Privacy Policy
Last updated: 20 August 2026
Apate Security is built privacy-first. This Policy explains what we do and do not process. It applies to our website and to purchases; it is operated by Apate Security, a sole proprietorship based in Israel. For any privacy request, contact info@apatesecurity.com.
1. The Software collects no telemetry
The Apate Security desktop application runs entirely on your machine. It does not phone home, send telemetry, or transmit your scan results, findings or files to us or anyone else. Licensing is verified online at activation using a signed key (offline / air-gapped machine-locked keys are also supported); this checks only your license, never your scan data. Any outbound lookups (e.g. optional threat-intel queries) happen only when you explicitly trigger them, using API keys that are your own.
2. Information we do process
- Purchase information - handled by our Merchant of Record, Lemon Squeezy. They process your payment details and billing information; we receive your name, email and order details to fulfill and support your license. We never see full card numbers.
- Your license key - contains your email address (used to bind and verify the license) and is kept in our vendor records for support and license management.
- Messages you send us - if you email us or use the contact form, we process what you send in order to respond.
- Website analytics - if enabled, we use privacy-friendly, cookieless analytics (e.g. Cloudflare Web Analytics) that do not track you across sites or build advertising profiles.
3. We do not sell your data
We do not sell or rent your personal information, and we do not use it for third-party advertising.
4. Service providers
We rely on a small number of processors to run the business: Lemon Squeezy (payments, invoicing & Merchant of Record), Web3Forms (delivers our contact and newsletter form submissions to our inbox), our email provider (support and license delivery), and Cloudflare (website hosting and optional, cookieless analytics). If you submit the optional star-rating on our site, Google (Apps Script / Sheets) stores that rating and any feedback you include. Each processes data only as needed to provide their service, under their own privacy terms.
Current subprocessors
For business and enterprise customers who need it for due diligence, our current subprocessors are:
| Subprocessor | Purpose | Terms / DPA |
|---|---|---|
| Lemon Squeezy | Payments, invoicing, Merchant of Record | Privacy / DPA |
| Cloudflare | Website hosting, CDN, cookieless analytics | Customer DPA |
| Web3Forms | Delivers contact & newsletter form submissions | Privacy |
| Google (Apps Script / Sheets) | Stores the optional website star-rating & feedback you submit | Data Processing Terms |
We update this list when our processors change. To request our Data Processing Addendum (DPA), email info@apatesecurity.com.
5. Your rights
Depending on where you live (e.g. the EU/UK GDPR, the California CCPA/CPRA, or Israel's Protection of Privacy Law, 5741-1981, as amended), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email info@apatesecurity.com and we will respond within the time required by law. You may also lodge a complaint with your local data-protection authority (in Israel, the Privacy Protection Authority).
6. Data retention
We keep purchase and license records for as long as needed to provide support, honor licenses and meet legal/accounting obligations, then delete or anonymize them.
7. Children
The Software and site are intended for professional and adult use and are not directed to children.
8. Changes
We may update this Policy; the "last updated" date reflects the current version.
Questions about this document? Email info@apatesecurity.com.