Privacy Policy

This Privacy Policy explains how Indexor ("we", "us", "our") collects, uses, and protects your personal information when you use our website at indexor.ai and our application at app.indexor.ai (collectively, the "Service"). This policy applies to you as a user of the Service. It does not cover the brand data that we analyze on your behalf, which is governed by our Terms of Service.

1. Information We Collect

1.1 Information you provide

• Account information: email address, name, and password when you create an account
• Organization information: team name, brand name, website URL, and keywords you submit during onboarding
• Payment information: billing details processed by Stripe. We do not store your credit card numbers on our servers
• Communications: messages you send to us via email or support channels

1.2 Information collected automatically

• Usage data: pages visited, features used, actions taken within the application, timestamps
• Device information: browser type, operating system, screen resolution, language preference
• Network information: IP address, approximate geographic location (country/region level)
• Cookies and similar technologies: see Section 6 below

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process payments and manage subscriptions
• Send transactional communications (account confirmations, billing notices, security alerts)
• Send product updates and marketing communications (you can opt out at any time)
• Analyze usage patterns to improve the user experience
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We do not use your personal information or brand data to train AI or machine learning models.

3. How We Share Your Information

We do not sell your personal information. We share it only with the following categories of service providers, strictly for the purposes described in this policy:

We may also disclose your information if required by law, legal process, or to protect the rights, safety, or property of Indexor, our users, or the public.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms).

Anonymized and aggregated data that cannot identify you may be retained indefinitely for analytics and product improvement.

5. Data Security

We implement industry-standard technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Access controls and authentication for internal systems
• Regular security reviews of our infrastructure
• Third-party providers with SOC 2 compliance (Supabase, Stripe)

No system is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you promptly in accordance with applicable laws.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Service. Here is what we use:

You can manage your cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service. Analytics cookies are loaded only after you accept them via our cookie banner.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate data
• Deletion: request that we delete your personal data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing of your data for marketing purposes
• Restriction: request that we limit processing of your data
• Withdrawal of consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at contact@indexor.ai. We will respond within 30 days.

7.1 For European Economic Area (EEA) and UK residents

We process your data under the following legal bases as defined by the GDPR:

• Contract performance: to provide the Service you subscribed to
• Legitimate interest: to improve the Service, ensure security, and communicate with you
• Consent: for analytics cookies and marketing communications
• Legal obligation: to comply with applicable laws

If your data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

7.2 For California residents

Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request its deletion, and opt out of the sale of your data. We do not sell personal information. To exercise your rights, contact us at contact@indexor.ai.

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, you can reach us at:

Email: contact@indexor.ai