Privacy Policy

1. Information We Collect

We collect account information (name, email address, hashed password), website URLs you submit for crawling, usage data (crawl counts, page counts, feature usage), and billing information. Payment details are processed by our payment processor, Lemon Squeezy — we do not store card numbers or payment credentials on our servers.

2. How We Use Your Information

We use your information to provide and improve the service, send transactional emails (crawl complete notifications, billing receipts, account alerts), respond to support requests, and enforce our Terms & Conditions. We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data Storage

Sitemap files are stored on Cloudflare R2 (US-based CDN). Account and application data is stored in our database hosted on Hetzner Cloud (EU). We retain your data for the duration of your account plus 30 days following account deletion, after which all personal data is permanently removed.

4. Cookies

We use session cookies for authentication and preference storage only. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You may disable cookies in your browser, but this will prevent you from logging in to the service.

5. Third-Party Services

We use the following third-party services, each with their own privacy policy: Lemon Squeezy (payment processing), Cloudflare (CDN and DNS), Resend (transactional email delivery), and Sentry (error tracking and performance monitoring). We recommend reviewing their respective privacy policies.

6. Your Rights

You may request a copy of your personal data, correction of any inaccuracies, or deletion of your account at any time by contacting [email protected]. We will respond to all data requests within 30 days.

7. GDPR

For EU/EEA users: indexly acts as a data processor for your website URLs (you are the data controller) and as a data controller for your account information. The legal basis for processing your account data is contractual necessity (service delivery). You have the right to access, rectify, erase, restrict, and port your data under the GDPR.

8. Contact

Privacy questions? Contact us at [email protected].