Privacy Policy

Apex Amplify, Inc. is the controller of personal information collected through bankable.one and the Services. Our principal U.S. office is 30 N Gould St, Ste 100, Sheridan, WY 82801. Cross-border advisory is delivered by our affiliate Omnia Capital Partners Ltd. (Toronto, Ontario, Canada; Stockholm, Sweden), which acts as an independent controller for engagements it originates.

This Policy applies to bankable.one and all subdomains, our marketing pages, our client portal, our fundability scan, our assessment intake, and any interactions with our personnel by email, phone, SMS, or scheduled meeting. It does not apply to third-party websites we link to; those are governed by their own privacy notices.

• IdentifiersName, business name, email, phone, mailing address, IP address, device identifiers, and account credentials.
• Commercial & Business InformationIndustry, entity type, years in business, revenue range, requested capital amount, use of proceeds, ownership structure, and vendor/lender relationships you disclose.
• Financial Information (limited)Voluntary information you provide during an engagement — e.g. bank statements, tax returns, debt schedules, and business credit reports. We do not knowingly collect consumer credit reports or Social Security numbers through public forms; sensitive documents are handled inside the encrypted client portal under an NDA.
• Professional InformationTitles, roles, LinkedIn profile URLs, and content you submit through the fundability assessment.
• Internet & Device ActivityPages viewed, referring URLs, search terms, time on page, clickstream, browser type, OS, screen size, and cookie/local-storage identifiers. See our Cookie Policy for detail.
• CommunicationsThe content of emails, SMS, chat, phone, and meeting notes you exchange with our team, subject to applicable recording and consent laws.
• InferencesFundability scores, capital-readiness signals, and lender-fit inferences derived from the information above.

We do not knowingly collect information from anyone under 18. The Services are directed to business owners and their authorized representatives.

• Directly from you (forms, portal uploads, meetings, email, phone, SMS).
• From your authorized representatives (accountant, attorney, bookkeeper).
• From service providers who host our site, portal, analytics, and email.
• From public and licensed data sources used for enrichment (Secretary of State filings, business credit bureaus you authorize us to query, domain WHOIS, search engines).
• From cookies and similar technologies deployed on bankable.one.

• Deliver, maintain, and improve the Services, including the fundability scan, assessment, portal, and any engagement you retain us for.
• Generate your Capital Readiness Score, Fundability Framework findings, and related reporting.
• Communicate with you about your account, engagements, quotes, invoices, appointments, and support.
• Send marketing communications you have not opted out of, and personalize what you see on bankable.one.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with law, respond to lawful requests, enforce our Terms of Service, and protect our rights.
• Aggregate and de-identify information for research, benchmarking, and product analytics; once de-identified, it is no longer personal information.

We do not use personal information for automated decision-making that produces legal or similarly significant effects without a qualified human reviewer in the loop.

Where GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract — to perform an engagement you have entered into.
• Legitimate interests — to operate, secure, and improve the Services, market to businesses, and protect our rights, balanced against your interests and rights.
• Consent — for non-essential cookies, certain electronic marketing, and processing of sensitive information you volunteer.
• Legal obligation — to comply with tax, accounting, and regulatory duties.

We disclose personal information to the following categories of recipients:

• Affiliates — Apex Amplify, Inc. and Omnia Capital Partners Ltd.
• Service providers under written contract — hosting, database, email, SMS, analytics, error monitoring, calendaring, payment processing, e-signature, document storage, and AI infrastructure providers.
• Advisors introduced with your consent — lenders, underwriters, sponsors, insurance carriers, or specialist counsel, only when you authorize the introduction in writing.
• Professional advisors — our attorneys, accountants, and auditors, under a duty of confidentiality.
• Corporate transactions — a successor entity in a merger, acquisition, financing, reorganization, or asset sale, subject to customary protections.
• Legal, safety, and enforcement — when required by law, subpoena, or court order, or when we reasonably believe disclosure is necessary to protect rights, safety, property, or the integrity of the Services.

We do not sell personal information for money. We do not share personal information with third parties for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.

We use strictly necessary cookies to run the site, and we use analytics and preference cookies only if you consent through our cookie banner. Details, categories, and opt-out instructions are in our Cookie Policy.

We honor Global Privacy Control ("GPC") signals as a valid opt-out of sale/sharing requests under applicable U.S. state privacy laws.

When we handle nonpublic personal financial information you voluntarily provide during an engagement, we treat it consistent with the safeguards principle of the Gramm-Leach-Bliley Act ("GLBA"). We use it solely to deliver the engagement, disclose it only to service providers under confidentiality obligations or to third parties you authorize, and retain it under a documented schedule. We do not share such information with non-affiliated third parties for marketing purposes.

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, tax, accounting, audit, and legitimate business requirements. Engagement working files are returned or destroyed on request following the close of the engagement, subject to any legal hold.

We maintain administrative, technical, and physical safeguards designed to protect personal information, including TLS in transit, encryption at rest for sensitive documents, role-based access controls, least-privilege provisioning, and vendor due diligence. No system is perfectly secure; you transmit information to us at your own risk, and we encourage you to protect your account credentials.

We are based in the United States and process personal information in the U.S. Our affiliate Omnia Capital Partners Ltd. processes information in Canada and Sweden. Where required, we rely on Standard Contractual Clauses, the UK IDTA, or equivalent transfer mechanisms and take supplementary measures to protect information transferred outside your jurisdiction.

Subject to verification and legal exceptions, you may have the right to:

• Know or access the personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of personal information.
• Receive a portable copy of personal information you provided.
• Opt out of "sale" or "sharing" as defined under state law — we do not engage in either, but we honor the request.
• Opt out of profiling that produces legal or similarly significant effects — we do not engage in such profiling.
• Limit the use of sensitive personal information — we do not use sensitive personal information beyond permitted business purposes.
• Appeal a denial of a request where state law provides an appeal right.

Submit requests to privacy@apexamplify.com or by mail to Apex Amplify, Inc., Attn: Privacy, 30 N Gould St, Ste 100, Sheridan, WY 82801. You may designate an authorized agent to act on your behalf; we will require written authorization and identity verification.

Notice of financial incentive: We do not offer financial incentives in exchange for personal information.

Data subjects in the EEA, UK, and Switzerland may have rights to access, rectify, erase, restrict, or object to processing, and to data portability, as well as the right to lodge a complaint with a supervisory authority. Contact the addresses above to exercise these rights.

By providing your email or phone number and consenting on the applicable form, you agree to receive transactional and, where permitted, marketing communications. Message and data rates may apply for SMS. Reply STOP to opt out of marketing SMS; email marketing includes a one-click unsubscribe. Where we record calls, we obtain any consent required by applicable federal and state two-party consent laws.

Our site does not respond to browser "Do Not Track" signals because no common standard has been finalized. We do honor Global Privacy Control (GPC) as described above.

We may update this Policy from time to time. Material changes will be highlighted at the top of this page and, where required, communicated by email. The "Last updated" date reflects the current version.

Apex Amplify, Inc. — Attn: Privacy Officer
30 N Gould St, Ste 100, Sheridan, WY 82801
Email: privacy@apexamplify.com
Phone: 760-410-9801