Privacy Policy

Apphive Solutions (“Apphive”, “we”, “us”) is a founder-led software and marketing studio run by Ali Janjua. We build website frontends, full-stack web and mobile applications, AI automations and dashboards, and Meta advertising campaigns with automated lead follow-up for clients in the United States and Pakistan.

For personal information collected through our website and our own sales and client-management activities, we are the party that decides how and why that information is used (the “controller”). You can reach us about anything in this policy at apphivesolutions@gmail.com.

This policy applies to personal information we handle when you:

• visit apphivesolutions.tech or any of its subdomains, such as offers.apphivesolutions.tech (together, the “Site”);
• send us a message through our contact form, by email, on social media or on WhatsApp;
• book or attend a strategy call or project meeting;
• become a client, or act as a contact person for a client.

It does not cover personal information that we process on behalf of our clients while delivering their projects, such as the leads, customers or users of an app, automation or ad campaign we build for them. That processing is explained in Section 6 and is governed by our agreement with the client and the client's own privacy policy.

Information you give us

• Contact form. Your name, email address, company name (optional) and the message you write.
• Call bookings. When you book through our scheduling page on Cal.com, your name, email address, chosen time slot, time zone and any notes you add about your project.
• Correspondence. The content of emails, WhatsApp or social media messages you send us, along with the contact details attached to them.
• Meetings. Notes we take during calls about your business, goals and project requirements. We do not record calls without telling you first and getting your agreement.
• Client information. If you hire us: names, job titles and contact details of your team, billing and invoicing details, project briefs, brand assets, content, and the access we need to your accounts (for example hosting, code repositories, domain registrars or Meta Business Manager).

Information collected automatically

Like most websites, our hosting provider automatically records basic technical information when you load a page: your IP address, browser and device type, the pages you requested, the referring page and the date and time of the request. These server logs are used to deliver the Site, keep it secure and diagnose errors.

The Site has no user accounts, logins or sign-ups, so we don't collect or store passwords from visitors. Our main website does not currently use analytics cookies, advertising pixels or cross-site tracking. See Section 8 for details.

Information from other sources

We may receive your details when someone refers you to us, or look up publicly available business information (for example a company website or LinkedIn profile) to prepare for a call you have booked.

We use personal information to:

• reply to your inquiries and prepare for and hold the calls you book;
• write proposals, quotes and statements of work;
• deliver, support and maintain the services you hire us for;
• send invoices, take payments and keep business and tax records;
• send project updates and, occasionally, news about our services to people who have worked with us or asked to hear from us (you can opt out at any time);
• keep the Site and our systems secure and prevent fraud or abuse;
• comply with legal obligations and enforce our agreements.

We do not sell your personal information, share it for cross-context behavioural advertising, or use the contents of your inquiries to train AI models.

Where data-protection laws such as the EU or UK GDPR apply, we rely on the following legal bases:

• Contract: to take steps you ask for before entering a contract (such as sending a proposal) and to perform our contract with you.
• Legitimate interests: to answer inquiries, run and secure our business, and keep in touch with existing clients, where those interests are not overridden by your rights.
• Legal obligation: to keep financial and tax records and respond to lawful requests.
• Consent: where we ask for it, for example to record a call. You can withdraw consent at any time.

Much of our work involves systems that handle our clients' own customer data: lead forms connected to Meta Ads, WhatsApp and email follow-up sequences, AI voice calling, CRMs, dashboards and web or mobile applications.

When we work on these systems:

• the client is the controller of that data and decides what is collected and why; we act only on the client's documented instructions (as a “processor” or “service provider”);
• the client is responsible for having a lawful basis and any required consent to contact its leads and customers, including consent for automated calls, texts and WhatsApp messages;
• we access that data only as far as needed to build, test, fix and support the system, and we do not use it for our own purposes;
• wherever practical, the data lives in accounts and infrastructure owned by the client, not by us;
• when the engagement ends, we return or delete any copies we hold, unless the law requires us to keep them.

If you are a customer or lead of one of our clients and want to exercise your privacy rights, please contact that business directly. If you contact us instead, we will pass your request on to them.

We share personal information only with service providers that help us run our business, and only as far as they need it to provide their service:

• Vercel hosts the Site and processes the server logs described above.
• Google (Google Workspace, Gmail, Google Apps Script and Google Sheets) receives and stores contact form submissions and our email.
• Cal.com handles call scheduling and calendar invitations.
• Zoom and Google Meet host our video calls.
• Development and automation tools such as GitLab, GitHub and n8n store project code and workflows.
• AI model providers such as OpenAI and Anthropic, when a client's project uses their models. We use business API terms under which submitted data is not used to train their models.
• Banks and payment providers to send invoices and receive payments.
• Professional advisers such as accountants and lawyers, under a duty of confidentiality.

We may also disclose information:

• when required by law, court order or a lawful request from a public authority;
• to protect our rights, property or safety, or those of our clients or others;
• to a buyer or successor if our business is reorganised, merged or sold. Your information would stay protected by this policy.

Our main website uses only what it needs to work. We do not currently set analytics, advertising or social media tracking cookies, and we do not run Google Analytics or the Meta Pixel on apphivesolutions.tech. Our fonts are served from our own domain, so loading a page does not send your IP address to a font provider.

Third-party services you choose to use from the Site, such as the Cal.com booking page or links to LinkedIn, Instagram or GitLab, set their own cookies under their own privacy policies.

Some campaign or landing pages, including pages on offers.apphivesolutions.tech, may use advertising measurement tools such as the Meta Pixel to measure how well our own ads perform. Where that happens, the page will say so and, where the law requires it, ask for your consent first. If we add analytics or tracking to the main Site, we will update this section before doing so.

We are based in Pakistan and work with clients in the United States and Pakistan. Our service providers store data in several countries, mainly the United States. This means your information may be processed in countries whose data-protection laws differ from those where you live.

Where the law requires it, we rely on appropriate safeguards for these transfers, such as the standard contractual clauses our service providers offer, and we choose providers with established security and privacy programmes.

• Inquiries and call notes that do not lead to a project: up to 24 months after our last contact, so we have context if you get in touch again.
• Client records, including contracts, invoices and correspondence: for the length of the engagement and then for as long as tax, accounting and legal requirements demand, generally up to six years.
• Project access and client-owned data: we remove our access and delete working copies when the engagement ends, unless you ask us to keep supporting the project.
• Server logs: kept by our hosting provider for a short period in line with its standard retention settings.

When information is no longer needed, we delete it or make it anonymous.

We use reasonable technical and organisational measures to protect personal information. These include encrypted connections (HTTPS) across the Site, giving only the people working on a project access to its information, and removing our access to client systems when an engagement ends.

No system is completely secure. If a breach affects your personal information, we will notify you and any relevant authorities as the law requires.

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy of it;
• have inaccurate information corrected;
• have your information deleted;
• object to or restrict certain processing, including direct marketing;
• receive your information in a portable format;
• withdraw consent where we rely on it;
• complain to a data-protection authority, if you are in the EU, the UK or another place with such an authority.

United States residents

Residents of California and other US states with consumer privacy laws have similar rights to know, correct and delete their personal information and to opt out of its sale or sharing for targeted advertising. We do not sell or share personal information in that way. We will not discriminate against you for exercising any of these rights.

How to make a request

Email apphivesolutions@gmail.com and tell us what you would like us to do. We may need to confirm your identity before acting. We aim to respond within 30 days. You can also authorise someone else to make a request on your behalf.

The Site and our services are meant for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us their information, contact us and we will delete it.

The Site links to websites we do not control, including client projects in our portfolio, our scheduling page and our social media profiles. Their privacy practices are governed by their own policies, and we are not responsible for them.

We may update this policy as our services or the law change. When we do, we will change the effective date at the top of this page. If a change is significant, we will make it clear on the Site or tell our clients directly before it takes effect.

For questions about this policy or your personal information, email apphivesolutions@gmail.com or use our contact page. Ali reads every message personally.

Our Terms of Service explain the rules for using the Site and working with us.