Privacy Policy
Last updated 2026-10-28.
Who we are
Apextra is a web design and technology studio based in Auckland, New Zealand. This policy explains what we collect through this website and what we do with it.
What we collect
If you send us an enquiry we collect the name, email, phone number and message you provide. We also collect standard analytics about how the site is used: pages viewed, approximate location, device and referring source. We do not collect payment details through this website.
The AI assistant
Orbit, the assistant on this site, is an AI, not a person. What you type to it is kept for up to 30 days so we can see what visitors ask and improve the answers. If you give it your name, email or phone number, those details and a short summary of the conversation go into our customer records so a person can follow up. If you enter a website address to see it with an AI on it, we read that site's public pages to build the preview. Replies are generated by Anthropic's Claude model, which processes your messages to answer them.
Why we collect it
To reply to you, to deliver work you have engaged us for, and to understand which parts of the site are useful. We do not sell your information, and we do not share it except with the service providers needed to run this site and our business.
Who we share it with
HubSpot (where enquiries are stored), Google (Analytics and Ads), Meta (Facebook and Instagram ads), Anthropic (the AI assistant) and Cloudflare (hosting). These companies are based outside New Zealand, so your information may be stored overseas. They are bound by their own privacy terms and only process it to provide their service to us.
Your rights
Under the Privacy Act 2020 you can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email us and we will action it.
Cookies and advertising
This site uses cookies and similar tags from Google Analytics, Google Ads, Meta and HubSpot to count visits, see which ads and pages bring enquiries, and show our ads to people who have visited before. When you send a form, your email address is scrambled (hashed) in your browser before it is sent to Google, so Google can match it to an ad click without receiving the address itself.
You can block these cookies in your browser settings and the site will still work. You can also turn off personalised ads at adssettings.google.com and in your Facebook ad preferences.
Changes
If this policy changes we will update the date at the bottom of this page.
Tell us what is not working.
A 30-minute call, then a one-page diagnosis in writing within two working days: what we would do first, and whether you need us at all.