Apex Group

Privacy Policy

Last Updated: July 22, 2026

1. Who we are

Apex Group is an AI-first services company based in Amman, Jordan. We run this website, apexgroupjo.com. This policy explains what information we collect here, why we collect it, and what rights you have over it.

Reach us any time: info@apexgroupjo.com · +962 77 892 0500 · 5th Floor, Building 215, Arar Street, Wadi Saqra, Amman 11183, Jordan.

2. What we collect

Only what you can see happening. When you book a demo through the form on this site, we collect your name, your WhatsApp number, and — if you give one — a preferred time. Alongside that submission we log basic technical data: your IP address, your browser's user-agent, and a timestamp.

Talking to the chat assistant on this site works differently. If you only chat, your messages are processed to generate replies and are not saved to our database: the conversation's state lives in server memory for up to about four hours, then disappears. Your IP address is never stored raw — we keep a salted one-way hash of it, rotated daily, used only to limit abuse.

If you submit the contact card inside the chat — becoming a lead — we store: your name and company (if you gave them), your phone number or email address, the full transcript of that conversation, the page you were on when you used the widget, and a consent record — the exact consent wording you saw (with its version id), the timestamp, your chosen language, the hashed IP, and your browser's user-agent — kept so we can prove what you agreed to.

If you message us on WhatsApp, we process your messages and your WhatsApp number to reply. Our automation tool keeps the last 20 messages of the thread for context; older ones drop off as new ones arrive.

That is the full list. We run no analytics tools, no marketing cookies, and no advertising trackers today. We collect no payment data. If that ever changes, this policy updates first.

3. Why we collect it

Three reasons: to respond to your demo request, to provide the services you ask us for, and to prevent spam and abuse of the form. Nothing else.

One more, specific to the chat assistant: following up with you on WhatsApp or by email happens only with your consent, given by ticking a box that is never pre-ticked. The stored consent record is our proof of it — and the system will not save a chat lead without one.

4. Where your information lives

Form submissions are stored on Apex's own server and delivered to our team through an internal email alert. We do not put your data in a third-party CRM today.

Chat-lead records from the assistant live in a managed Postgres database hosted by Neon in Frankfurt (EU) — see section 6 for every processor by name.

5. Automated conversations

Messages sent to Apex's WhatsApp may be answered by AI assistants operating on Apex's behalf, and the same assistant powers the chat widget on this site. A human is always available on request — just ask.

6. Who processes chat conversations

When you talk to our assistant — on this site or on WhatsApp — these providers process data on our behalf:

  • Anthropic (USA) — every chat and WhatsApp message is sent to Anthropic's API to generate the assistant's reply.
  • Meta — WhatsApp Cloud API — carries all WhatsApp messages and your WhatsApp number.
  • n8n (hosted in the EU) — our automation layer: it holds WhatsApp threads (the last 20 messages), sends our team lead notifications that include the chat transcript, and runs the opt-out flow.
  • Neon (Postgres database, Frankfurt, EU) — stores the chat-lead records described in section 2.
  • Cal.com — receives availability and timezone queries when you book a meeting through the assistant. The assistant sends it no name, phone number, or email.

Sending a message therefore involves transfers of data outside Jordan, including to the United States (Anthropic, Meta).

7. Sharing

We do not sell personal data. We do not run ads. We share information only with service providers strictly needed to operate — for example hosting and email delivery, and the chat processors named in section 6 — and with legal authorities when the law requires it.

8. Your rights

You can ask to access, correct, or delete the information we hold about you, or object to how we use it. These rights are granted to all our users, wherever you are. One email does it: info@apexgroupjo.com.

Our primary framework is Jordan's Personal Data Protection Law (Law No. 24 of 2023). If you are visiting from the EU or EEA, you additionally hold your rights under the GDPR.

9. Retention

For the website form: we keep your information only as long as we need it to handle your request and for legitimate business records. Ask us to delete it, and we will.

For the chat assistant, retention is enforced by code. Chat-lead records — transcript included — are deleted automatically after 24 months by a purge that runs daily. A chat that never becomes a lead is never written to the database at all: its state lives in server memory for up to about four hours, then disappears. WhatsApp threads keep only their last 20 messages in our automation tool, retained while the conversation remains active. And if you withdraw consent, we keep exactly one thing — your phone number or email address on a suppression list, indefinitely: deleting it would let us message you again, which is the opposite of what you asked.

10. Withdrawing consent

On WhatsApp: reply STOP — or إيقاف, الغاء, or توقف — and the withdrawal is processed automatically, effective immediately: the assistant stops engaging you and you receive a one-line confirmation. Reply START (or ابدأ) to resume.

By email: write to info@apexgroupjo.com from any channel, and the team records the withdrawal in the same suppression system.

Withdrawal stops all follow-up. If you submit the consent form again later, that counts as fresh consent and contact resumes.

11. Security

We protect your information with reasonable technical and organizational measures. Honesty requires the caveat every company owes you: no method of storage or transmission is 100% secure, and we cannot promise otherwise.

12. Children

Our services are for businesses and for adults aged 18 and over. This site is not directed at children, and we do not knowingly collect information from them.

13. Changes to this policy

When this policy changes, the new version is posted here with an updated date at the top. That date is the single source of truth for what applies.