Privacy Policy

What we collect

We collect personal data in one place on this site: the booking form you fill in to request a call. When you submit it, we receive the fields you enter — name, email address, company name, company website (optional), what you are looking to build, and, if you tell us, how you heard about Applefy.

We do not require an account to use this site, and there is no payment or checkout flow on applefy.tech itself — client engagements are agreed separately, outside this website, once a conversation has started.

How your booking request is used and where it goes

A submitted booking request is stored in our content system (Payload, backed by a Postgres database we operate) and, at the same time, posted as a plain-text notification into a private internal Telegram channel so our team sees new requests promptly. Nobody outside Applefy has access to that channel or to the underlying database.

We use the information you provide only to respond to your enquiry, prepare for and conduct the requested call, and, if we proceed, to scope and deliver the work you asked about. We do not sell your data, and we do not use it for advertising.

Analytics and cookies — the current, actual state

This site ships with analytics infrastructure that is, as of the date above, switched off for visitor tracking: no Google Analytics ID, no Meta Pixel ID, and no Umami tracking snippet is active on any page, and our cookie-consent banner is currently disabled. In this state, we do not set tracking cookies and we do not collect browsing analytics about you.

The site is built to support analytics in the future, under the following rule: any tool that would process personal data or identify you across visits — such as Google Analytics or a Meta advertising pixel — will only run after you have actively given consent through a cookie banner, and only after this policy has been updated to name that tool and what it does. The one exception is Umami, a cookieless, self-hosted analytics tool that, if enabled, records aggregate traffic (such as page views and referrers) without tracking individuals or setting a cookie.

If and when tracking tools are switched on, this section will be updated first.

Legal basis for processing (GDPR)

For visitors in the EU/EEA and UK, we process the booking form data you submit under Article 6(1)(b) GDPR (steps taken at your request, before entering into a contract) and, where that does not apply, under our legitimate interest in responding to enquiries sent to us (Article 6(1)(f)).

How long we keep it

We keep booking requests for as long as is useful for the business relationship they relate to, and in any case no longer than 3 years from your last contact with us, unless we are required to keep records for longer for tax, accounting, or legal reasons. You can ask us to delete your data sooner — see "Your rights" below.

Who we share data with

We use a small number of service providers to run this site and respond to enquiries, each acting only on our instructions:

International transfers

Applefy operates across the US (our legal entity), the EU (Spain), and Ukraine. Data you submit may therefore be accessed by team members or processed on infrastructure in more than one of these locations. Where that involves a transfer out of the EU/EEA, we rely on the service provider’s own standard contractual safeguards.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, have it deleted, object to or restrict our processing of it, or receive a copy of it in a portable format. To exercise any of these, email sales@applefy.tech — we will respond within 30 days. If you are in the EU/EEA or UK and are not satisfied with our response, you have the right to complain to your local data protection authority.

Security

Our site is served over HTTPS, and booking data is stored in a database that is not publicly accessible. Access to the Telegram channel and the admin system is limited to the Applefy team. No method of transmission or storage is perfectly secure, but we take reasonable, industry-standard measures to protect the data you share with us.

Children

This site and our services are directed at businesses and professionals. We do not knowingly collect personal data from children, and the booking form is not intended for use by anyone under 16.

Changes to this policy

We will update this page when what we actually do changes — most likely when analytics tooling is switched on, as described above. The date at the top of this page always reflects the last real change.