Privacy Policy

Account data. When a dealership provisions Apex, we collect the names, work email addresses, phone numbers, and roles of the users your administrator invites.

Customer records. Dealerships upload and generate lead and deal records — contact details, vehicle interest, trade-in information, financing status, and message history. The dealership is the controller of this data; Apex processes it on their behalf.

Usage & device data. We log IP address, browser type, pages viewed, and feature interactions to keep the service secure and to improve it.

We use information to provide and maintain the platform, authenticate users, route leads, deliver messages on a dealership’s behalf, provide support, detect and prevent fraud and abuse, comply with legal obligations, and improve the product. We do not sell personal information, and we do not use dealership customer records to train shared models.

Apex sends SMS and email on behalf of dealerships. Dealerships are responsible for obtaining the consent required under the TCPA, CAN-SPAM, and applicable state law before messaging a consumer. Every message includes the sending dealership’s identity and an opt-out mechanism, and honored opt-outs are enforced across the platform.

We share information with subprocessors that host our infrastructure, deliver messages, and process payments, each under a written data-processing agreement. We may disclose information to comply with law or valid legal process, to protect the rights and safety of Apex and others, and in connection with a merger or acquisition (with notice). We never share one dealership’s records with another.

We retain dealership data for as long as the account is active and for a limited period afterward to satisfy legal, accounting, and dispute-resolution requirements. A dealership may request export or deletion of its data at any time, subject to those obligations.

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We enforce role-based access control, least-privilege internal access, continuous logging, and independent annual penetration testing. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard safeguards.

Depending on your state of residence, you may have the right to access, correct, delete, or port your personal information, and to opt out of certain processing. Consumers should direct requests to the dealership that holds their record; Apex will assist that dealership in fulfilling verified requests. Contact us at privacy@apexcrm.com for help.

Apex is a business tool not directed to children, and we do not knowingly collect personal information from anyone under 16.

We may update this policy from time to time. Material changes will be posted here with a revised “Last updated” date, and, where appropriate, communicated to dealership administrators.

Questions about this policy? Write to Apex CRM, Inc., Attn: Privacy, 1200 Smith Street, Suite 1600, Houston, TX 77002, or email privacy@apexcrm.com.