Apex Surge: Privacy Policy

Effective date: October 16, 2026 · Last updated: October 24, 2026

Apex Surge ("we," "us") is a brand of Alouette Studio LLC, a California limited liability company. This policy explains what we collect when you use apexsurge.co and related services (the "Services"), what we do with it, and the choices you have.

Contact: Alouette Studio LLC, 575 Los Altos Ave, Los Altos, CA 94022 · hello@apexsurge.co

1. Who can use Apex Surge

The Services are only for people 18 or older. We don't knowingly collect information from anyone under 18. If you think a minor gave us information, email hello@apexsurge.co and we'll delete it.

2. What we collect

Email and age confirmation: your email address and that you confirmed you're 18 or older. If you create an account, we sign you in with a one-time code sent to your email (no password).
Quiz answers: the goals you pick, your style, optional details about each goal, an optional date and occasion, time per day, budget, ZIP code (optional), and face shape and hair preferences.
Where you came from: the link or code that brought you here, and a referral code if a friend shared one.
Link clicks: when you tap a product, service or booking link in your plan, we record the time, the item, and a short code tied to your plan. A small first-party cookie on our link-redirect path remembers that code.
Account (only if you sign in): your email, when you confirmed you're 18+, the goals you saved and your plan.
Usage and device data: pages viewed, browser and device type, and approximate location from your IP address, collected by our analytics provider (HeyCatch) using a random ID stored in your browser. Text you type isn't recorded.
Messages: what you send to hello@apexsurge.co.

We do not collect photos or payment card information. If we add photo analysis, we'll ask you first. Retailers handle purchases on their own sites.

3. What stays on your device

Your answers about prescriptions, changing moles, hair thinning, breakouts and sleep, and anything you type in "In your own words", are used only in your browser to shape your plan. We never receive them.

4. How we use information

To build and personalize your plan, keep accounts secure and prevent abuse, understand and improve how the Services are used, send you updates (only if you joined, and you can unsubscribe anytime), and comply with law.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (CCPA/CPRA). We have not done so in the past 12 months. We don't use advertising pixels.

We disclose information only to:

Service providers that run the Services for us: Vercel (hosting), Neon (account database), Google (where sign-up records are stored), and HeyCatch (site analytics). HeyCatch records page visits and sign-up and quiz-step events, never what you type into forms.
Our partner salon, Destiny's Glam Bar in San Jose. When you tap a booking link, they receive the date and time of the tap, the artist, the service and your plan code. Never your name or email.
Authorities, when the law requires it or to protect rights and safety.
A successor, if the business is reorganized or sold (with notice to you).

6. Do Not Sell or Share My Info and Global Privacy Control (GPC)

We honor the Global Privacy Control signal. If your browser sends GPC, we treat it as a request to opt out of sale and sharing, and we turn off site analytics for that browser. We don't sell or share data anyway, so GPC simply confirms that setting. You can also record an opt-out request by emailing hello@apexsurge.co.

7. "Delete my info" and your other rights

Delete: email Delete my info, or if you have an account, use Delete my info on your account page. We delete your personal information within 30 days of a verified request, except limited records the law requires us to keep.
Know/access, correct, and portability: email hello@apexsurge.co to request a copy of your information or to fix it.
Unsubscribe anytime with the link in any email, or at /unsubscribe.
No discrimination: using your rights won't change the service you get.
Verification and agents: we may confirm your request through your email. An authorized agent may act for you with written permission.

We respond within 45 days, as California law requires (the 30-day deletion commitment above still applies).

8. How long we keep information

We keep your information while you use the Services and until you ask us to delete it. We delete it within 30 days of a verified request.

9. Security

We use reasonable safeguards, including encrypted connections (HTTPS) and access controls. No system is perfectly secure.

10. Not medical advice

Apex Surge gives general beauty and grooming information. It is not medical advice and doesn't diagnose or treat any condition. See our Terms.

11. Affiliate links and third-party sites

Some links are affiliate links (for example Amazon and Skimlinks). If you buy through them, we may earn a commission at no extra cost to you. As an Amazon Associate, we earn from qualifying purchases. When you leave our site, the retailer's own privacy policy applies, and it may use cookies to know you came from us.

12. Changes

We'll post any update here and change the "Last updated" date. If a change is significant, we'll give notice on the site or by email.

13. Contact

Alouette Studio LLC, 575 Los Altos Ave, Los Altos, CA 94022 · hello@apexsurge.co