Privacy Policy
Effective Date: June 27, 2026 | Last Updated: June 27, 2026
Justice Apex Inc. ("we," "us," "our"), a Delaware C-Corporation headquartered in Collierville, Tennessee, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our products and services.
This policy applies to all Justice Apex products including FORGE, DEFINTEL, JADE, PIPER, APEX Engine, HAVEN, and SAGE/ACE (collectively, the "Services").
1. Information We Collect
Information You Provide
- Account Data: Name, email address, company name, and password (stored as a cryptographic hash, never in plaintext) when you create an account on any of our Services.
- Business Information: Company details, industry, services offered, and contact information you provide during website generation (JADE) or ERP onboarding (FORGE).
- Order and Transaction Data: Product orders, line items, pricing, shipping addresses, and billing information processed through FORGE.
- Payment Information: Payment card details are collected and processed exclusively by Stripe, Inc. We do not store your full card number, CVV, or bank account details on our servers.
- Content You Upload: Poker hand histories (SAGE/ACE), business assets for website generation (JADE), and any files or data you voluntarily submit to our Services.
- Communications: Messages sent through our contact forms, support channels, or Discord community.
Information Collected Automatically
- Usage Data: Pages visited, features used, session duration, and interaction patterns within our Services.
- Device Information: Browser type, operating system, device identifiers, and screen resolution.
- Log Data: IP address, access times, referring URLs, and server logs.
- Cookies and Similar Technologies: We use session cookies to maintain your login state and essential cookies for service functionality. We do not use third-party advertising or tracking cookies.
2. Product-Specific Data Practices
FORGE (Enterprise Resource Planning)
- Collects and processes customer business data including company names, addresses, contact information, order history, and product catalog data.
- Handles DSCSA pharmaceutical compliance tracking including distribution chain records and license numbers as required by FDA regulations.
- Email campaign functionality tracks open rates and click-through rates for transactional and marketing communications.
- Storefront customer accounts include hashed passwords, purchase history, and saved shipping addresses.
DEFINTEL (Trading Intelligence)
- Collects account data, subscription tier, signal preferences, and alert settings.
- Analyzes publicly available market data. DEFINTEL does not access your brokerage accounts, hold custody of your funds, or execute trades on your behalf.
- Trading signals and market analysis are informational only and do not constitute financial advice.
JADE (AI Website Builder)
- Collects business information you provide during website generation including company name, industry, services, and contact details.
- Generated website content and images (produced using Google Imagen) are stored on our infrastructure and deployed to your specified hosting.
- Lead outreach features may use publicly available business contact information from public directories and websites.
PIPER (Sports Betting Intelligence)
- Collects account data, subscription tier, and analysis preferences.
- PIPER provides sports analytics and statistical modeling only. We do not place bets on your behalf, handle gambling funds, or operate as a sportsbook.
APEX Engine (AI Platform)
- Collects account data, usage logs, session data, and API interaction records necessary for service delivery and platform optimization.
SAGE/ACE (Poker Coaching)
- Processes poker hand history data you upload for game theory optimal (GTO) analysis.
- Stores session analysis results, coaching history, and user preferences.
HAVEN (Autism Communication AI) — Children's Data Protection
HAVEN is designed to support communication development for children on the autism spectrum. We take the protection of children's data with the utmost seriousness and comply fully with the Children's Online Privacy Protection Act (COPPA).
- On-Device Processing Only: All child video and audio recordings are processed exclusively on the local device. Raw child data never leaves the device and is never transmitted to our servers.
- No Centralized Child Data: HAVEN uses a federated learning architecture. Only anonymized, aggregated feature data (never identifiable child information) is used for model improvement.
- Caregiver Accounts Only: Only caregiver/parent account information (name, email) is stored on our servers. No child profile data is stored server-side.
- Parental Consent: HAVEN requires verifiable parental consent before any data collection related to a child. Parents and guardians may review, delete, or refuse further collection of their child's information at any time.
- No Advertising: HAVEN never displays advertising to children or uses children's data for marketing purposes.
3. How We Use Your Information
- To provide, maintain, and improve our Services.
- To process transactions and send related information including confirmations, invoices, and order updates.
- To send administrative messages, security alerts, and support communications.
- To respond to your inquiries, comments, and support requests.
- To monitor and analyze usage trends to improve user experience.
- To detect, prevent, and address fraud, abuse, and technical issues.
- To comply with legal obligations including DSCSA pharmaceutical distribution tracking requirements.
4. How We Share Your Information
We do not sell your personal information. We do not share your personal information with third parties for their marketing purposes. We may share information in the following limited circumstances:
- Service Providers: We work with trusted third-party providers who process data on our behalf:
- Google Cloud Platform (Vertex AI, BigQuery) — AI processing and data analytics
- Stripe — Payment processing
- Supabase — Database hosting and authentication
- Netlify — Website hosting and deployment
- Resend — Transactional email delivery
- Firebase/Firestore — Application state management
- Discord — Community communication
- Legal Requirements: When required by law, subpoena, court order, or government request.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
- With Your Consent: When you have given us explicit permission to share specific information.
5. Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption in transit (TLS/HTTPS) for all data transmissions.
- Encryption at rest for stored data.
- Password hashing using cryptographic algorithms (passwords are never stored in plaintext).
- Role-based access controls limiting data access to authorized personnel.
- Regular security audits and monitoring.
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide our Services. We may retain certain information as required by law (for example, DSCSA compliance records) or for legitimate business purposes such as resolving disputes and enforcing agreements. When data is no longer needed, we securely delete or anonymize it.
7. Your Rights
All Users
- Access and receive a copy of your personal data.
- Correct inaccurate or incomplete information.
- Request deletion of your personal data (subject to legal retention requirements).
- Withdraw consent for data processing where consent is the legal basis.
California Residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose.
- Request deletion of your personal information.
- Opt out of the sale of personal information (we do not sell personal information).
- Non-discrimination for exercising your privacy rights.
European Users (GDPR)
If you are in the European Economic Area, you have additional rights including:
- Data portability — receive your data in a structured, machine-readable format.
- Right to object to processing based on legitimate interests.
- Right to restrict processing of your data.
- Right to lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at privacy@justiceapex.ai or chad@justiceapex.ai.
8. Cookies
We use essential cookies only:
- Session Cookies: Maintain your login state and authentication across our Services (e.g.,
jo_token for FORGE storefront sessions).
- Preference Cookies: Remember your settings and display preferences.
We do not use third-party advertising cookies, tracking pixels, or cross-site tracking technologies. Most browsers allow you to control cookies through their settings. Disabling essential cookies may impact service functionality.
9. Third-Party Links
Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any third-party sites you visit.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: