Pikbase

Legal / Apexbase LLC

Pikbase Privacy Policy

Last updated: August 16, 2026
Effective date: August 16, 2026

Apexbase LLC (Apexbase LLC, we, us, or our) operates Pikbase, an AI-assisted backend platform for application development and operations. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit Pikbase websites, create an account, use the platform, use related APIs, MCP servers, or CLI tools, contact support, or otherwise interact with us.

This Policy applies to information for which Apexbase LLC determines the purposes and means of processing. When an organization uses Pikbase and controls the data submitted to its tenant, that organization may be the controller and Apexbase LLC may act as its processor or service provider. In that case, the organization’s privacy notice and written data-processing terms also apply. This Policy does not replace a privacy notice you provide to users of an application built on Pikbase.

1. Information we collect

1.1 Account, identity, and organization information

We may collect your name, email address, username, organization, job role, contact details, authentication records, account preferences, language, time zone, team membership, role assignments, support history, and security settings. If you register through a third-party identity provider, we receive the information that provider makes available according to your settings and its privacy notice.

1.2 Billing and commercial information

For paid Services, we may receive plan, subscription, invoice, transaction, tax, billing-contact, and payment-status information. Payment card details are handled by the payment provider where applicable; we do not need to receive the full card number to operate the account.

1.3 Platform, device, and security information

We collect IP address, approximate location derived from IP where needed for security or regional operation, browser and device type, operating system, language, referring URL, timestamps, session identifiers, request metadata, API usage, resource consumption, error reports, performance data, audit events, authentication events, and security signals. We use this information to operate, secure, troubleshoot, meter, and improve the Services.

1.4 Customer Data and application content

Depending on the features and permissions you use, Customer Data may include application code, schemas, records, files, prompts, configurations, API requests, logs, integrations, and content submitted by you or your organization. Your organization may determine what data is sent to Pikbase and what retention and access rules apply. Do not submit personal, confidential, or regulated information unless you have authority and the applicable Service and agreement support it.

1.5 Communications and support

We collect information you provide in support requests, sales inquiries, security reports, surveys, feedback, forms, emails, and other communications, including contact details, account context, attachments, and the contents of the communication.

1.6 Cookies and similar technologies

We use essential storage and, where selected, functional, analytics, and marketing technologies. The categories, purposes, controls, and withdrawal process are described in the Cookie Policy. We do not treat a consent record as authentication and do not use the consent store to hold account credentials or access tokens.

2. How we use information

We use personal information to:

  • provide, authenticate, administer, meter, bill, and support the Services;
  • host and process Customer Data according to your instructions and our agreements;
  • secure accounts, tenants, APIs, integrations, infrastructure, and personnel;
  • detect, prevent, investigate, and respond to fraud, abuse, attacks, and policy violations;
  • diagnose errors, monitor performance, test reliability, and improve the Services;
  • communicate about accounts, transactions, security incidents, maintenance, changes, and support;
  • process applications for trials, waiting lists, sales, partnerships, or employment;
  • comply with legal obligations, lawful requests, and accounting requirements; and
  • establish, exercise, or defend legal claims and protect rights, safety, and property.

We may create aggregated or de-identified information that no longer reasonably identifies a person. We may use that information for measurement, research, planning, and improvement, but we will not represent it as anonymous if it can reasonably be re-associated with you.

3. AI-assisted processing

Pikbase features may process prompts, code, configurations, queries, and surrounding context to return requested output. The exact processing depends on the feature, configuration, provider, and agreement. Review the feature documentation and your organization’s settings before submitting sensitive information.

We do not use Customer Data to train a general-purpose model for unrelated customers unless the applicable documentation, consent flow, or written agreement clearly authorizes that use. We may use limited operational metadata, feedback, and de-identified information to secure and improve the Services. AI output is not a decision about you and is not professional advice.

Where applicable law requires a legal basis, we process information under one or more of these bases: performance of a contract; legitimate interests such as security, support, service improvement, and fraud prevention; compliance with law; consent; and steps taken at your request before entering a contract. We do not rely on consent where a different lawful basis applies, and you may withdraw consent for consent-based processing without affecting prior lawful processing.

5. How we share information

We may disclose information to:

  • an organization or administrator that controls your Pikbase tenant;
  • infrastructure, hosting, storage, authentication, payment, communications, support, security, analytics, and AI service providers acting under instructions;
  • integrations and third parties that you enable or direct us to connect;
  • professional advisers, auditors, insurers, and transaction counterparties subject to confidentiality obligations;
  • authorities, courts, or other parties when required by law or reasonably necessary to protect rights, safety, or the Services; and
  • a successor or purchaser in a merger, financing, reorganization, sale, or similar transaction.

We do not sell personal information for money. We do not disclose Customer Data for unrelated advertising. We require providers to handle information consistently with our instructions and applicable agreements, but each provider may have its own terms and privacy notice.

6. International transfers

Apexbase LLC and its providers may process information in countries other than the country where you live. Where required, we use an appropriate transfer mechanism, contractual protection, or other safeguard. Enterprise customers may have additional data-location or transfer terms in a written agreement.

7. Retention

We retain information only for as long as reasonably necessary for the purposes described here, including providing the Services, maintaining an active account or contract, security and abuse prevention, billing, legal compliance, dispute resolution, and reliable backups. Retention periods vary by data type, feature, plan, organization instruction, and law.

When an account or tenant ends, Customer Data may be exported or deleted according to the applicable order, agreement, and product controls. Backups, security logs, audit records, and records needed to establish or defend claims may remain for a limited period. We periodically review retention and securely delete or de-identify information when no longer needed.

8. Security

We use administrative, technical, and organizational measures intended to protect information, including access controls, authentication, monitoring, logging, change management, backup, and incident-response practices appropriate to the Services and risk. No transmission or storage method is guaranteed secure. You are responsible for credentials, permissions, application security, integrations, and promptly reporting suspected compromise.

If we determine that a breach requires notice, we will notify affected customers or individuals as required by applicable law and contract. Security inquiries and reports should be sent to info@apexbase.net.

9. Your rights and choices

Depending on where you live and our role, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information; withdraw consent; opt out of certain communications; and appeal a decision about a request. You may also complain to a data-protection authority.

To submit a request, email info@apexbase.net with Pikbase Privacy Request in the subject line. We may need to verify your identity, clarify the request, and coordinate with the organization that controls a tenant. We may deny or limit a request where permitted by law, including to protect security, another person’s rights, confidential information, or legal privilege. We do not discriminate against people for exercising applicable rights.

You can manage optional cookies through the consent controls and browser settings. You can manage account, team, application, and integration permissions through the available product controls or your organization administrator.

10. United States state privacy disclosures

Residents of some U.S. states may have rights to confirm whether we process their personal information, access, correct, delete, or obtain a copy of it, and opt out of sale, targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects. Pikbase does not sell personal information for money, use Customer Data for targeted advertising, or profile individuals in furtherance of decisions that produce legal or similarly significant effects.

Where applicable, you may exercise these rights or appeal our response using the request method in Section 9. You may use an authorized agent where permitted by law; we may request proof of authority and identity verification. We honor legally required opt-out preference signals, including Global Privacy Control, for processing to which the signal applies.

We may disclose the categories described in Section 1 to the recipients described in Section 5 for the business purposes described in Section 2. We do not offer financial incentives for personal information. We do not knowingly sell or share for targeted advertising the personal information of consumers under 16.

11. European and United Kingdom disclosures

For personal information that Apexbase LLC controls under the GDPR or UK GDPR, Apexbase LLC is the controller. The purposes and legal bases are described in Sections 2 and 4. You may have rights to access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent. Where processing is based on legitimate interests, you may request information about the balancing assessment and object based on your particular situation.

You may lodge a complaint with the supervisory authority where you live or work or where an alleged violation occurred. International transfers are addressed in Section 6. When we process Customer Data for an organization, submit requests to that organization first; we will assist it as required by our agreement and applicable law.

12. Automated processing

Pikbase uses automation to provide requested platform and AI-assisted functions, detect security threats and abuse, route support, and operate the Services. We do not use personal information for solely automated decisions that produce legal or similarly significant effects about individuals. If that changes, we will provide any notice, explanation, human review, or choice required by law before the processing begins.

13. Children

Pikbase is intended for professional and business use and is not directed to children. We do not knowingly collect personal information from a child where prohibited by applicable law. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

14. Changes and contact

We may update this Policy to reflect changes in the Services, providers, law, or our practices. We will post the current version and provide additional notice for material changes where required. The current version supersedes earlier versions from its effective date.

Apexbase LLC
1209 Mountain Road PL NE Ste N
Albuquerque, NM 87110, United States
Privacy requests: info@apexbase.net
https://pikbase.com