. APEX makes no representations, warranties, or assurances that your system will be compatible with the Services.
Fees and Payment
The fees you are obligated to pay and the manner of payment are set forth in the Order for the Services. If your Order is with APEX, you agree to pay us all applicable fees in full, without deduction or setoff of any kind, in the currency outlined in the Order within thirty (30) days of the invoice date. Fees are payable annually in advance; the first invoice will coincide with the Order's effective date. We offer our Services on an annual subscription basis; you cannot terminate any Order for your convenience during the applicable subscription term. Amounts payable under this Agreement are nonrefundable. If you do not pay us on time, in addition to any other rights we may have at law or in equity (including, without limitation, our rights to suspend your access to the Service), we reserve the right to charge you interest on past due amounts at 1.5% per month or the highest interest rate allowed by law, whichever is less, and to additionally charge all expenses of recovery.
All payments required by this Agreement are stated exclusive of all taxes, duties, levies, imposts, fines, or similar governmental assessments, including sales and use taxes, value-added taxes, goods and services taxes, excise, business, service, and similar transactional taxes imposed by any jurisdiction and the interest and penalties thereon (collectively, “Taxes”). You are responsible for and bear Taxes associated with the purchase of, payment for, access to, or use of the Services. Each party is responsible for and shall bear Taxes imposed on its net income. The purpose of this subsection is to preserve the payments to us from being reduced because of withholding taxes, duties, and other taxes and assessments that may be imposed by a jurisdiction in which you operate or are otherwise subject to taxation.
In the future, we reserve the right to require payment of fees for certain or all aspects of the Service, change prices, or institute new charges upon notice to you, which may be emailed or posted on the Service. Upon such notification, your continued use of the Service constitutes your acceptance of any new or increased charges.
If your Order is through a Reseller, the Reseller’s payment terms shall apply.
Intellectual Property Rights
Subject to the limited rights expressly granted hereunder, APEX (and as may be applicable, its providers and licensors) reserves, retains, and owns all rights, title, and interest in and associated with the Services, including all Intellectual Property Rights, without limitation. “Intellectual Property Rights” shall include but not be limited to patents, trademarks, copyrights, trade secrets, design rights, database rights, service marks, trademarks, know-how, and any other intellectual property or proprietary rights, whether registered or unregistered, and any application for registration of any of the foregoing, and any right to file any such application, which may exist anywhere in the world, as well as all derivative works, improvements, upgrades, enhancements, modifications or translations of the foregoing. You acknowledge and agree that you have not and will not obtain any rights or license hereunder except as expressly set forth or granted herein. All present and future Intellectual Property Rights, including rights in and to all applications and registrations relating to the Service, shall between you and us, at all times, remain the sole and exclusive property of APEX (and as may be applicable, its providers and licensors).
The trademarks, logos, taglines, and service marks displayed on the Service (collectively, the “Trademarks”) are registered and unregistered Trademarks of APEX and others. The Trademarks may not be used without our prior express written permission. We acknowledge the Trademarks of other organizations for their respective products or services mentioned on or incorporated within the Service. Other than as provided in this Agreement, your use of the Trademarks or any other content is strictly prohibited.
When you provide suggestions, enhancement requests, recommendations, or other feedback relating to the operation of the Services (”Feedback”), you: (1) grant APEX a royalty-free, fully-paid, sublicensable, transferable, worldwide, irrevocable, perpetual right and license to use, make, sell, offer for sale, import, incorporate or otherwise exploit these ideas into the Services, without restriction, (2) agree that your Feedback will not violate any right of a third party, including intellectual property or other personal or proprietary rights, (3) will not contain any libelous or unlawful material.
Any software, reports, or other materials available for downloading through the Service (“Materials”) are the copyrighted work of APEX and its third-party providers and licensors. Use of these Materials is limited to your internal business use and is subject to the terms of this Agreement. Unauthorized reproduction or distribution of the Materials is expressly prohibited by law and may result in civil and criminal penalties. Violators may be prosecuted.
APEX owns all Intellectual Property Rights in and to (i) the Service and its underlying technology, software, databases, and analytics; (ii) any Materials provided in association with the Service, (iii) the Trademarks, (iv) the Documentation, (v) Feedback, and (vi) any models, methods, algorithms, discoveries, inventions, modifications, customizations, enhancements, extensions, derivatives, materials, ideas and other work product that is conceived of, originated or prepared in connection with the Services or related to the provision of the Services.
Third-Party Content
The Service may contain links to external websites or other means of access to Third-Party Data or Third-Party Database(s). APEX is not responsible for and expressly disclaims any liability or obligation for the information, content, availability, or performance of any Third-Party Data or Third-Party Database. APEX does not represent or warrant in any manner that the Third-Party Data is accurate, current, complete, or complies with laws, rules, and/or regulations of the jurisdiction in which the Third-Party Data is used or that it is suitable for your purposes.
APEX may lose access to certain Third-Party Data, including governments, as they may become unavailable during the Term. APEX will notify you through the Service(s) if any Third-Party Data source becomes unavailable during the Term for which no substitute is available.
Representations, Covenants, and Warranties
You hereby represent and warrant to APEX that: (a) you have all requisite rights and authority to use the Service under this Agreement and to grant all applicable rights herein; (b) you are, at minimum, the age of majority in your jurisdiction of residence and you are an individual who is capable of forming legally binding contracts under applicable law on behalf of the entity you represent; (c) you are responsible for all use of the Service associated with its Account; (d) you are solely responsible for maintaining the confidentiality of your Account names and password(s); (e) you agree to immediately notify APEX of any unauthorized use of your Account of which you become aware; (f) you agree that APEX will not be liable for any losses incurred as a result of a third party's use of your Account, regardless of whether such use is with or without your knowledge and consent; (g) you will use the Service for lawful purposes only and subject to this Agreement and all applicable laws, regulations, and policies; (h) any information or Customer Content you submit to APEX is true, accurate, and correct; (i) if you are not the owner of the Customer Content that is being provided, you have the full consent of the owner to agree to the terms of this Agreement on their behalf and that you have fully informed the owner of these terms and their effect on the owner, and you have their consent to provide the Customer Content; (j) you will not attempt to gain unauthorized access to the Service, other accounts of the Service not purchased by you, computer systems, or networks under the control or responsibility of APEX through hacking, cracking, password mining, or any other unauthorized means; and (k) your use of the Services and APEX’s processing of Customer Content (including any Personal Data contained therein) will not violate the rights of any third party or any Applicable Data Protection Laws.
Each Party represents and warrants that no consent, approval, authorization, designation, declaration, or filing with any governmental authority is required concerning the valid execution, delivery, and performance of this Agreement.
Each Party shall, at its own expense, comply with all laws, regulations, and other legal requirements that apply to it and this Agreement, including copyright, privacy, and communications decency laws.
EXCEPT AS OUTLINED IN THIS SECTION, APEX, ITS AFFILIATES, RESELLERS, SUPPLIERS, OR LICENSORS MAKE NO REPRESENTATIONS, WARRANTIES, OR GUARANTEES OF ANY KIND WHATSOEVER, EITHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, ORAL OR WRITTEN, CONCERNING THE SERVICES, INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTY OR CONDITION (I) OF MERCHANTABILITY, (II) OF FITNESS FOR A PARTICULAR PURPOSE, (III) ACCURACY, (IV) OF NONINFRINGEMENT, (V) OF RESULTS TO BE DERIVED FROM USING OR INTEGRATING WITH THE SERVICES PROVIDED, (VI) ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, OR (VII) THAT THE USE OF THE SERVICES WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT ALL ERRORS WILL BE CORRECTED.
You assume sole responsibility and liability for your use of and conclusions drawn from the results obtained from the Services.
CERTAIN STATE LAWS DO NOT ALLOW LIMITATIONS ON IMPLIED WARRANTIES. IF THESE LAWS APPLY TO YOU, SOME OR ALL OF THE FOREGOING DISCLAIMERS, EXCLUSIONS, AND LIMITATIONS MAY NOT APPLY TO YOU, AND YOU MIGHT HAVE ADDITIONAL RIGHTS.
Confidentiality
You shall not disclose or use any of APEX’s Confidential Information for any purpose other than for your legitimate internal business purposes as necessary to benefit from the Services offered by APEX. You must protect APEX’s Confidential Information as you would protect your own confidential information. You will limit access to APEX’s Confidential Information to only those Authorized Users needing such access to use the Services.
Confidential Information compelled to be provided under legal proceedings may be disclosed, but only to the extent necessary. The affected party that owns the disclosed Confidential Information must be given prior notice as soon as practicable and as allowed by law, and the compelled party must reasonably cooperate with the affected party to protect the Confidential Information.
Data Security
APEX will maintain the following minimum security measures: (i) appropriate technical, physical, administrative and organizational controls designed to maintain the confidentiality, security, and integrity of a Customer’s Confidential Information; (ii) systems and procedures for detecting, preventing and responding to attacks, intrusions, and system failures, and regular testing and monitoring of the effectiveness of such systems and procedures, including, without limitation, through vulnerability scans and penetration testing; (iii) a team of employees dedicated to implementation and maintenance of security controls; and (iv) annual assessment of risks that could result in unauthorized disclosure, misuse, alteration, destruction or other compromises of a Customer’s Confidential Information, and the sufficiency of systems and procedures in place to mitigate those risks.
APEX may store your data in one or more locations. These locations include the APEX office in Greensboro, North Carolina, U.S.A., and within a QTS data center facility in Suwanee, Georgia, U.S.A. QTS is a third-party company that provides building, security, and surveillance services. QTS will not be able to access APEX equipment or data. APEX reserves the right to use reasonably secure cloud-based data backups. A SOC 2 Type II independent audit report is available upon written request, but such a request requires the requestor to sign a non-disclosure agreement. More information regarding APEX’s data storage and processing can be found in the Data Processing Addendum (“DPA”) at https://legal.apexanalytix.com/data-processing-addendum.
You acknowledge and agree that APEX will process data following the DPA. The DPA is effectively incorporated into this Agreement by reference. You also acknowledge and agree that you must comply with all applicable obligations under the DPA.
Data Privacy
APEX’s Privacy Policy at https://legal.apexanalytix.com/privacy-policy (“Privacy Policy”) applies to the Customer Content and any other information it collects through the Services. The Privacy Policy is effectively incorporated into this Agreement by reference.
Updates to Data Security and Data Privacy
APEX’s Privacy Policy and DPA are subject to updates to comply with applicable laws and regulations. The current versions of these policies will be uploaded at the posted links. You are responsible for regularly reviewing these policies for updates. If you disagree with the updated policies, you must discontinue using the Services. You may terminate your subscription to the Services at the end of your contracted term.
Personal Data
While providing the Services, APEX will process personal data following the EU GDPR and the UK GDPR. Under the EU GDPR and the UK GDPR, consent must be actively given by the data subject before Sensitive Data may be uploaded. Processing will conform to the protective measures in the Data Security and Privacy clauses. By uploading Sensitive Data, you represent that you have the necessary consent of the data subject.
Customer Content and Proprietary Rights
You are responsible for the Customer Content that you or your Authorized Users input or upload into the Service. You are further responsible for obtaining any necessary consent, permission, rights, or licenses for using the Customer Content by you and us as contemplated in this Agreement or as required to provide the Services to you. You agree that you have the legal right and authority to access, use, and disclose to us any Customer Content. You hereby grant to APEX a non-exclusive, transferable, fully paid up, worldwide, irrevocable license and right to use, modify, copy, reproduce, transmit, sub-license, index, model, aggregate, publish, display, and distribute this uploaded content as necessary for APEX (a) to provide, operate, manage, maintain, and improve the Services, including but not limited to adding new features to enhance user experience and investigating and addressing security or integrity issues related to the Services, (b) to develop new technologies, solutions, applications, and services, and (c) to fulfill our obligations and exercise our rights under this Agreement, in each case without affecting your confidentiality or privacy rights. You and your Authorized Users acknowledge that APEX may process Customer Content per the Privacy Policy.
Service Suspension Rights
We have the right, in our sole discretion, to suspend your ability to access any Service (in whole or in part), without liability, under the following circumstances: (i) for scheduled or emergency maintenance to the Service or any part thereof; (ii) if we reasonably believe that you are using the Service in breach of this Agreement or violation of applicable law; (iii) if we reasonably believe that your use of the Service poses a security risk to us or any third party; (iv) if required by law enforcement or government agency, or otherwise to comply with applicable law or regulation; (v) if you are using the Service other than for the intended purpose; or (vi) if you fail to fulfill your payment obligations hereunder. APEX may modify or suspend the Services as necessary to comply with any applicable law and/or the restrictions on use set forth in this Agreement as reasonably determined by APEX, and you acknowledge and understand that the Services may contain code that enables APEX to disable or deactivate the Services for such purpose. To the extent there is an investigation by APEX or governmental authorities in association with any alleged inappropriate or illegal use of the Services, you will reasonably cooperate in any resulting investigation. If you fail to cooperate with any investigation or reasonably or fails to rectify, within a commercially reasonable timeframe, any illegal use of the Services prohibited by this Agreement, then APEX may immediately suspend or terminate your access to or use of any or all of the Service.
Indemnification for Third-Party Claims
You will defend, indemnify, and hold APEX and APEX’s Affiliates, officers, directors, employees, suppliers, consultants, and agents harmless from any and all third-party claims, liability damages, and costs (including, but not limited to, attorneys’ fees) arising from or related to, as applicable: (i) your access to and use of the Services; (ii) any violation of this Agreement by you or Authorized User(s); (iii) infringement of any Intellectual Property Rights by you or your Authorized Users; (iv) the nature and content of all Customer Content processed by the Service; or (v) any products or services purchased or obtained by you used in connection with the Services.
APEX reserves the exclusive right to settle, compromise, and pay, without your consent, any claims or causes of action brought against us. You agree not to settle any matter in which we are named as a defendant and/or for which you have indemnity obligations without our prior written consent. We will use reasonable efforts to notify you of any such claim, action, or proceeding upon becoming aware of it.
Limitation of Liability
To the maximum extent permitted by law, APEX will not be liable for any loss of use, lost revenue or profit, or loss of data or for any indirect, incidental, consequential, exemplary, special, or punitive damages that result from the use of or inability to use the Services, or damages that result from mistakes, omissions, interruptions, errors, defects, viruses, delays in operation or transmission, failure of performance, whether arising out of breach of contract, tort (expressly including, but not limited to, negligence) or otherwise, regardless of whether such damages was foreseeable and whether or not advised of the possibility of such damages. APEX’s aggregate liability arising from or relating to this Agreement shall not exceed the amounts paid by or due from you to APEX in the 12 months immediately preceding the event giving rise to such liability. If you are dissatisfied with any portion of the Services, you agree that your sole and exclusive remedy is to discontinue using the Services.
SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF PUNITIVE, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, SO THE PRIOR LIMITATION OR EXCLUSION MAY NOT APPLY TO YOU. THE FOREGOING LIMITATIONS AND EXCLUSIONS OF LIABILITY AND DISCLAIMERS FORM AN ESSENTIAL BASIS OF THE BARGAIN BETWEEN THE PARTIES, AND APEX WOULD NOT ENTER INTO THIS AGREEMENT WITHOUT SUCH LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS.
Disputes and Governing Laws
Before filing a claim against APEX, you agree to attempt to resolve the dispute informally by contacting APEX. Upon receiving contact and learning of the issue, APEX will reasonably attempt to resolve the dispute informally. If you and APEX cannot resolve the dispute informally, a party seeking to bring a formal proceeding must first send the other, by certified mail, a written Notice of Dispute (“Notice”). The Notice should be sent to 1501 Highwoods Blvd, Suite 200, Greensboro, NC 27410, Attn: Legal Department, with a copy via email to contractnotice@apexanalytix.com. The Notice must (i) describe the nature and basis of the dispute or claim and (ii) set forth the specific relief sought for the dispute or claim. If you and APEX cannot resolve the dispute within sixty (60) days after receiving the Notice, you or APEX may commence an arbitration proceeding.
You and APEX agree that any dispute, arbitration, or lawsuit arising out of or in connection with this Agreement will be brought in the state or federal courts of Guilford County, North Carolina. This Agreement shall be governed by the laws of the state of North Carolina without giving effect to the choice of law principles thereof and in accordance with applicable federal laws of the United States, subject to the arbitration provisions below. You and APEX consent to venue and personal jurisdiction in such courts. If you reside in a country with laws that give consumers the right to bring disputes in their local courts, this paragraph doesn’t affect those requirements. The United Nations Convention on Contracts for International Sale of Goods is hereby expressly excluded. The Uniform Computer Information Transactions Act shall not apply to this Agreement.
YOU EXPRESSLY WAIVE ANY RIGHT TO INVOKE OR CLAIM THE APPLICATION OF ANY OTHER LAW TO GOVERN THE CONCLUSION, PERFORMANCE, FAILURE TO PERFORM, TERMINATION, OR EXPIRATION OF THIS AGREEMENT.
Arbitration; Class Action
Where applicable, you and APEX agree to resolve any claims relating to these terms or our Services through final and binding arbitration by a single arbitrator. This is subject to exceptions, as mentioned below. These claims include disputes arising from or relating to the interpretation or application of this Arbitration and Class Action section, including its enforceability, revocability, or validity.
The American Arbitration Association (“AAA”) will administer the arbitration under its Commercial Arbitration Rules and Consumer Related Disputes Supplementary Procedures. The arbitration process will occur in Guilford County, North Carolina, U.S.A., or any other location of APEX’s choosing. The AAA rules will govern the payment of all arbitration fees.
Exceptions to this Arbitration section include claims where parties seek injunctive relief to stop unauthorized use or abuse of the Services, breach of confidentiality obligations, or Intellectual Property Rights infringement. These exceptional claims may be brought in the Guilford County, North Carolina state court.
You may only resolve disputes with APEX individually. You may not bring a claim as a plaintiff or a class member in a class, consolidated, or representative action. Class arbitrations, class actions, private attorney general actions, and consolidations with other arbitrations aren’t allowed.
Effect of Termination
When this Agreement or any Order terminates or expires: (i) you will no longer have the right to use or access the Services(s) identified in the terminated Order as of the date of termination; (ii) all use and access rights and licenses we grant you in this Agreement, or Order, as applicable, will immediately cease to exist as of the date of termination; (iii) if you owe us any fees before such termination, you will pay those fees in accordance with this Agreement; (iv) we may delete your Client Content, and we will not be responsible or liable to you if you are unable to access or recover your Client Content following the termination of your subscription; and (v) each of us will promptly destroy (or, if the other party requests it in writing, return to the other) all Confidential Information belonging to the other.
Unless otherwise specified in an Order, we are not obligated to retain backups of Client Content for more than three months following the end of the Order term.
General
International Trade Compliance. You agree, in connection with any business with or involving APEX, not to engage with or use, directly or indirectly the government of, or any entity within, any country that is the target of any laws administered by the US Office of Foreign Assets Control, Department of the Treasury or any other governmental entity around the world imposing economic sanctions (“Embargoed Country”); and any government, entity, group, or individual who is named on the Office of Foreign Assets Control List (“OFAC List”) of Specially Designated Nationals and Blocked Persons or other similar lists maintained by any governmental entity (“Sanctioned Party”). You represent and warrant that you are not: (i) a Sanctioned Party; (ii) owned or controlled by, or acting on behalf of, a Sanctioned Party; or (iii) directly or indirectly owned, controlled by, or acting on behalf of an Embargoed Country.
Severability. If any provision of this Agreement is held unenforceable, the remaining provisions will remain in full effect, and an enforceable term will be substituted to reflect APEX’s intent as closely as possible.
Modifications and Changes. APEX reserves the right, in its sole discretion, to modify this Agreement (including any document incorporated into this Agreement by reference) at any time by posting an updated version in its Legal Center. If the changes include material changes that affect your rights or obligations, APEX will notify you by reasonable means, which could include notification through the Service or via email. You are responsible for reviewing this Agreement regularly. If you disagree with the updated Agreement, you must discontinue using the Services. Your continued use of the Service following the effective date of any changes to this Agreement constitutes acceptance of those changes.
Force Majeure. APEX shall not be deemed to be in default of any provision of this Agreement or be liable to you or any Authorized User for any delay, error, failure in performance, or interruption of performance due to any act of God, war, insurrection, acts of terrorism, riot, boycott, strikes, interruption of power service, interruption of Internet or communications service, labor or civil disturbance, acts of any other person not under our control or other cause beyond our reasonable control.
Interpretation. Any ambiguities in interpreting these Terms shall not be construed against the drafting party.
Headings. The headings used throughout these Terms are solely for convenience of reference.
Waiver. The waiver by either you or us of any breach of any provision of this Agreement does not waive any other breach. The failure of any party to insist on strict performance of any covenant or obligation will not be a waiver of such party’s right to demand strict compliance in the future, nor will the same be construed as a novation of the Agreement.
Electronic Communications. You agree to receive all communications and notices that we provide in connection with the Service (“Communications”), including, but not limited to, Communications related to our delivery of the Service or terms applicable to the Service via electronic means, including by e-mail, text, or by posting them in the Service or the Legal Center. You agree that all Communications we provide to you electronically satisfy any legal requirement that such Communications be in writing or delivered in a particular manner. You also agree to keep your account contact information current.
Assignability. You may not assign your rights or obligations or delegate your responsibilities hereunder without our written consent. If consent is given, this Agreement will bind your successors and assigns. Any attempt by you to transfer your rights, duties, or obligations under this Agreement except as expressly provided herein is void. We may freely assign our rights, duties, and obligations hereunder without notice to you at any time.
Relationship of the Parties. At all times, you and APEX are independent parties and are not agents or representatives of the other. These terms are not intended to create a joint venture, partnership, or franchise relationship between the parties. Non-parties do not benefit from and cannot enforce this Agreement. There are no third-party beneficiaries to this Agreement other than APEX’s Affiliates, its providers of Third-Party Data, and any of its providers or licensors of any portion of the Services.
Controlling Language. The original version of this Agreement is in English, and the English version shall prevail in case of any conflict with any version or portion thereof that has been translated into another language.
Entire Agreement. This Agreement and any addendum or policies incorporated by reference constitute the entire agreement between you and us for the Services and supersedes all prior or contemporaneous agreements and communications between you and us.
apexanalytix Service Descriptions
Effective September 10th 2024
DownloadTable of Contents
apexanalytix Service Descriptions
APEX Analytix, LLC (“apexanalytix”) provides the following software-as-a-service applications, modules and services:
Control & Analytics Software
Overpayment Prevention. This software solution assists in preventing duplicate payments and identifying invoice outliers, missed cash discounts, and paid credit memos.
Portal Software
Bank Account Validation. Our proprietary solution validates bank account ownership for the US, UK, India, Poland, Czechia, Sweden bankgiro, and global bank account ownership confidence scoring. apexanalytix integrates directly with banking consortiums and governmental databases to positively confirm bank account ownership and provide real-time account ownership validations. Our customers usually perform this for both new suppliers and all current supplier bank changes. US bank account validation is provided by Early Warning Services, LLC, a fintech company owned by seven of the country’s largest banks. APEX is an authorized reseller of this US bank account validation service (“EWS Service”). The EWS Service is subject to the terms in the EWS Services Addendum, https://legal.apexanalytix.com/ews-addendum.
Customer Management. This module is a centralized hub for managing customer interactions within the Customer Portal, providing clients with a seamless and efficient onboarding experience. This module features two key components: Customer Registration and Risk and Fraud. Customer Registration helps streamline customer onboarding with our intuitive registration process, which enables users to establish their accounts or profiles. This critical initial step in the user experience encompasses the following processes: Invite Customer, Create Customer, My Customers, and All Customers. Risk and Fraud is used to configure and manage risk-related information based on customer data. This dashboard consolidates critical risk data, empowering informed decision-making and proactive risk mitigation practices for our clients.
Cyber Risk. This solution is a cyber vulnerability tool for identifying suppliers at high risk for a cyberattack. Whether it is a ransomware attack, business email compromise scam, or data breach, Cyber Risk scans the open and hidden internet to alert you of your supplier’s cyber risk that could disrupt your supply chain and/or defraud your company.
Discovery. This module allows the client to find new sources of supply with pre-registered, pre-validated potential suppliers. Active suppliers would be part of the client's Registration module via the invitation process. Once the supplier completes their registration, they will be approved based on the client’s approval workflow and become active suppliers within the ERP system. Once assigned a supplier number from the ERP, this information would be fed back to the Portal to be tied to the supplier.
Diversity Management. This module allows access to suppliers with pre-validated diversity classifications from the APEX smartvm database. This module will validate supplier status using over 100 diverse data sources, including the U.S. Small Business Administration.
Dynamic Discounting & Supply Chain Financing. This module includes Dynamic Discounting, Open Supply Chain Finance, and Supplier Initiated Discount. The client can communicate discount offers using portal notifications, email alerts, or automated dialing. The Portal helps segment and target suppliers based on the probability of discount acceptance. It can communicate early-pay offers, track whether a supplier accepts the terms, and monitor the status of accelerated payments. The Portal communicates early payments directly with the Client’s ERP for action. The modules seamlessly communicate with third-party funding sources to initiate transactions. Supplier-initiated discounts allow client suppliers to offer Client discounts for limited early payment funds.
Fraud Detect. This module assists in the identification and investigation of fraudulent invoices. It analyzes characteristics and patterns in supplier profiles and invoice transactions for indicators of possible fraud risk. Fraud risk indicators are rolled into composite fraud risk scores to help identify cases where bad actors may be skirting normal fraud controls. The solution continuously assesses fraud risk on behalf of the client. Highly configurable workflows raise alerts when specific fraud flags or composite scores cross configurable thresholds. Users can follow links in alerts to view details around the fraud risk flags. Users can launch a collaborative investigation project, invite other team members to participate, capture and review evidence, set timelines and action items, engage suppliers (if appropriate), and, ultimately, document conclusions about the occurrence of fraud. A final case file can be generated and shared with others.
Global Insight. This module is a global news monitoring service using keywords across multiple categories to return scoring about specific companies. Internet news on monitored companies is captured daily and stored for analysis. Results are returned and displayed within the Portal Risk module dashboard.
Inquiry. This module provides client suppliers access to current invoices and online payment statuses. The self-service capabilities allow client suppliers to forecast cash flow, export data to Microsoft Excel, and email follow-up questions directly to the client. The Portal also enables the client’s internal team to access information needed to answer queries.
Insurance Coverage Monitoring. This module allows suppliers' insurance certificates in the Portal to be monitored in real-time. This validates the coverage level and issuance dates for the insured. Based on client-specific business rules, notifications can be sent to the client and/or client suppliers.
Language Packs. Additional languages for Portal include Arabic, Chinese (Simple), Chinese (Traditional), Czech, Danish, Dutch, English (UK), Finish, French (EMEA), French (Canadian), German, Hebrew, Hindi, Italian, Japanese, Korean, Norwegian, Polish, Portuguese (EMEA), Portuguese (LATAM), Russian, Slovak, Spanish (EMEA), Spanish (LATAM), Swedish, Thai, Turkish, Vietnamese.
Performance Management. This module provides supplier performance tracking scorecards and questionnaires for monitoring performance against expectations.
Registration Essentials. This non-integrated module allows Authorized Users to validate client supplier tax, address, and banking information. It also checks against prohibited supplier lists. This module does not support integration into the Client’s ERP nor customization of fields, rules, or workflows.
Risk Foundation. This module lets the client measure, monitor, and manage critical business partner relationships. It uses configurable questionnaires and imports operational and Third-party Data and ratings to help the client reduce risk.
Risk Management. This module lets the client measure, monitor, and manage critical business partner relationships. It uses configurable questionnaires and imports operational and Third-Party Data and ratings to help the client reduce risk. An automated communications engine, remediation tracking, reporting, recertification, and 360-degree scorecards are included.
Simple E-Invoicing. Simple E-invoicing captures invoice header data and images for low-volume client suppliers not registered to the Client’s invoice automation solution. APEX’s Secure Open Adapter lets the client integrate your e-invoicing solution directly into the Portal.
Sustainability Compliance (also known as apexESG). This module includes supplier regulatory compliance and sustainability program management, scoring, and supplier questionnaires.
Registration. This module is for onboarding new suppliers and maintaining existing supplier records. This module creates a touchless supplier master by fully automating supplier onboarding and supplier master updates. Client suppliers enter the required information online in a secure portal. The Portal automatically validates global postal addresses, TIN/VAT, and bank account existence (ABA, SWIFT, IBAN, and IFSC). The module allows the client to set payment terms and methods during onboarding. Configurable options allow client-specific fields to be required or important documents to be uploaded before a PO or payment can be issued, including W-9/W-8, insurance certificates, diversity certifications, and more.
Statement Management. This module automates your supplier statement audits for faster recovery and lower cost per claim. Predictive analytics generate “claim likelihood scores” to prioritize high-potential audit targets. Everything is automated through the Portal. Trigger an outbound email campaign to ask client suppliers for an account statement. The system automatically reconciles client supplier statements and flags unapplied credits for follow-up when client suppliers use our Excel template. Status is tracked in real time, so the client knows whether a client supplier statement has been requested, uploaded, and reviewed. Optionally, the client may engage the Provider’s expert professional resources to recover outstanding credits and help analyze claims to determine the root cause of errors (additional professional service fees shall apply for this optional service).
Intelligent Data
SmartVM® (“smartvm”). This solution is used to validate client suppliers’ information. It can be used as an application or an application program interface (“API”). SmartVM sends client supplier information to the SmartVM database (either through the application or an API) to validate the requested client supplier’s information. Each call to the SmartVM database and each call result is considered a “Validation.”
SmartVM® with Portal. This module uses the smartvm API to validate client suppliers’ information processed through the Portal Supplier Registration module. It works just as the SmartVM stand-alone module described above, only integrating the Validation into the Portal dashboard.
SaaS Support Services Terms
Effective September 10th 2024
DownloadTable of Contents
SaaS Support Services Terms
These SaaS Support Services Terms (“Support Terms”) shall apply if you have purchased Services that include SaaS support services. These Support Terms are in addition to and do not nullify any other agreement between you and APEX Analytix, LLC (“APEX,” “we,” or “us”). You are called a “Customer” of the APEX SaaS Support Services. Capitalized terms not defined here shall have the meaning set forth in other agreements between you and us.
General
The Customer will provide a primary contact to receive updates and maintenance notices. All data will be transmitted using one of the standard integration options provided by APEX.
As applicable, the Customer must periodically provide APEX with corresponding information in ASCII or Unicode data in APEX’s standard format from such Customer’s ERP so that the Customer Data in the SaaS can be synchronized with the Customer’s ERP System. Additional ERP or application systems requiring separate data exchanges with APEX are subject to additional fees each and will be quoted as needed.
APEX shall provide SaaS Support Services for the Service at the Customer’s request.
The Customer shall support its Authorized Users and escalate technical problems with the SaaS to APEX through its Authorized Support Contacts (defined below).
All APEX SaaS Support Services will be provided in English only.
The Customer’s Authorized Support Contacts may submit support tickets through the APEX Support Portal. APEX shall provide live technical support through telephone (US toll-free +1.877.506.2739, outside US +1.336.291.1070) and e-mail (support@apexanalytix.com) between the hours of 8 a.m. and 6 p.m. EST/EDT on business days, excluding weekends and United States holidays (“Standard Hours”), and on a 24-hour, 7-day-a-week basis for Level 1 and 2 incidents (defined below). Support outside Standard Hours for Level 3 and 4 incidents is available at APEX’s then-standard professional service rates.
Support Procedures.
When the Customer’s Authorized Support Contact submits a support request, APEX will confirm that the request has been received. Incidents that cannot be replicated or reproduced by APEX cannot be addressed until a basis for the review is established. APEX shall have no obligation to provide direct support to anyone other than the Authorized Support Contacts.
All Priority Levels apply to Services in production use only (and do not apply to any Service in user acceptance testing (“UAT”) or other environments). Level 4 – Low priority shall apply to all non-production incidents.
Priority Levels are defined as follows:
Production Enhancement Requests. Requests to enhance or modify any standard SaaS solution will be added to the enhancement request log and considered for a future roadmap release.
Response to Incidents. APEX shall use commercially reasonable efforts to resolve incidents. Responses may include temporary fixes and workarounds until a permanent solution is developed. Response to an incident may consist of one or more of the following: (1) information that corrects the error; (2) information that identifies the error as being resolved using a new or upcoming release of the application; (3) a workaround (based on the incident severity); (4) the error is caused by a known, unresolved issue or Service incompatibility issue; or (5) the incident has been identified as an issue with Third-Party Software or the Customer’s System.
Response times are as follows:
Level 1—Critical: Incidents must be addressed within four (4) hours of receiving notification of a support request. APEX shall communicate hourly status reports.
Level 2 – High: Incidents within ten (10) hours of receipt of notification of a support request. APEX will communicate hourly status reports.
Level 3—Medium: Incidents within five (5) days of receiving notification of a support request, excluding weekends and holidays. APEX shall communicate daily status reports.
Level 4—Low: Incidents will be addressed in the next maintenance release. APEX will communicate weekly status reports.
Exclusions. SaaS Support Services do not include: (i) support for malfunctions of any Third-Party Software not supplied or maintained by APEX; (ii) problems caused by negligent or improper use, accident, neglect, or misuse by Customer, Authorized Users or third parties; (iii) operational errors which are the result of Customer’s System, third-party operating systems, device drivers, cabling, cabling services, peripherals and other products and services necessary to access and use the SaaS not provided by APEX, as well as any failure or fluctuations in electrical power; (iv) failure of Customer to fulfill its obligations under its written agreements with APEX; (v) faults due to Customer and its Authorized User’s use of the Service in a manner inconsistent with the Documentation; (vi) any use by Customer and its Authorized Users of a non-current release of the SaaS; (vii) incidents arising from a Force Majeure Event; (viii) resolution of Level 3 and 4 incidents outside of Standard Hours; or (ix) other non-APEX incidents which impair the functionality of the SaaS and which are the result of actions or negligence by Customer, its Authorized Users, or any System Implementer. Correction of a problem or error traceable to the Customer, an Authorized User, or any System Implementer will be billed at APEX’s then-standard professional services rates.
Customer shall provide APEX with, as requested, data dumps and sufficient support and test time on the Customer’s System to duplicate the problem, certify that the problem is due to and with the SaaS, and certify that the issue has been corrected. Under APEX’s supervision and direction, the Customer shall provide reasonable assistance in taking those actions required to diagnose and remedy the cause of incidents reported to APEX. Reasonable assistance may include but is not limited to personnel, resources, and access to the Customer’s System (but only to the extent necessary) to help resolve a reported incident.
Required for clients using SAP transport for integration with apexanalytix Portal. The Customer shall install and maintain a remote connection capability for APEX for the duration of the SaaS Support Term. The Customer shall pay for installation, maintenance, and use of such remote connection capability and related communications charges. APEX, at its option, may use this remote connection capability to provide the Customer with support. Such access by APEX shall be subject to prior approval by the Customer in each instance.
Term
The term of APEX’s obligation to deliver SaaS Support Services shall correspond to the Term specified in the applicable Order.
SaaS Service Levels
SaaS Availability. The SaaS will achieve the Availability set forth below (Availability Calculation) during each calendar month of the Term within APEX’s Direct Control (defined below). “Availability” (or “Available”) means the average percentage of total time during which the SaaS is available to the Customer during a calendar month, excluding (i) any maintenance windows (set forth below); (ii) delays due to Force Majeure Events; (iii) delays caused by Systems outside of the SaaS, including, but not limited to, Customer’s, Authorized Users’ or a third-party’s network, and Systems, or issues with Customer Content; (iv) micro outages (meaning inaccessibility that lasts less than fifteen (15) minutes, provided that there are no more than three (3) micro outages within a calendar month); and (v) inaccessibility, unavailability or functionality failures that the Customer configured. APEX’s “reasonable control” includes network services to the Internet provider circuit termination point on the router in APEX’s data center (i.e., public Internet connectivity) and all software applications provided by APEX. “Direct Control” means all of the following components: (A) network services to the Internet provider circuit termination point on the router in APEX’s data center (i.e., public internet connectivity); and (B) all hardware and software applications (including the software capabilities provided according to the SaaS) provided by APEX.
Availability Calculation. The Availability percentage shall be calculated as follows:
n
Where “x” is the actual availability percentage of the SaaS in each calendar month, “n” is the total number of hours in each calendar month, and “y” is the total number of hours service is not Available in each calendar month. The calculation of “x” shall be prorated in any month in which the SaaS commences on any day other than the first day of the month. Availability for the SaaS shall be ninety-nine percent (99.0%).
SaaS Availability Credits. Should the SaaS fail to achieve the Availability over a calendar month, as verified by APEX, then the Customer shall have the right to receive a credit equal to one percent (1%) of its SaaS Fee for the SaaS for that month for each one percent (1%) (or portion thereof) by which APEX fails to achieve such level, up to a maximum of ten percent (10%) of the SaaS Fee for such month. Claims under this warranty must be made in good faith by submitting a support case within ten (10) business days after the end of the relevant month. SaaS Availability Credits shall be applied as a credit to the next invoice issued to Customer unless such SaaS Availability Credits would be due at the end of the Term, in which case the Customer shall be provided a refund within 30 days of the termination date for the applicable SaaS. The Parties intend that the SaaS Availability Credits constitute compensation to the Customer, not a penalty. The Parties acknowledge and agree that the Customer’s harm caused by APEX’s failure to meet the Availability would be impossible or very difficult to estimate and that the SaaS Availability Credits are a reasonable estimate for the anticipated or actual harm that might arise from APEX’s breach of the Availability in any given month during the Term. The remedy in this Section is the sole, non-cumulative, and exclusive remedy for failure to achieve Availability over any given calendar month during the Term.
The window during which scheduled maintenance or upgrades may be performed is from Friday at 10:00 p.m. to Monday at 6 a.m. EST and does not include any maintenance for Emergency Outages (defined below) (“Scheduled Maintenance Window”). Outages, whether scheduled maintenance, upgrades, or Emergency Outages, are not included in the Availability. To the extent that maintenance is required other than during the Scheduled Maintenance Window, APEX will attempt to perform that maintenance from 10:00 p.m. to 6:00 a.m. ET. Except for critical security fixes to address worldwide cyberattacks or other malicious activity for which remedies just became available and which require remediation on an emergency basis (“Emergency Outages”), APEX will provide thirty (30) days’ notice via the SaaS or APEX’s website. APEX may change its Scheduled Maintenance Windows upon reasonable prior written notice to the Customer. During each Scheduled Maintenance Window, APEX may take down the server(s) on which the SaaS runs in order for APEX to conduct routine maintenance checks.
All customers will be on the latest application release version. All releases are approved by APEX’s change management board only. Customers will be notified with pre-release notes at least two (2) weeks before a production release upgrade or update. After the production release upgrade or update, APEX will provide supporting Documentation.
Sustainability/ESG API Terms of Use
Effective October 25th 2024
DownloadTable of Contents
Sustainability/ESG API Terms of Use
These Sustainability/ESG API terms of use (“API Terms”) define the terms that apply when you use, contact, or interact with our application programming interface (“API”) and form a binding contract between you and us. These API Terms do not apply to your use of any of our software, website, applications, application plug-ins, solutions, or other APEX services (“Services”). Your use of APEX Services is subject to a separate End-User Services Agreement.
Who We Are and How to Contact Us:
APEX Analytix, LLC, a Delaware limited liability company with a corporate headquarters located at 1501 Highwoods Boulevard, Suite 200, Greensboro, NC 27410, USA. Our website is www.apexanalytix.com. APEX Analytix, LLC, is referred to herein as “we” or “us.”
“You” and “your” refer to the individual, company, or other legal entity on behalf of which the APIs are used.
If you are using the APIs on behalf of a company or other legal entity, you represent that you have the authority to bind such entity to these API Terms. If you do not have such authority or do not agree with these terms, you must not use the APIs.
Acceptance of Terms
Using our API, you confirm that you accept these API Terms and agree to comply. If you disagree with these API Terms, you must not use our API. We may amend these API Terms from time to time without notice. Please check the apexanalytix Legal Center for the most updated version of these API Terms.
Restrictions on Use
When using or attempting to use the APIs, you agree:
- To adhere to any applicable guidelines, restrictions, or requirements set forth in any API documentation;
- Not to share any API keys or authentication tokens with any other individuals, companies, or entities outside of your own (each a “third party”), including our potential competitors, and to keep these secure at all times;
- Not to mask or misrepresent your identity or your systems’ identity;
- Not to remove any proprietary notices or intellectual property from the APIs;
- That to protect the security, integrity, and operability of the APIs, we may place limits on your use of the APIs (e.g. call limits), and you accept that: (i) we determine in our sole discretion what constitutes abuse or excess use or exploitation; (ii) you will not use or attempt to use the APIs in a manner that exceeds the limitations; and (iii) we may monitor the volume of requests or calls send to the APIs for compliance with these API Terms;
- Not use the APIs in a manner that poses a security risk to other users of the APIs or APEX Services or tests the vulnerability of our systems or networks or those of any third party;
- Not to use the APIs in any manner that compromises, breaks, or circumvents any of our technical processes or security measures associated with the APIs or Services;
- Not to use the APIs for competitive analysis or to disseminate performance information relating to the APIs or Services;
- Not to modify, translate, reverse engineer, disassemble, reconstruct, decompile, copy, or create derivative works of the APIs, any APEX Services, any data, or any portion thereof to compete with us;
- Not to replicate, copy, frame, mimic, mirror, or compete with aspects of the APIs or their functionality, or to develop or utilize an application or integration to compete with us;
- Not to use the APIs in any manner or for any purpose that infringes, misappropriates, or otherwise violates the intellectual property or other rights of us or any third parties;
- To only use the API to embed our data or data provided to you through our API into your own solutions for your internal business purposes and not for any other commercial purposes;
- Not to license, distribute, lease, give, sell, rent, timeshare, sublicense, disclose, publish, assign, market, transfer, or distribute any API portion to any third party.
Prohibited Uses
You may use our API only for lawful purposes. You may not use our API: (a) in any way that breaches any applicable local, national, or international law or regulation; (b) in any way that is unlawful or fraudulent or has any unlawful or fraudulent purpose or effect; (c) to transmit, or procure the sending of, any unsolicited or unauthorized advertising or promotional material or any other form of similar solicitation (spam); or (d) to knowingly transmit any data, send or upload any material that contains viruses, Trojan horses, worms, time-bombs, keystroke loggers, spyware, adware, or any other harmful programs or similar computer code designed to affect the operation of any computer software or hardware adversely.
Consequences of Misuse
Without prejudice to any other rights we may have, in the event of your failure to adhere to the restrictions on use or prohibited uses set out above or any other failure to comply with the API Terms, you shall be responsible for and shall indemnify us against all costs, losses, liabilities, damages, claims, and expenses suffered or incurred by us or any of our affiliates, subsidiaries, officers, directors, employees, suppliers, consultants, and agents, arising directly or indirectly out of or connected to your breach, including but not limited to any of the aforesaid costs, losses, liabilities, damages, claims, and expenses relating to damage to or destruction or corruption of data.
We shall be entitled (without notice) to suspend, modify, restrict, or otherwise limit your use of the API. We may monitor your API use to verify compliance with these API Terms. You shall permit us and/or our representatives to perform an audit and/or verification of your use of the API and to inspect and access your premises and/or systems or information as reasonably required by us in connection with your use of the API.
Processing of Personal Data
Any personal data related to your use of the APIs will be processed according to APEX’s Privacy Policy, which can be found at https://legal.apexanalytix.com/privacy-policy.
Export
The APIs are subject to US global trade control laws and regulations, including the U.S. Export Administration Regulations and various sanctions programs administered by the U.S. Office of Foreign Assets Control. You will not, directly or indirectly, export, re-export, release, or make the APIs available for use in contravention of these laws and regulations.
Warranty
To the fullest extent permitted by law, the API is provided and made available “as is” without any warranties of any kind. We disclaim any implied warranties, including, without limitation, any implied warranty of merchantability or fitness for a particular purpose.
Term and Termination
These API Terms shall remain in effect until termination. You may terminate these API Terms anytime by ceasing all use of the APIs and any relevant keys or tokens. Unless you purchased the APIs for a predetermined period, we reserve the right to terminate these APIs or these API Terms immediately at any time without further obligation to you.
All rights and licenses granted herein shall expire upon termination, and you must stop using the APIs. The provisions of these API Terms that by their nature would survive shall continue to apply.
Modification
We reserve the right (without liability to you or any other person) to modify, amend, alter, or otherwise deal with the API in any manner, and we do not guarantee that it will continue to be available for use.
Governing Law
This Agreement shall be governed by the laws of the state of North Carolina, without giving effect to its choice of law principles, and in accordance with applicable federal laws of the United States.
Severability
If a court of competent jurisdiction holds any provision of these API Terms unenforceable, the court shall modify it and interpret it to best accomplish the original provision to the fullest extent permitted by law, and the remaining provisions of these API Terms shall remain in effect.
Effective September 27th 2024 to October 25th 2024
DownloadTable of Contents
Sustainability/ESG API Terms of Use
These Sustainability/ESG API terms of use (“API Terms”) define the terms that apply when you use, contact, or interact with our application programming interface (“API”) and form a binding contract between you and us. These API Terms do not apply to your use of any of our software, website, applications, application plug-ins, solutions, or other APEX services (“Services”). Your use of APEX Services is subject to a separate End-User Services Agreement.
Who We Are and How to Contact Us:
APEX Analytix, LLC, a Delaware limited liability company with a corporate headquarters located at 1501 Highwoods Boulevard, Suite 200, Greensboro, NC 27410, USA. Our website is www.apexanalytix.com. APEX Analytix, LLC, is referred to herein as “we” or “us.”
“You” and “your” refer to the individual, company, or other legal entity on behalf of which the APIs are used.
If you are using the APIs on behalf of a company or other legal entity, you represent that you have the authority to bind such entity to these API Terms. If you do not have such authority or do not agree with these terms, you must not use the APIs.
Acceptance of Terms
Using our API, you confirm that you accept these API Terms and agree to comply. If you disagree with these API Terms, you must not use our API. We may amend these API Terms from time to time without notice. Please check the apexanalytix Legal Center for the most updated version of these API Terms.
Restrictions on Use
When using or attempting to use the APIs, you agree:
- To adhere to any applicable guidelines, restrictions, or requirements set forth in any API documentation;
- Not to share any API keys or authentication tokens with any other individuals, companies, or entities outside of your own (each a “third party”), including our potential competitors, and to keep these secure at all times;
- Not to mask or misrepresent your identity or your systems’ identity;
- Not to remove any proprietary notices or intellectual property from the APIs;
- That to protect the security, integrity, and operability of the APIs, we may place limits on your use of the APIs (e.g. call limits), and you accept that: (i) we determine in our sole discretion what constitutes abuse or excess use or exploitation; (ii) you will not use or attempt to use the APIs in a manner that exceeds the limitations; and (iii) we may monitor the volume of requests or calls send to the APIs for compliance with these API Terms;
- Not use the APIs in a manner that poses a security risk to other users of the APIs or APEX Services or tests the vulnerability of our systems or networks or those of any third party;
- Not to use the APIs in any manner that compromises, breaks, or circumvents any of our technical processes or security measures associated with the APIs or Services;
- Not to use the APIs for competitive analysis or to disseminate performance information relating to the APIs or Services;
- Not to modify, translate, reverse engineer, disassemble, reconstruct, decompile, copy, or create derivative works of the APIs, any APEX Services, any data, or any portion thereof to compete with us;
- Not to replicate, copy, frame, mimic, mirror, or compete with aspects of the APIs or their functionality, or to develop or utilize an application or integration to compete with us;
- Not to use the APIs in any manner or for any purpose that infringes, misappropriates, or otherwise violates the intellectual property or other rights of us or any third parties;
- To only use the API to embed our data or data provided to you through our API into your own solutions for your internal business purposes and not for any other commercial purposes;
- Not to license, distribute, lease, give, sell, rent, timeshare, sublicense, disclose, publish, assign, market, transfer, or distribute any API portion to any third party.
Prohibited Uses
You may use our API only for lawful purposes. You may not use our API: (a) in any way that breaches any applicable local, national, or international law or regulation; (b) in any way that is unlawful or fraudulent or has any unlawful or fraudulent purpose or effect; (c) to transmit, or procure the sending of, any unsolicited or unauthorized advertising or promotional material or any other form of similar solicitation (spam); or (d) to knowingly transmit any data, send or upload any material that contains viruses, Trojan horses, worms, time-bombs, keystroke loggers, spyware, adware, or any other harmful programs or similar computer code designed to affect the operation of any computer software or hardware adversely.
Consequences of Misuse
Without prejudice to any other rights we may have, in the event of your failure to adhere to the restrictions on use or prohibited uses set out above or any other failure to comply with the API Terms, you shall be responsible for and shall indemnify us against all costs, losses, liabilities, damages, claims, and expenses suffered or incurred by us or any of our affiliates, subsidiaries, officers, directors, employees, suppliers, consultants, and agents, arising directly or indirectly out of or connected to your breach, including but not limited to any of the aforesaid costs, losses, liabilities, damages, claims, and expenses relating to damage to or destruction or corruption of data.
We shall be entitled (without notice) to suspend, modify, restrict, or otherwise limit your use of the API. We may monitor your API use to verify compliance with these API Terms. You shall permit us and/or our representatives to perform an audit and/or verification of your use of the API and to inspect and access your premises and/or systems or information as reasonably required by us in connection with your use of the API.
Processing of Personal Data
Any personal data related to your use of the APIs will be processed according to APEX’s Privacy Policy, which can be found at https://legal.apexanalytix.com/privacy-policy.
Export
The APIs are subject to US global trade control laws and regulations, including the U.S. Export Administration Regulations and various sanctions programs administered by the U.S. Office of Foreign Assets Control. You will not, directly or indirectly, export, re-export, release, or make the APIs available for use in contravention of these laws and regulations.
Warranty
To the fullest extent permitted by law, the API is provided and made available “as is” without any warranties of any kind. We disclaim any implied warranties, including, without limitation, any implied warranty of merchantability or fitness for a particular purpose.
Term and Termination
These API Terms shall remain in effect until termination. You may terminate these API Terms anytime by ceasing all use of the APIs and any relevant keys or tokens. Unless you purchased the APIs for a predetermined period, we reserve the right to terminate these APIs or these API Terms immediately at any time without further obligation to you.
All rights and licenses granted herein shall expire upon termination, and you must stop using the APIs. The provisions of these API Terms that by their nature would survive shall continue to apply.
Modification
We reserve the right (without liability to you or any other person) to modify, amend, alter, or otherwise deal with the API in any manner, and we do not guarantee that it will continue to be available for use.
Governing Law
This Agreement shall be governed by the laws of the state of North Carolina, without giving effect to its choice of law principles, and in accordance with applicable federal laws of the United States.
Severability
If a court of competent jurisdiction holds any provision of these API Terms unenforceable, the court shall modify it and interpret it to best accomplish the original provision to the fullest extent permitted by law, and the remaining provisions of these API Terms shall remain in effect.
Effective September 27th 2024 to September 27th 2024
DownloadTable of Contents
Sustainability/ESG API Terms of Use
These Sustainability/ESG API terms of use (“API Terms”) define the terms that apply when you use, contact, or interact with our application programming interface (“API”) and form a binding contract between you and us. These API Terms do not apply to your use of any of our software, website, applications, application plug-ins, solutions, or other APEX services (“Services”). Your use of APEX Services is subject to a separate End-User Services Agreement.
Who We Are and How to Contact Us:
APEX Analytix, LLC, a Delaware limited liability company with a corporate headquarters located at 1501 Highwoods Boulevard, Suite 200, Greensboro, NC 27410, USA. Our website is www.apexanalytix.com. APEX Analytix, LLC, is referred to herein as “we” or “us.”
“You” and “your” refer to the individual, company, or other legal entity on behalf of which the APIs are used.
If you are using the APIs on behalf of a company or other legal entity, you represent that you have the authority to bind such entity to these API Terms. If you do not have such authority or do not agree with these terms, you must not use the APIs.
Acceptance of Terms
Using our API, you confirm that you accept these API Terms and agree to comply. If you disagree with these API Terms, you must not use our API. We may amend these API Terms from time to time without notice. Please check the apexanalytix Legal Center for the most updated version of these API Terms.
Restrictions on Use
When using or attempting to use the APIs, you agree:
- To adhere to any applicable guidelines, restrictions, or requirements set forth in any API documentation;
- Not to share any API keys or authentication tokens with any other individuals, companies, or entities outside of your own (each a “third party”), including our potential competitors, and to keep these secure at all times;
- Not to mask or misrepresent your identity or your systems’ identity;
- Not to remove any proprietary notices or intellectual property from the APIs;
- That to protect the security, integrity, and operability of the APIs, we may place limits on your use of the APIs (e.g. call limits), and you accept that: (i) we determine in our sole discretion what constitutes abuse or excess use or exploitation; (ii) you will not use or attempt to use the APIs in a manner that exceeds the limitations; and (iii) we may monitor the volume of requests or calls send to the APIs for compliance with these API Terms;
- Not use the APIs in a manner that poses a security risk to other users of the APIs or APEX Services or tests the vulnerability of our systems or networks or those of any third party;
- Not to use the APIs in any manner that compromises, breaks, or circumvents any of our technical processes or security measures associated with the APIs or Services;
- Not to use the APIs for competitive analysis or to disseminate performance information relating to the APIs or Services;
- Not to modify, translate, reverse engineer, disassemble, reconstruct, decompile, copy, or create derivative works of the APIs, any APEX Services, any data, or any portion thereof to compete with us;
- Not to replicate, copy, frame, mimic, mirror, or compete with aspects of the APIs or their functionality, or to develop or utilize an application or integration to compete with us;
- Not to use the APIs in any manner or for any purpose that infringes, misappropriates, or otherwise violates the intellectual property or other rights of us or any third parties;
- To only use the API to embed our data or data provided to you through our API into your own solutions for your internal business purposes and not for any other commercial purposes;
- Not to license, distribute, lease, give, sell, rent, timeshare, sublicense, disclose, publish, assign, market, transfer, or distribute any API portion to any third party.
Prohibited Uses
You may use our API only for lawful purposes. You may not use our API: (a) in any way that breaches any applicable local, national, or international law or regulation; (b) in any way that is unlawful or fraudulent or has any unlawful or fraudulent purpose or effect; (c) to transmit, or procure the sending of, any unsolicited or unauthorized advertising or promotional material or any other form of similar solicitation (spam); or (d) to knowingly transmit any data, send or upload any material that contains viruses, Trojan horses, worms, time-bombs, keystroke loggers, spyware, adware, or any other harmful programs or similar computer code designed to affect the operation of any computer software or hardware adversely.
Consequences of Misuse
Without prejudice to any other rights we may have, in the event of your failure to adhere to the restrictions on use or prohibited uses set out above or any other failure to comply with the API Terms, you shall be responsible for and shall indemnify us against all costs, losses, liabilities, damages, claims, and expenses suffered or incurred by us or any of our affiliates, subsidiaries, officers, directors, employees, suppliers, consultants, and agents, arising directly or indirectly out of or connected to your breach, including but not limited to any of the aforesaid costs, losses, liabilities, damages, claims, and expenses relating to damage to or destruction or corruption of data.
We shall be entitled (without notice) to suspend, modify, restrict, or otherwise limit your use of the API. We may monitor your API use to verify compliance with these API Terms. You shall permit us and/or our representatives to perform an audit and/or verification of your use of the API and to inspect and access your premises and/or systems or information as reasonably required by us in connection with your use of the API.
Processing of Personal Data
Any personal data related to your use of the APIs will be processed according to APEX’s Privacy Policy, which can be found at https://legal.apexanalytix.com/privacy-policy.
Export
The APIs are subject to US global trade control laws and regulations, including the U.S. Export Administration Regulations and various sanctions programs administered by the U.S. Office of Foreign Assets Control. You will not, directly or indirectly, export, re-export, release, or make the APIs available for use in contravention of these laws and regulations.
Warranty
To the fullest extent permitted by law, the API is provided and made available “as is” without any warranties of any kind. We disclaim any implied warranties, including, without limitation, any implied warranty of merchantability or fitness for a particular purpose.
Term and Termination
These API Terms shall remain in effect until termination. You may terminate these API Terms anytime by ceasing all use of the APIs and any relevant keys or tokens. Unless you purchased the APIs for a predetermined period, we reserve the right to terminate these APIs or these API Terms immediately at any time without further obligation to you.
All rights and licenses granted herein shall expire upon termination, and you must stop using the APIs. The provisions of these API Terms that by their nature would survive shall continue to apply.
Modification
We reserve the right (without liability to you or any other person) to modify, amend, alter, or otherwise deal with the API in any manner, and we do not guarantee that it will continue to be available for use.
Governing Law
This Agreement shall be governed by the laws of the state of North Carolina, without giving effect to its choice of law principles, and in accordance with applicable federal laws of the United States.
Severability
If a court of competent jurisdiction holds any provision of these API Terms unenforceable, the court shall modify it and interpret it to best accomplish the original provision to the fullest extent permitted by law, and the remaining provisions of these API Terms shall remain in effect.
smartvm API Terms of Use
Effective November 20th 2024
DownloadTable of Contents
smartvm API Terms of Use
These smartvm API terms of use (“API Terms”) define the terms that apply when you use, contact, or interact with our smartvm application programming interface (“API”) and form a binding contract between you and us. These API Terms do not apply to your use of any of our software, website, applications, application plug-ins, solutions, or other APEX services (“Services”). Your use of APEX Services is subject to a separate End-User Services Agreement. If additional terms apply to an application which uses the smartvm API, to include but not limited to a SaaS Agreement, an End User Services Agreement, or any other agreement (“Additional Terms”), both these API Terms and the Additional Terms shall apply. If a conflict arises between the API Terms, the Additional Terms will prevail with respect to such conflicting terms only.
As used in these API Terms, smartvm API means any form of machine accessible application programming interface that provides access to an APEX service and any associated tools, including sample code that enables interactions with APEX’s services, and documentation that APEX makes available under these API Terms, and includes all elements, components and executables of such API; this may expressly include APEX ArchimedesTM an advanced cognitive technology system with machine learning and IBM Watson® (a registered trademark of IBM Corporation), robotic process automation, as well as third-party data sources. The output or results of the smartvm API shall be known as a “smartvm Validation” and shall include all selected attributes for validation and enrichment within a smartvm Data Lookup.
Who We Are and How to Contact Us:
APEX Analytix, LLC, a Delaware limited liability company with a corporate headquarters located at 1501 Highwoods Boulevard, Suite 200, Greensboro, NC 27410, USA. Our website is www.apexanalytix.com. APEX Analytix, LLC, is referred to herein as “APEX,” “we,” “our,” or “us.”
“You” and “your,” refer to the individual, company, or other legal entity on behalf of which the APIs are used.
If you are using the APIs on behalf of a company or other legal entity, you represent that you have the authority to bind such entity to these API Terms. If you do not have such authority or do not agree with these terms, you must not use the APIs.
Acceptance of Terms
Using our API, you confirm that you accept these API Terms and agree to comply. If you disagree with these API Terms, you must not use our API. We may amend these API Terms from time to time without notice. Please check the apexanalytix Legal Center for the most updated version of these API Terms.
smartvm API License
Subject to your compliance with these API Terms, we grant you a limited, non-exclusive, non-sublicensable, non-transferable, non-assignable, revocable license to install, use and make calls to the smartvm API, and to use the smartvm Validation for your own internal business purposes.
The smartvm Validation may be uploaded as data to your existing enterprise resource planning (“ERP”) system subject to the license terms with your ERP provider, and in no way does this license grant you a right to redistribute the smartvm Validation to your ERP provider or any third-party.
Grant of License to Data Processed through the smartvm API
You hereby grant to us a non-exclusive, non-transferable license to use, upload, display, copy and store your data for the purpose of delivering the smartvm Validation pursuant to these API Terms. You agree you shall have sole responsibility and liability for acquiring any and all authorization(s) necessary for use of your data as contemplated by these API Terms; and, ensuring that your data does not infringe or violate any patents, copyrights, trademarks, privacy rights and/or other intellectual property or proprietary rights, or misappropriate the trade secrets of any third-party.
APEX may aggregate data uploaded to the smartvm API by you with data uploaded to the smartvm API by our other clients, analyze data uploaded and use such data to create and provide analysis, reports, derivative statistics and other products and services based on the foregoing, provided that no such product or service distributed to third-parties by APEX shall identify you as the source of data used in preparing such product or service. Further, you acknowledge that data uploaded through the smartvm API may be used by APEX for its own purposes and analyzed in derivative works as part of APEX’s business where that data is also public information or has been gathered, derived or developed by APEX independent of the services provided to you hereunder.
Restrictions on Use
When using or attempting to use the APIs, you agree:
- To adhere to any applicable guidelines, restrictions, or requirements set forth in any API documentation;
- Not to share any API keys or authentication tokens with any other individuals, companies, or entities outside of your own (each a “third party”), including our potential competitors, and to keep these secure at all times;
- Not to mask or misrepresent your identity or your systems’ identity;
- Not to remove any proprietary notices or intellectual property from the APIs;
- That to protect the security, integrity, and operability of the APIs, we may place limits on your use of the APIs (e.g. call limits), and you accept that: (i) we determine in our sole discretion what constitutes abuse or excess use or exploitation; (ii) you will not use or attempt to use the APIs in a manner that exceeds the limitations; and (iii) we may monitor the volume of requests or calls send to the APIs for compliance with these API Terms;
- Not use the APIs in a manner that poses a security risk to other users of the APIs or APEX Services or tests the vulnerability of our systems or networks or those of any third party;
- Not to use the APIs in any manner that compromises, breaks, or circumvents any of our technical processes or security measures associated with the APIs or Services;
- Not to use the APIs for competitive analysis or to disseminate performance information relating to the APIs or Services;
- Not to modify, translate, reverse engineer, disassemble, reconstruct, decompile, copy, or create derivative works of the APIs, any APEX Services, any data, or any portion thereof to compete with us;
- Not to replicate, copy, frame, mimic, mirror, or compete with aspects of the APIs or their functionality, or to develop or utilize an application or integration to compete with us;
- Not to use the APIs in any manner or for any purpose that infringes, misappropriates, or otherwise violates the intellectual property or other rights of us or any third parties;
- To only use the API to embed our data or data provided to you through our API into your own solutions for your internal business purposes and not for any other commercial purposes;
- Not to license, distribute, lease, give, sell, rent, timeshare, sublicense, disclose, publish, assign, market, transfer, or distribute any API portion to any third party.
Prohibited Uses
You may use our API only for lawful purposes. You may not use our API: (a) in any way that breaches any applicable local, national, or international law or regulation; (b) in any way that is unlawful or fraudulent or has any unlawful or fraudulent purpose or effect; (c) to transmit, or procure the sending of, any unsolicited or unauthorized advertising or promotional material or any other form of similar solicitation (spam); or (d) to knowingly transmit any data, send or upload any material that contains viruses, Trojan horses, worms, time-bombs, keystroke loggers, spyware, adware, or any other harmful programs or similar computer code designed to affect the operation of any computer software or hardware adversely.
Consequences of Misuse
Without prejudice to any other rights we may have, in the event of your failure to adhere to the restrictions on use or prohibited uses set out above or any other failure to comply with the API Terms, you shall be responsible for and shall indemnify us against all costs, losses, liabilities, damages, claims, and expenses suffered or incurred by us or any of our affiliates, subsidiaries, officers, directors, employees, suppliers, consultants, and agents, arising directly or indirectly out of or connected to your breach, including but not limited to any of the aforesaid costs, losses, liabilities, damages, claims, and expenses relating to damage to or destruction or corruption of data.
We shall be entitled (without notice) to suspend, modify, restrict, or otherwise limit your use of the API. We may monitor your API use to verify compliance with these API Terms. You shall permit us and/or our representatives to perform an audit and/or verification of your use of the API and to inspect and access your premises and/or systems or information as reasonably required by us in connection with your use of the API.
Processing of Personal Data
Any personal data related to your use of the APIs will be processed according to APEX’s Privacy Policy, which can be found at https://legal.apexanalytix.com/privacy-policy.
Export
The APIs are subject to US global trade control laws and regulations, including the U.S. Export Administration Regulations and various sanctions programs administered by the U.S. Office of Foreign Assets Control. You will not, directly or indirectly, export, re-export, release, or make the APIs available for use in contravention of these laws and regulations.
Warranty
Your use of the smartvm API is at your own discretion and risk, and you will be solely responsible for any damage that results from the use of any smartvm APIs including, but not limited to any damage to your computer system or loss of your data.
YOU ACKNOWLEDGE AND AGREE THAT THE SMARTVM API IS PROVIDED “AS IS” AND “AS AVAILABLE,” AND WITHOUT WARRANTY OF ANY KIND, AND ALL OTHER WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, REGARDING ANY MATTER, INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY, SUITABILITY, FITNESS FOR A PARTICULAR USE OR PURPOSE, OR NONINFRINGEMENT ARE DISCLAIMED. YOU MAY HAVE CERTAIN RIGHTS UNDER YOUR LOCAL LAW, NOTHING IN THESE TERMS ARE INTENDED TO AFFECT THOSE RIGHTS, IF APPLICABLE. WITHOUT LIMITING THE FOREGOING, APEX DOES NOT WARRANT AGAINST THE LOSS OF DATA OR THAT THE SMARTVM API WILL BE UNINTERRUPTED, FREE FROM ERRORS OR DEFECTS, OR PROVIDED WITHOUT DELAY, OR THAT ERRORS OR DEFECTS ARE CAPABLE OF BEING CORRECTED.
Term and Termination
These API Terms shall remain in effect until termination. You may terminate these API Terms anytime by ceasing all use of the APIs and any relevant keys or tokens. Unless you purchased the APIs for a predetermined period, we reserve the right to terminate these APIs or these API Terms immediately at any time without further obligation to you.
All rights and licenses granted herein shall expire upon termination, and you must stop using the APIs. The provisions of these API Terms that by their nature would survive shall continue to apply.
Modification
We reserve the right (without liability to you or any other person) to modify, amend, alter, or otherwise deal with the API in any manner, and we do not guarantee that it will continue to be available for use.
Governing Law
This Agreement shall be governed by the laws of the state of North Carolina, without giving effect to its choice of law principles, and in accordance with applicable federal laws of the United States.
Severability
If a court of competent jurisdiction holds any provision of these API Terms unenforceable, the court shall modify it and interpret it to best accomplish the original provision to the fullest extent permitted by law, and the remaining provisions of these API Terms shall remain in effect.
Effective October 25th 2024 to November 20th 2024
DownloadTable of Contents
smartvm API Terms of Use
These smartvm API terms of use (“API Terms”) define the terms that apply when you use, contact, or interact with our smartvm application programming interface (“API”) and form a binding contract between you and us. These API Terms do not apply to your use of any of our software, website, applications, application plug-ins, solutions, or other APEX services (“Services”). Your use of APEX Services is subject to a separate End-User Services Agreement. If additional terms apply to an application which uses the smartvm API, to include but not limited to a SaaS Agreement, an End User Services Agreement, or any other agreement (“Additional Terms”), both these API Terms and the Additional Terms shall apply. If a conflict arises between the API Terms, the Additional Terms will prevail with respect to such conflicting terms only.
As used in these API Terms, smartvm API means any form of machine accessible application programming interface that provides access to an APEX service and any associated tools, including sample code that enables interactions with APEX’s services, and documentation that APEX makes available under these API Terms, and includes all elements, components and executables of such API; this may expressly include APEX ArchimedesTM an advanced cognitive technology system with machine learning and IBM Watson® (a registered trademark of IBM Corporation), robotic process automation, as well as third-party data sources. The output or results of the smartvm API shall be known as a “smartvm Validation” and shall include all selected attributes for validation and enrichment within a smartvm Data Lookup.
Who We Are and How to Contact Us:
APEX Analytix, LLC, a Delaware limited liability company with a corporate headquarters located at 1501 Highwoods Boulevard, Suite 200, Greensboro, NC 27410, USA. Our website is www.apexanalytix.com. APEX Analytix, LLC, is referred to herein as “APEX,” “we,” “our,” or “us.”
“You” and “your,” refer to the individual, company, or other legal entity on behalf of which the APIs are used.
If you are using the APIs on behalf of a company or other legal entity, you represent that you have the authority to bind such entity to these API Terms. If you do not have such authority or do not agree with these terms, you must not use the APIs.
Acceptance of Terms
Using our API, you confirm that you accept these API Terms and agree to comply. If you disagree with these API Terms, you must not use our API. We may amend these API Terms from time to time without notice. Please check the apexanalytix Legal Center for the most updated version of these API Terms.
smartvm API License
Subject to your compliance with these API Terms, we grant you a limited, non-exclusive, non-sublicensable, non-transferable, non-assignable, revocable license to install, use and make calls to the smartvm API, and to use the smartvm Validation for your own internal business purposes.
The smartvm Validation may be uploaded as data to your existing enterprise resource planning (“ERP”) system subject to the license terms with your ERP provider, and in no way does this license grant you a right to redistribute the smartvm Validation to your ERP provider or any third-party.
Grant of License to Data Processed through the smartvm API
You hereby grant to us a non-exclusive, non-transferable license to use, upload, display, copy and store your data for the purpose of delivering the smartvm Validation pursuant to these API Terms. You agree you shall have sole responsibility and liability for acquiring any and all authorization(s) necessary for use of your data as contemplated by these API Terms; and, ensuring that your data does not infringe or violate any patents, copyrights, trademarks, privacy rights and/or other intellectual property or proprietary rights, or misappropriate the trade secrets of any third-party.
APEX may aggregate data uploaded to the smartvm API by you with data uploaded to the smartvm API by our other clients, analyze data uploaded and use such data to create and provide analysis, reports, derivative statistics and other products and services based on the foregoing, provided that no such product or service distributed to third-parties by APEX shall identify you as the source of data used in preparing such product or service. Further, you acknowledge that data uploaded through the smartvm API may be used by APEX for its own purposes and analyzed in derivative works as part of APEX’s business where that data is also public information or has been gathered, derived or developed by APEX independent of the services provided to you hereunder.
Restrictions on Use
When using or attempting to use the APIs, you agree:
- To adhere to any applicable guidelines, restrictions, or requirements set forth in any API documentation;
- Not to share any API keys or authentication tokens with any other individuals, companies, or entities outside of your own (each a “third party”), including our potential competitors, and to keep these secure at all times;
- Not to mask or misrepresent your identity or your systems’ identity;
- Not to remove any proprietary notices or intellectual property from the APIs;
- That to protect the security, integrity, and operability of the APIs, we may place limits on your use of the APIs (e.g. call limits), and you accept that: (i) we determine in our sole discretion what constitutes abuse or excess use or exploitation; (ii) you will not use or attempt to use the APIs in a manner that exceeds the limitations; and (iii) we may monitor the volume of requests or calls send to the APIs for compliance with these API Terms;
- Not use the APIs in a manner that poses a security risk to other users of the APIs or APEX Services or tests the vulnerability of our systems or networks or those of any third party;
- Not to use the APIs in any manner that compromises, breaks, or circumvents any of our technical processes or security measures associated with the APIs or Services;
- Not to use the APIs for competitive analysis or to disseminate performance information relating to the APIs or Services;
- Not to modify, translate, reverse engineer, disassemble, reconstruct, decompile, copy, or create derivative works of the APIs, any APEX Services, any data, or any portion thereof to compete with us;
- Not to replicate, copy, frame, mimic, mirror, or compete with aspects of the APIs or their functionality, or to develop or utilize an application or integration to compete with us;
- Not to use the APIs in any manner or for any purpose that infringes, misappropriates, or otherwise violates the intellectual property or other rights of us or any third parties;
- To only use the API to embed our data or data provided to you through our API into your own solutions for your internal business purposes and not for any other commercial purposes;
- Not to license, distribute, lease, give, sell, rent, timeshare, sublicense, disclose, publish, assign, market, transfer, or distribute any API portion to any third party.
Prohibited Uses
You may use our API only for lawful purposes. You may not use our API: (a) in any way that breaches any applicable local, national, or international law or regulation; (b) in any way that is unlawful or fraudulent or has any unlawful or fraudulent purpose or effect; (c) to transmit, or procure the sending of, any unsolicited or unauthorized advertising or promotional material or any other form of similar solicitation (spam); or (d) to knowingly transmit any data, send or upload any material that contains viruses, Trojan horses, worms, time-bombs, keystroke loggers, spyware, adware, or any other harmful programs or similar computer code designed to affect the operation of any computer software or hardware adversely.
Consequences of Misuse
Without prejudice to any other rights we may have, in the event of your failure to adhere to the restrictions on use or prohibited uses set out above or any other failure to comply with the API Terms, you shall be responsible for and shall indemnify us against all costs, losses, liabilities, damages, claims, and expenses suffered or incurred by us or any of our affiliates, subsidiaries, officers, directors, employees, suppliers, consultants, and agents, arising directly or indirectly out of or connected to your breach, including but not limited to any of the aforesaid costs, losses, liabilities, damages, claims, and expenses relating to damage to or destruction or corruption of data.
We shall be entitled (without notice) to suspend, modify, restrict, or otherwise limit your use of the API. We may monitor your API use to verify compliance with these API Terms. You shall permit us and/or our representatives to perform an audit and/or verification of your use of the API and to inspect and access your premises and/or systems or information as reasonably required by us in connection with your use of the API.
Processing of Personal Data
Any personal data related to your use of the APIs will be processed according to APEX’s Privacy Policy, which can be found at https://legal.apexanalytix.com/privacy-policy.
Export
The APIs are subject to US global trade control laws and regulations, including the U.S. Export Administration Regulations and various sanctions programs administered by the U.S. Office of Foreign Assets Control. You will not, directly or indirectly, export, re-export, release, or make the APIs available for use in contravention of these laws and regulations.
Warranty
Your use of the smartvm API is at your own discretion and risk, and you will be solely responsible for any damage that results from the use of any smartvm APIs including, but not limited to any damage to your computer system or loss of your data.
YOU ACKNOWLEDGE AND AGREE THAT THE SMARTVM API IS PROVIDED “AS IS” AND “AS AVAILABLE,” AND WITHOUT WARRANTY OF ANY KIND, AND ALL OTHER WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, REGARDING ANY MATTER, INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY, SUITABILITY, FITNESS FOR A PARTICULAR USE OR PURPOSE, OR NONINFRINGEMENT ARE DISCLAIMED. YOU MAY HAVE CERTAIN RIGHTS UNDER YOUR LOCAL LAW, NOTHING IN THESE TERMS ARE INTENDED TO AFFECT THOSE RIGHTS, IF APPLICABLE. WITHOUT LIMITING THE FOREGOING, APEX DOES NOT WARRANT AGAINST THE LOSS OF DATA OR THAT THE SMARTVM API WILL BE UNINTERRUPTED, FREE FROM ERRORS OR DEFECTS, OR PROVIDED WITHOUT DELAY, OR THAT ERRORS OR DEFECTS ARE CAPABLE OF BEING CORRECTED.
Term and Termination
These API Terms shall remain in effect until termination. You may terminate these API Terms anytime by ceasing all use of the APIs and any relevant keys or tokens. Unless you purchased the APIs for a predetermined period, we reserve the right to terminate these APIs or these API Terms immediately at any time without further obligation to you.
All rights and licenses granted herein shall expire upon termination, and you must stop using the APIs. The provisions of these API Terms that by their nature would survive shall continue to apply.
Modification
We reserve the right (without liability to you or any other person) to modify, amend, alter, or otherwise deal with the API in any manner, and we do not guarantee that it will continue to be available for use.
Governing Law
This Agreement shall be governed by the laws of the state of North Carolina, without giving effect to its choice of law principles, and in accordance with applicable federal laws of the United States.
Severability
If a court of competent jurisdiction holds any provision of these API Terms unenforceable, the court shall modify it and interpret it to best accomplish the original provision to the fullest extent permitted by law, and the remaining provisions of these API Terms shall remain in effect.
Effective October 11th 2024 to October 25th 2024
DownloadTable of Contents
smartvm API Terms of Use
These smartvm API terms of use (“API Terms”) define the terms that apply when you use, contact, or interact with our smartvm application programming interface (“API”) and form a binding contract between you and us. These API Terms do not apply to your use of any of our software, website, applications, application plug-ins, solutions, or other APEX services (“Services”). Your use of APEX Services is subject to a separate End-User Services Agreement. If additional terms apply to an application which uses the smartvm API, to include but not limited to a SaaS Agreement, an End User Services Agreement, or any other agreement (“Additional Terms”), both these API Terms and the Additional Terms shall apply. If a conflict arises between the API Terms, the Additional Terms will prevail with respect to such conflicting terms only.
As used in these API Terms, smartvm API means any form of machine accessible application programming interface that provides access to an APEX service and any associated tools, including sample code that enables interactions with APEX’s services, and documentation that APEX makes available under these API Terms, and includes all elements, components and executables of such API; this may expressly include APEX ArchimedesTM an advanced cognitive technology system with machine learning and IBM Watson® (a registered trademark of IBM Corporation), robotic process automation, as well as third-party data sources. The output or results of the smartvm API shall be known as a “smartvm Validation” and shall include all selected attributes for validation and enrichment within a smartvm Data Lookup.
Who We Are and How to Contact Us:
APEX Analytix, LLC, a Delaware limited liability company with a corporate headquarters located at 1501 Highwoods Boulevard, Suite 200, Greensboro, NC 27410, USA. Our website is www.apexanalytix.com. APEX Analytix, LLC, is referred to herein as “APEX,” “we,” “our,” or “us.”
“You” and “your,” refer to the individual, company, or other legal entity on behalf of which the APIs are used.
If you are using the APIs on behalf of a company or other legal entity, you represent that you have the authority to bind such entity to these API Terms. If you do not have such authority or do not agree with these terms, you must not use the APIs.
Acceptance of Terms
Using our API, you confirm that you accept these API Terms and agree to comply. If you disagree with these API Terms, you must not use our API. We may amend these API Terms from time to time without notice. Please check the apexanalytix Legal Center for the most updated version of these API Terms.
smartvm API License
Subject to your compliance with these API Terms, we grant you a limited, non-exclusive, non-sublicensable, non-transferable, non-assignable, revocable license to install, use and make calls to the smartvm API, and to use the smartvm Validation for your own internal business purposes.
The smartvm Validation may be uploaded as data to your existing enterprise resource planning (“ERP”) system subject to the license terms with your ERP provider, and in no way does this license grant you a right to redistribute the smartvm Validation to your ERP provider or any third-party.
Grant of License to Data Processed through the smartvm API
You hereby grant to us a non-exclusive, non-transferable license to use, upload, display, copy and store your data for the purpose of delivering the smartvm Validation pursuant to these API Terms. You agree you shall have sole responsibility and liability for acquiring any and all authorization(s) necessary for use of your data as contemplated by these API Terms; and, ensuring that your data does not infringe or violate any patents, copyrights, trademarks, privacy rights and/or other intellectual property or proprietary rights, or misappropriate the trade secrets of any third-party.
APEX may aggregate data uploaded to the smartvm API by you with data uploaded to the smartvm API by our other clients, analyze data uploaded and use such data to create and provide analysis, reports, derivative statistics and other products and services based on the foregoing, provided that no such product or service distributed to third-parties by APEX shall identify you as the source of data used in preparing such product or service. Further, you acknowledge that data uploaded through the smartvm API may be used by APEX for its own purposes and analyzed in derivative works as part of APEX’s business where that data is also public information or has been gathered, derived or developed by APEX independent of the services provided to you hereunder.
Restrictions on Use
When using or attempting to use the APIs, you agree:
- To adhere to any applicable guidelines, restrictions, or requirements set forth in any API documentation;
- Not to share any API keys or authentication tokens with any other individuals, companies, or entities outside of your own (each a “third party”), including our potential competitors, and to keep these secure at all times;
- Not to mask or misrepresent your identity or your systems’ identity;
- Not to remove any proprietary notices or intellectual property from the APIs;
- That to protect the security, integrity, and operability of the APIs, we may place limits on your use of the APIs (e.g. call limits), and you accept that: (i) we determine in our sole discretion what constitutes abuse or excess use or exploitation; (ii) you will not use or attempt to use the APIs in a manner that exceeds the limitations; and (iii) we may monitor the volume of requests or calls send to the APIs for compliance with these API Terms;
- Not use the APIs in a manner that poses a security risk to other users of the APIs or APEX Services or tests the vulnerability of our systems or networks or those of any third party;
- Not to use the APIs in any manner that compromises, breaks, or circumvents any of our technical processes or security measures associated with the APIs or Services;
- Not to use the APIs for competitive analysis or to disseminate performance information relating to the APIs or Services;
- Not to modify, translate, reverse engineer, disassemble, reconstruct, decompile, copy, or create derivative works of the APIs, any APEX Services, any data, or any portion thereof to compete with us;
- Not to replicate, copy, frame, mimic, mirror, or compete with aspects of the APIs or their functionality, or to develop or utilize an application or integration to compete with us;
- Not to use the APIs in any manner or for any purpose that infringes, misappropriates, or otherwise violates the intellectual property or other rights of us or any third parties;
- To only use the API to embed our data or data provided to you through our API into your own solutions for your internal business purposes and not for any other commercial purposes;
- Not to license, distribute, lease, give, sell, rent, timeshare, sublicense, disclose, publish, assign, market, transfer, or distribute any API portion to any third party.
Prohibited Uses
You may use our API only for lawful purposes. You may not use our API: (a) in any way that breaches any applicable local, national, or international law or regulation; (b) in any way that is unlawful or fraudulent or has any unlawful or fraudulent purpose or effect; (c) to transmit, or procure the sending of, any unsolicited or unauthorized advertising or promotional material or any other form of similar solicitation (spam); or (d) to knowingly transmit any data, send or upload any material that contains viruses, Trojan horses, worms, time-bombs, keystroke loggers, spyware, adware, or any other harmful programs or similar computer code designed to affect the operation of any computer software or hardware adversely.
Consequences of Misuse
Without prejudice to any other rights we may have, in the event of your failure to adhere to the restrictions on use or prohibited uses set out above or any other failure to comply with the API Terms, you shall be responsible for and shall indemnify us against all costs, losses, liabilities, damages, claims, and expenses suffered or incurred by us or any of our affiliates, subsidiaries, officers, directors, employees, suppliers, consultants, and agents, arising directly or indirectly out of or connected to your breach, including but not limited to any of the aforesaid costs, losses, liabilities, damages, claims, and expenses relating to damage to or destruction or corruption of data.
We shall be entitled (without notice) to suspend, modify, restrict, or otherwise limit your use of the API. We may monitor your API use to verify compliance with these API Terms. You shall permit us and/or our representatives to perform an audit and/or verification of your use of the API and to inspect and access your premises and/or systems or information as reasonably required by us in connection with your use of the API.
Processing of Personal Data
Any personal data related to your use of the APIs will be processed according to APEX’s Privacy Policy, which can be found at https://legal.apexanalytix.com/privacy-policy.
Export
The APIs are subject to US global trade control laws and regulations, including the U.S. Export Administration Regulations and various sanctions programs administered by the U.S. Office of Foreign Assets Control. You will not, directly or indirectly, export, re-export, release, or make the APIs available for use in contravention of these laws and regulations.
Warranty
Your use of the smartvm API is at your own discretion and risk, and you will be solely responsible for any damage that results from the use of any smartvm APIs including, but not limited to any damage to your computer system or loss of your data.
YOU ACKNOWLEDGE AND AGREE THAT THE SMARTVM API IS PROVIDED “AS IS” AND “AS AVAILABLE,” AND WITHOUT WARRANTY OF ANY KIND, AND ALL OTHER WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, REGARDING ANY MATTER, INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY, SUITABILITY, FITNESS FOR A PARTICULAR USE OR PURPOSE, OR NONINFRINGEMENT ARE DISCLAIMED. YOU MAY HAVE CERTAIN RIGHTS UNDER YOUR LOCAL LAW, NOTHING IN THESE TERMS ARE INTENDED TO AFFECT THOSE RIGHTS, IF APPLICABLE. WITHOUT LIMITING THE FOREGOING, APEX DOES NOT WARRANT AGAINST THE LOSS OF DATA OR THAT THE SMARTVM API WILL BE UNINTERRUPTED, FREE FROM ERRORS OR DEFECTS, OR PROVIDED WITHOUT DELAY, OR THAT ERRORS OR DEFECTS ARE CAPABLE OF BEING CORRECTED.
Term and Termination
These API Terms shall remain in effect until termination. You may terminate these API Terms anytime by ceasing all use of the APIs and any relevant keys or tokens. Unless you purchased the APIs for a predetermined period, we reserve the right to terminate these APIs or these API Terms immediately at any time without further obligation to you.
All rights and licenses granted herein shall expire upon termination, and you must stop using the APIs. The provisions of these API Terms that by their nature would survive shall continue to apply.
Modification
We reserve the right (without liability to you or any other person) to modify, amend, alter, or otherwise deal with the API in any manner, and we do not guarantee that it will continue to be available for use.
Governing Law
This Agreement shall be governed by the laws of the state of North Carolina, without giving effect to its choice of law principles, and in accordance with applicable federal laws of the United States.
Severability
If a court of competent jurisdiction holds any provision of these API Terms unenforceable, the court shall modify it and interpret it to best accomplish the original provision to the fullest extent permitted by law, and the remaining provisions of these API Terms shall remain in effect.