Privacy Policy

Indexium Labs ("we", "us", or "our") operates the Indexaro platform at indexaro.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using Indexaro, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Information you provide

• Account information: Name, email address, and hashed password when you register.
• Payment information: Processed entirely by Stripe. We store only a Stripe customer ID — no card numbers are stored on our servers.
• Website data: Domain names, sitemaps, and URLs you submit for indexing.
• OAuth credentials: Google and Yandex OAuth tokens used to connect Search Console properties. These are encrypted at rest using AES-256-GCM.
• Service account credentials: GCP service account JSON files, stored encrypted.

Information collected automatically

• Usage data: Pages viewed, features used, submission history.
• Log data: IP addresses, browser type, timestamps, and error reports.
• Cookies: Session tokens and preference cookies. See our Cookie Policy for details.

• Provide and operate the Indexaro Service
• Process URL submissions to search engine APIs on your behalf
• Send transactional emails (verification, billing receipts, trial notifications)
• Monitor service health and debug issues
• Comply with legal obligations
• Prevent fraud and abuse

We do not sell your personal data to third parties.

We share data only with trusted third-party service providers necessary to operate the Service:

• Stripe — payment processing (stripe.com/privacy)
• Google — Search Console API, Indexing API, OAuth authentication
• Resend — transactional email delivery
• Sentry — error monitoring (anonymized stack traces)
• Cloudflare — DDoS protection and CAPTCHA

We may disclose your information if required by law, court order, or to protect the rights and safety of Indexium Labs, Indexaro, and its users.

We retain your account data for as long as your account is active. Submission history and analytics are retained for up to 2 years. When you delete your account, we anonymize or delete your personal data within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Receive your data in a machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Right to Erasure (GDPR Article 17)

You have the right to request the deletion of your personal data at any time. You can exercise this right in two ways:

• Self-service: Delete your account from your dashboard settings. This triggers deletion of your personal data.
• By email: Send a deletion request to [email protected] from the email address associated with your account.

Upon receiving a valid erasure request, we will delete or irreversibly anonymize your personal data — including account information, encrypted credentials, and submission history — within 30 days. We will confirm completion by email. Limited data may be retained where required by law (for example, invoices for tax purposes), and we will tell you what is retained and why.

We implement industry-standard security measures including AES-256-GCM encryption for credentials at rest, TLS 1.3 for all data in transit, bcrypt for password hashing, and regular security audits. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

The Service is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a banner in the dashboard. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact us:

• Email: [email protected]
• Company: Indexium Labs