Privacy Policy

1. Information We Collect

We collect only what's needed to operate your account and the service:

• Account information: your name and email address when you create an account.
• Authentication information: a securely hashed password for email/password accounts, or basic profile information (name, email) from Google if you sign in with Google.
• Submitted URLs: the URLs you submit for indexing, their submission status, and history of status changes.
• API usage information: if you use API access, we log the endpoint called, status code, and URL count per request — not request or response bodies.
• Credit and payment transaction information: your credit balance and transaction history, and payment records (amount, currency, status, and identifiers returned by our payment processor). We do not store your full card or UPI details ourselves — those are handled directly by our payment processor.
• Security and rate-limit information: IP address and timestamps for sign-in and sign-up attempts, used only to detect and slow down abusive request patterns.
• Notifications and account activity: in-app notifications about your submissions, credits, and account security.
• Session technology: a session cookie that keeps you signed in, generated by our authentication system.

2. How We Use Your Information

We use this information to operate your account, process your URL submissions, maintain your credit balance, process payments, send account-related notifications, keep the service secure (including rate-limiting abusive requests), and provide support when you contact us. We do not sell your information.

3. Data Retention

We retain account, submission, and transaction data for as long as your account is active, and afterward as needed to meet legitimate business, accounting, or legal requirements — for example, payment records tied to completed transactions are kept as a historical record and are not altered or deleted on request.

4. Security

Passwords are stored as salted hashes, never in plain text. API keys are stored hashed. Access to your account data is restricted to what's needed to operate the service, and administrative access is limited to authorized personnel. No method of storage or transmission is completely secure, but we take reasonable, industry- standard measures to protect your information.

5. Your Rights & Data Requests

You can update your name and password, and manage API keys and IP whitelisting, directly from your dashboard. To request a copy of your data, ask a question about what we hold, or request account deletion, contact us using the details below.

6. Third-Party Services

We rely on a small number of third-party services to operate IndexVexa:

• Razorpay — processes card and UPI payments on our behalf.
• Google — if you choose to sign in with Google, Google shares your basic profile information (name, email) with us to create or sign you into your account.
• Search engine indexing APIs — submitted URLs are sent to the relevant search engine indexing endpoints to fulfil your submission request.

7. Cookies & Session Technology

We use a session cookie strictly to keep you signed in. Your selected display currency is stored in your browser's local storage, not a cookie, purely as a display preference — it never changes account pricing or credit amounts. We do not use advertising or third-party tracking cookies.

8. Changes to This Policy

We may update this policy as the service changes. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

For questions about this policy or your data, use our contact form.