Cookie Policy
Last updated: 16.07.2026
1. About this Policy
This Cookie Policy explains how Apilex Teknoloji A.Ş., operating as Apilex ("Apilex", "we"), uses cookies and comparable technologies on www.apilex.ai and app.apilex.ai (together, the "Platform"), and how you control them.
The Platform has two distinct environments. www.apilex.ai is our public website. app.apilex.ai is the authenticated platform, accessible only after you sign in, in which our subscribers carry out legal work. Analytics and advertising technologies are used only on the public website. They are not deployed in the authenticated platform, and no analytics or advertising provider receives the content you enter into, or the documents you upload to, the platform. This separation exists because that content may be subject to professional secrecy obligations owed by our subscribers to their own clients.
It forms part of our Privacy Policy, which you should read alongside it. The Privacy Policy sets out who we are and how to reach us, the legal bases on which we process personal data and how long we keep it, the recipients we share it with, the safeguards applied to transfers outside the EEA, and your data protection rights. This Policy covers only the cookie-specific detail: what is stored on your device, why, for how long, and how to accept or refuse it. Where this Policy and the Privacy Policy address the same matter, the Privacy Policy prevails.
This Policy is drafted to comply with the GDPR and with Article 5(3) of the ePrivacy Directive (2002/58/EC, as amended by Directive 2009/136/EC). The national provisions implementing that Directive in each EU/EEA Member State are reserved and apply in addition; where a national provision is stricter or more specific, it prevails for users in that country.
2. Cookies and comparable technologies
A cookie is a small text file that a website places on, or reads from, your device through your browser. Alongside cookies we and our providers use technologies that work the same way, and references to "cookies" in this Policy include all of them: browser cookies, local and session storage entries, pixels, tags and web beacons, and comparable identifiers in mobile or embedded applications.
The identifiers these technologies contain, alone or combined with information such as your IP address or device characteristics, can allow you to be singled out. Where that is the case they are personal data under Article 4(1) GDPR and we treat them as such. We do not claim that information stored in this way is anonymous.
3. When we need your consent, and how you control it
We place cookies that are strictly necessary to deliver the Platform without asking you, because Article 5(3) of the ePrivacy Directive exempts them: logging you in, keeping your session secure, holding data you have entered in a form, remembering the interface language you selected, and recording your cookie choice. These cannot be switched off, and we never use them for marketing.
Every other cookie, whether functional, analytics or advertising, is placed only on the basis of your consent under Article 6(1)(a) GDPR. That consent is prior (nothing non-essential is placed before you choose), informed (the purposes and the third parties involved are set out in section 4, before you are asked to choose), granular (you accept or refuse each category separately), freely given (refusing is as easy as accepting and does not restrict your access), and withdrawable at any time. Continuing to browse, scrolling or closing the banner is not consent.
You can review, change or withdraw your choices at any time through our cookie settings panel on this page and from the footer of every page. Withdrawal takes effect immediately for future storage and does not affect the lawfulness of processing already carried out. We keep a record of your choice for six months so that we can honour it and demonstrate compliance under Article 7(1) GDPR, and we will ask you again once that period expires or if the purposes or providers change.
4. Cookies used on the Platform
Category A is exempt from consent; categories B, C and D are placed only with your consent. Categories A and B relate to both the public website and the authenticated platform. Categories C and D are used only on the public website. We review and update this list whenever we add, remove or change a tool.
| Provider | Cookie / storage key | Purpose | Category | Party | Storage duration |
|---|---|---|---|---|---|
| A. STRICTLY NECESSARY (no consent required) | |||||
| Apilex | locale | Remembers the interface language you have selected (tr / en / fr / de). | User-interface customisation | First party | 1 year |
| Apilex | apilex-locale | Stores your language preference in the browser. | User-interface customisation | First party | 1 year |
| Apilex | i18nextLng | Remembers the language selected for the user interface. | User-interface customisation | First party | For the duration of your subscription |
| Apilex | apilex-cookie-consent | Stores your cookie consent choice so that it can be honoured and evidenced. | Consent record | First party | 6 months |
| Apilex | apilex-cookie-consent-date | Stores the date on which your consent choice was given. | Consent record | First party | 6 months |
| Apilex | refreshToken | Manages session renewal and secure authentication. | Authentication | First party | Session |
| Apilex | apilex_session_tokens | Holds access and refresh tokens within the browser tab. | Authentication | First party | Session |
| Apilex | persist:root | Stores your profile data and session state so the platform works across page loads. | Authentication / service delivery | First party | For the duration of your subscription |
| Apilex | apilex_checkout_purchase_payload | Retains the data you enter during checkout until the purchase is completed. | User input | First party | Session |
| Apilex | apilex_email_change_verify | Temporarily holds the data required for the e-mail verification flow. | User input | First party | Session |
| B. FUNCTIONAL / PREFERENCE (consent required) | |||||
| Apilex | accessibility-mode | Stores your preferences in the accessibility settings. | Preference | First party | For the duration of your subscription |
| Apilex | assistant-panel-layout | Remembers your personalised layout of the assistant panel. | Preference | First party | For the duration of your subscription |
| Apilex | local-assistant-country-settings | Stores the assistant's country- and source-based settings. | Preference | First party | For the duration of your subscription |
| Apilex | calendar.removeConfirm.skip | Stores your preference to skip the calendar deletion confirmation step. | Preference | First party | For the duration of your subscription |
| Apilex | ictihat-validation-status | Tracks the current status of case-law validation operations. | Preference | First party | For the duration of your subscription |
| Apilex | apilex.assistantChosenOverAgent | Stores, for the session, your preference between the assistant and the agent. | Preference | First party | Session |
| Apilex | assistantSessionId | Holds the identifier of the active assistant session. | Preference | First party | Session |
| Apilex | highlihtedPart | Temporarily stores the text areas to be highlighted within a document. (Key name as implemented.) | Preference | First party | Session |
| Google (Sign-In / Drive) | SID, HSID, SSID | Enables sign-in with a Google account and the Google Drive integration. | Preference / integration | Third party | For the duration of your subscription |
| C. ANALYTICS (consent required) | |||||
| Google Tag Manager | GTM (dataLayer) | Central management of marketing and analytics tags. | Tag management | Third party | Session |
| Google Analytics 4 | _ga | Distinguishes visitors and enables statistical reporting. | Analytics | Third party | 1 year |
| Google Analytics 4 | _ga_<id> | Maintains the state of the current session. | Analytics | Third party | 1 year |
| Google Analytics 4 | _gid | Helps distinguish individual users. | Analytics | Third party | 24 hours |
| Google Analytics 4 | _gat | Throttles the request rate in order to balance data traffic. | Analytics | Third party | 1 minute |
| Microsoft Clarity | _clck | Analyses site traffic and visit intensity. | Analytics | Third party | 1 year |
| Microsoft Clarity | _clsk | Aggregates page navigation within the same session. | Analytics | Third party | 1 day |
| Microsoft Clarity | CLID / MUID | Measures visits and general behavioural trends. | Analytics | Third party | 1 year |
| Microsoft Clarity | ANONCHK / SM | Carries out session synchronisation and validation. | Analytics | Third party | 10 minutes / session |
| D. ADVERTISING (consent required) | |||||
| Google Ads | _gcl_au | Used to measure advertising conversions. | Advertising | Third party | 90 days |
| Meta (Facebook) Pixel | _fbp | Tracks advertising conversions and measures campaign performance. | Advertising | Third party | 90 days |
| Meta (Facebook) Pixel | _fbc | Measures advertising clicks (fbclid). | Advertising | Third party | 90 days |
| Meta (Facebook) Pixel | fr | Used in advertising targeting and measurement. | Advertising | Third party | 90 days |
5. Third parties
Where you consent to functional, analytics or advertising cookies, the following providers receive data collected through them and may process it as controllers in their own right, under their own privacy notices:
- Google: Tag Manager, Analytics 4, Ads, and the Google Sign-In and Drive integrations;
- Microsoft: Clarity;
- Meta: the Meta (Facebook) Pixel.
These providers may process data outside the EEA. The transfer safeguards we rely on, namely adequacy decisions, the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses, are described in Section 5 of our Privacy Policy, and the safeguards applicable to each provider are set out in our Sub-Processor List. You may request further detail, or a copy of the relevant clauses, at privacy@apilex.ai.
6. Managing cookies in your browser
Independently of our cookie settings panel, every common browser lets you see which cookies are stored, delete them individually or in bulk, and block them in general or by site. These controls sit in the browser settings under a heading such as "Privacy and security" or "Cookies and site data". Because the menu paths change between versions, we recommend your browser's own help centre for current instructions. Browser controls apply per browser and per device, so you will need to repeat your choices on each one.
You may also use www.youronlinechoices.eu to manage interest-based advertising from participating companies, or a tracker-blocking browser extension. On mobile, your device's privacy settings let you reset or limit the advertising identifier.
If you refuse functional cookies you can continue to use the Platform, but some features may be limited or may need to be set again on each visit. Strictly necessary cookies cannot be refused through our settings panel; blocking them at browser level will stop the Platform working correctly.
7. Your rights, changes and contact
Your rights of access, rectification, erasure, restriction, portability and objection, your right to withdraw consent, and your right to lodge a complaint with a supervisory authority are set out in full in Section 7 of our Privacy Policy. Our identity and contact details, including our Data Protection Officer and our representative in the Union under Article 27 GDPR, are in Section 9 of our Privacy Policy.
For anything relating to this Policy, contact us at privacy@apilex.ai.
We may update this Policy to reflect changes in the technologies we use, our providers, or the applicable law. The version number and date at the top indicate the current version. Where a change concerns the purposes for which cookies are used or the providers involved, we will ask for your consent again before it takes effect.