Privacy Policy

  1. Home
  2. Privacy Policy

Last Updated: December, 2025

Apex Academy ('we' or 'us' or 'our') collects and processes your personal information in accordance with this Privacy Policy ('Policy').

This Privacy Policy describes rights that you may have and our obligations, and explains how, why and when we process your personal information when you:

  • visit, interact with or use our website hapi.apexacademy.hr and any applicable sub-domains;
  • visit, interact with or use any of our offices, events, sales, marketing, and other offline activities;
  • submit a job application to Apex Academy; and/or
  • purchase or use any of our products and services as an authorized end user (for example, as a student, individual customer, or authorized team member of a business customer), when we act as a data controller of your personal information.

When we refer to any combination of the above, we use the term ‘Services’. ‘You’ means you as the user of the Services, whether you are a visitor to our websites, offices or social media pages; a recipient of our communications; a student or user of our Services; or another individual whose information we have collected pursuant to this Policy.

When you access or use our Services, you acknowledge that you have read this Policy and understand its contents. Your use of our Services and any dispute over privacy is subject to this Policy and any applicable service terms.


1. About Apex Academy

Apex Academy is a company headquartered in Split, Croatia and is the data controller of your personal information as described in this Policy, unless otherwise specified.

Hapi is a platform developed by Apex Academy that provides an all-in-one Salesforce AI platform designed to streamline Salesforce experiences. It enables users to integrate internal knowledge databases with AI providers (such as OpenAI, Google, and Einstein), create dynamic forms, generate code and images, and automate workflows via a chat interface.

You can find out more about us and our products and services at apexacademy.hr.


2. Personal Information We Process on Behalf of our Customers

In general, Apex Academy provides services to businesses using Salesforce, developers, marketing teams, and organizations seeking to integrate AI into their internal workflows and employee onboarding processes.

If we process personal information on behalf of a business customer or educational institution (where they are the Data Controller and we are the Data Processor), their privacy policies will govern the use of your data. If you have privacy-related questions in that context, please contact the relevant institution directly.

We are not responsible for the privacy or data security practices of our business customers, which may differ from those set forth in this Policy.


3. The Personal Information That We Collect

The personal information we collect depends on the context of your interactions with us and the choices you make, the Services you use, and applicable law, but can include the following:

Information you provide to us

When you visit our websites, use our products, subscribe to newsletters, request a demo, register for a course, or otherwise use our Services, we may ask you to provide:

  • Contact information: (such as your name, email address, address, or phone number);
  • Professional/Educational information: (such as your employer/school name, job title, student ID, or department);
  • Authentication information: (such as your username, password, or student login credentials);
  • Payment information: (such as billing address and payment details if you purchase courses directly);
  • Content and Communications: (such as messages sent via our contact forms, chat logs within the H-API platform, quiz results, and any internal knowledge or documentation you choose to upload to the platform).

Information we collect automatically

We automatically collect certain device and usage information when you use or interact with our Services, including:

  • Usage Data: Details about the Services you used, time spent, pages visited, and links clicked.
  • Device Data: IP address, browser type, operating system, and device identifiers.
  • Cookies: We collect this information through our Services and through technologies such as cookies. For more information, please review our Cookie Policy.

Information We Collect from Other Sources

We may receive information about you from other sources, such as recruitment agencies, public databases, social media platforms (e.g., LinkedIn), or your employer if they have purchased a license for you.


4. How We Use Your Personal Information (Legal Basis for Processing)

We use your personal information for purposes including:

  • Providing the Services: To operate, maintain, and provide the features of Hapi and Apex Academy services, including AI chat functionalities, Salesforce integration, and dynamic form creation.
  • Improving and developing the Services: To analyze trends and identify opportunities for improvement.
  • Securing the Services: To verify accounts, investigate suspicious activity, and enforce our terms.
  • Communicating with you: To send administrative information, respond to your inquiries (e.g., demo requests), and send marketing communications (where you have consented or where we have a legitimate interest).
  • Complying with legal obligations: To cooperate with public and government authorities, courts, or regulators in accordance with our legal obligations.

Legal Basis (GDPR): We rely on the following legal bases for processing your personal information:

  • Performance of a Contract: Where processing is necessary to provide the Services you requested.
  • Legitimate Interests: Where necessary for our legitimate business interests (e.g., security, improvement of services), provided these are not overridden by your interests or fundamental rights.
  • Consent: Where you have given us consent (e.g., for marketing or cookies).
  • Legal Obligation: Where necessary to comply with a legal obligation.

5. Disclosing Your Personal Information

We may disclose your personal information to third parties for legitimate purposes, including:

  • Service Providers: With vendors, consultants, and other third parties who provide services to us (e.g., hosting providers like AWS/Azure, payment processors, IT support, and AI model providers if required for functionality).
  • Affiliates: With companies within the Apex Academy corporate group.
  • Business Customers: If you access our Services as an authorized user of an institution or business, we may share data with them.
  • Legal Requirements: To comply with laws, respond to lawful requests, or protect our rights and safety.
  • Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

6. International Transfers

We are headquartered in Croatia. Your personal information may be stored and processed in the EU or in any other country where we or our service providers maintain facilities.

If we transfer personal information from the European Economic Area (EEA) to countries that do not offer an adequate level of protection, we rely on legal mechanisms such as the European Commission’s Standard Contractual Clauses to ensure your data remains protected.


7. Safeguarding Measures

We take reasonable organizational, technical, and physical measures intended to protect your personal information against accidental or unlawful destruction, loss, misuse, and unauthorized access. However, no security measure is 100% secure, and we cannot guarantee absolute security.


8. How Long We Store Your Personal Information

We will retain your personal information for as long as is necessary for the purposes it was collected, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements.


9. Third Party Websites

Our Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.


10. Your Privacy Rights

Depending on your location (particularly if you are in the EEA/UK), you may have the following rights regarding your personal information:

  • Right of Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ('Right to be Forgotten'): Request deletion of your personal information under certain conditions.
  • Right to Restrict Processing: Request that we limit the use of your data.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Object: Object to the processing of your data (e.g., for direct marketing).
  • Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data.

To exercise these rights, please contact us using the details in the "How to Contact Us" section below. You also have the right to lodge a complaint with a data protection authority (e.g., AZOP in Croatia).


11. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes by posting the new Policy on this page and updating the "Last Updated" date. We encourage you to review this Policy periodically.


12. How to Contact Us

If you have any questions about this Policy or our privacy practices, please contact us at:

Apex Academy
Antuna Gustava Matoša 56
Split, 21000, Croatia

Email: info@apexacademy.hr