Privacy Policy

1. Information We Collect

We collect only what's needed to operate your account and the service:

• Account information: your name and email address when you create an account.
• Authentication information: a securely hashed password for email/password accounts, or basic profile information (name, email) from Google if you sign in with Google.
• Submitted URLs: URL indexing is not currently available for public use. If and when that functionality is made available, URLs submitted through it, their submission status, and history of status changes may be processed to provide the service.
• API usage information: IndexVexa API access is not currently available. If and when it is, we would log the endpoint called, status code, and URL count per request for accounts using it — not request or response bodies.
• Credit and payment transaction information: paid features are not currently available. Payment and transaction information (amount, currency, status, and identifiers returned by our payment processor) may be processed when paid services are made available and a user completes a transaction. We do not store your full card or UPI details ourselves — those are handled directly by our payment processor.
• Security and rate-limit information: IP address and timestamps for sign-in and sign-up attempts, used only to detect and slow down abusive request patterns.
• Notifications and account activity: in-app notifications about your account and its security, and, once applicable services are available, about your submissions and credits.
• Session technology: a session cookie that keeps you signed in, generated by our authentication system.
• Images uploaded to Reverse Image Search: when you use the free Reverse Image Search tool, the image you upload is sent through our server to our reverse-image-search provider to perform the search (see Third-Party Services below). We do not permanently store the uploaded image itself. We do cache the resulting search links (title, source, thumbnail — not the image) for a short period, keyed to the image's content, so that searching the same image again doesn't require a repeat request to the provider.

2. How We Use Your Information

We use this information to operate your account, provide the free SEO tools, send account-related notifications, keep the service secure (including rate-limiting abusive requests), and provide support when you contact us. Once URL indexing and paid features are available, the same account information will also be used to process URL submissions, maintain credit balances, and process payments for users of those services. We do not sell your information.

3. Data Retention

We retain account, submission, and transaction data for as long as your account is active, and afterward as needed to meet legitimate business, accounting, or legal requirements — for example, payment records tied to completed transactions are kept as a historical record and are not altered or deleted on request.

4. Security

Passwords are stored as salted hashes, never in plain text. API keys are stored hashed. Access to your account data is restricted to what's needed to operate the service, and administrative access is limited to authorized personnel. No method of storage or transmission is completely secure, but we take reasonable, industry- standard measures to protect your information.

5. Your Rights & Data Requests

You can update your name and password directly from your dashboard (API key and IP whitelist management will be available there once URL indexing launches). To request a copy of your data, ask a question about what we hold, or request account deletion, contact us using the details below.

6. Third-Party Services

We rely on a small number of third-party services to operate IndexVexa:

• Razorpay — may be used to process card and UPI payments on our behalf for paid IndexVexa services when those services are available. No paid services are publicly available today.
• Google — if you choose to sign in with Google, Google shares your basic profile information (name, email) with us to create or sign you into your account.
• Search engine indexing APIs — when URL indexing services are available and a user submits URLs through them, IndexVexa may send relevant submission data to the third-party search engine APIs required to fulfil that request. No URL submissions are currently possible.
• SerpApi — powers the free Reverse Image Search tool. When you upload an image to that tool, it is sent to SerpApi, which uses Google Lens to perform the search and return results to us. SerpApi's handling of that image is governed by its own privacy policy, available at serpapi.com/legal.

7. Cookies & Session Technology

We use a session cookie strictly to keep you signed in. Your selected display currency is stored in your browser's local storage, not a cookie, purely as a display preference — it never changes account pricing or credit amounts. We do not use advertising or third-party tracking cookies.

8. Changes to This Policy

We may update this policy as the service changes. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

For questions about this policy or your data, use our contact form.