Privacy Policy

ApproveKit is a service of WyeTech LLC, a Wyoming limited liability company, 30 N Gould St, Ste R, Sheridan, WY 82801, USA ("WyeTech", "we"). This policy covers the ApproveKit website, the MCP server at approvekit.dev, and our handling of the data we receive to provide the service. It does not cover the content of the pages our customers publish through the service (see "Customer pages").

1. Who we serve

ApproveKit is a business tool for software developers and companies. It is not directed to anyone under 18, and we do not knowingly collect data from minors.

2. Data we collect

• App inventory, sent by your coding agent: app name, the developer name and support email you provide, platforms, categories of data your app collects, SDK names, permissions and Google OAuth scopes. We do not receive or store your source code.
• Order records: which package was purchased for which app, when, and the Stripe identifiers of the transaction. Payments are processed by Stripe, Inc., which acts as an independent controller of your payment data (card number, billing details) under its own privacy policy. We never see your card number.
• Generated documents, including the final text you publish through the service.
• Support correspondence you send to support@approvekit.dev.
• Technical logs: IP address, timestamp, endpoint and response status, used for security, abuse prevention and rate limiting.

The website sets no cookies and runs no analytics or advertising trackers.

3. Why we process it and on what basis

• To run the audit, generate and host the documents you bought, and provide support: performance of our contract with you.
• To secure the service, prevent abuse and enforce our terms: our legitimate interest in operating a safe service.
• To keep tax and accounting records of payments: legal obligation.

We do not sell personal data, do not share it for advertising, and do not use it to train machine-learning models.

4. Processors

• Cloudflare, Inc. (USA): hosting, storage, DNS, email forwarding and security.
• Anthropic, PBC (USA): generates documents from app inventories through the Claude API. Under Anthropic's commercial terms, data sent through the API is not used to train Anthropic's models.
• Stripe, Inc. (USA): payment processing.
• Google LLC (USA): the mailbox that receives support email.

5. International transfers

We are based in the United States and process data there. If you are in the European Economic Area, the United Kingdom or Switzerland, transfers to our processors are covered by their standard contractual clauses or equivalent safeguards, and the transfer to us is necessary to perform the contract you requested.

6. Retention

• App inventories, orders and generated documents: while your app has published pages, and 12 months after the last activity on the app.
• Technical logs: 30 days.
• Payment and tax records: 7 years, as required by law.
• Support correspondence: 24 months.

7. Your rights

You may ask us to access, correct, export or delete the personal data we hold about you, or object to a processing based on legitimate interest. Write to support@approvekit.dev from the email address used at checkout; we answer within 30 days. Residents of the EEA, the UK and Switzerland may also complain to their supervisory authority. Residents of California and other US states with privacy laws have the rights those laws provide, and we do not sell or share personal data as those laws define it. Deleting an app removes its hosted pages; keep your own copy of anything you still need.

8. Customer pages

Pages served at <app>.approvekit.dev are published by our customers about their own apps. The customer named on each page is responsible for its content and for the requests of its users. If you are an end user of one of those apps, contact the developer listed on the page.

9. Security

Data is encrypted in transit and at rest. App tokens are stored only as cryptographic hashes, and service credentials are kept as encrypted secrets outside the code base. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.

10. Changes

We may update this policy. The date below shows the current version; material changes are announced on this page before they take effect.

11. Contact

WyeTech LLC, a Wyoming limited liability company, 30 N Gould St, Ste R, Sheridan, WY 82801, USA · support@approvekit.dev

Last updated: 2026-09-30