Privacy Policy

Last updated: 17 September 2026

1. Who we are

This policy covers personal data processed by aindexify.com. For anything in it, including the requests described in section 8, write to [email protected].

2. What we collect

You give us: your email address and password credentials when you register, and the URLs and project names you submit. Card details are entered with our payment provider and never reach our servers.

We generate: your credit balance and ledger, submission and delivery records, the results of index-status checks, and invoices and receipts for purchases.

Collected automatically: IP address, browser user-agent, and a non-reversible hash of four basic device characteristics (screen size, screen pixel density, timezone, language), recorded alongside security-relevant actions — signing up, submitting URLs, starting a purchase — and kept for at most 180 days. We use this solely for security, fraud prevention, and abuse response. When our systems flag suspicious activity, the relevant details (such as the account email and IP address involved) are delivered to our operations team through our messaging provider.

Note that a URL can itself be personal data, or reveal commercially sensitive plans, if it points at an unpublished page. Treat what you submit accordingly.

3. How we use it

To operate the Service — authenticating you, delivering your URLs to the indexing pipeline, checking their index status, and showing you the results and history. To take payment, issue invoices and meet tax obligations. To keep the Service secure and prevent abuse. To send service messages such as confirmations and receipts. We do not sell personal data, and we do not use your submitted URLs to train models or to build profiles.

4. Legal bases

Where the GDPR or UK GDPR applies: performance of a contract for operating the Service and taking payment; legal obligation for tax and accounting records; and legitimate interests for security, abuse prevention, service improvement and measuring whether our advertising works, balanced against your rights. Where we rely on consent, you can withdraw it at any time.

5. Who receives it

We share data only with providers that process it on our instructions: cloud hosting and managed database and authentication; a network and security layer sitting in front of the site; a payment processor, which receives billing details directly from you; an email delivery provider; the accelerated indexing provider, which receives the URLs you submit; and a search-data provider used to check whether a URL appears in public results, which likewise receives the URL. An itemised, named list is available on request.

If you order a Reddit placement add-on, the brief you write for it — the product, the audience, the URL and the message, with any notes you add — is passed to our placement partner, who processes it on our instructions and only to write and publish the placements you ordered. Your account email is not part of the brief.

We advertise on X (formerly Twitter). To learn which ads lead to sign-ups and purchases, X Corp. receives a limited set of data when you sign up, submit URLs or buy credits: an X click identifier if you arrived from an X ad, a one-way SHA-256 hash of your account email (never the address itself), and, for sign-ups and submissions, your IP address and browser user agent. X never receives the URLs you submit. X uses this data under its own privacy policy, and may match it to an X account you hold.

We may also disclose data where the law requires it, or to establish or defend legal claims.

6. Cookies

We set what the Service needs to work: a session cookie that keeps you signed in, and security cookies set by the network layer in front of the site. We also use Google Tag Manager to load Google Analytics, which sets cookies that tell us how the site is used — which pages are visited, and from where — so we can improve it.

Every page also loads the X advertising pixel, which sets a cookie recording whether you arrived from an X ad and reports page visits and the conversions described in section 5 to X. X can also read an email address typed into a form on the page and send X a hashed form of it. We do not sell personal data. You can block the pixel and these cookies with your browser or an extension without losing any part of the Service, control ad personalisation in your X account settings, or object to this measurement by writing to [email protected].

7. How long we keep it

Account data for as long as your account exists. Raw check payloads and older check records are pruned on a schedule, since the summarised result is what remains useful. Server logs are kept short-term for security. Billing and tax records are kept for the period the law requires — commonly seven years — even after an account is deleted, because that obligation outlives the account.

8. Your rights

Subject to the law that applies to you, you may request access to your data, correction, deletion, a portable copy, restriction of processing, or object to processing based on legitimate interests. Deleting your account from settings removes your projects, submissions and check history; remaining credits are forfeited, as set out in the Terms of Service. For anything beyond self-service, write to [email protected]. We answer within one month. If you are unhappy with the outcome you may complain to your local data-protection authority.

9. International transfers

Our providers operate in the United States and the European Union, so data may be processed outside your country. Where data leaves the UK or EEA we rely on the transfer mechanisms our providers put in place, such as Standard Contractual Clauses.

10. Security

Traffic is encrypted in transit. Access to the database is scoped per account at the database itself, so one customer’s records are not reachable through another’s session. Passwords are handled by our managed authentication provider and never stored by us in readable form. No system is perfectly secure, and we do not claim otherwise; if a breach affects your data we will notify you and the relevant authority as the law requires.

11. Children

The Service is for business use and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, write to [email protected] and we will delete it.

12. Changes

We may update this policy. The date above changes when we do, and we will give notice of material changes by email or in the application.

13. Contact

Privacy questions and requests: [email protected]. Anything else: [email protected].