Privacy Policy

Effective Date: March 12, 2026

IndexNow Studio ("we," "us," or "our") operates the index-now.dev website and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use our Service, we collect:

• Full name
• Email address
• Phone number
• Country of residence
• Account password (stored as a cryptographic hash — we never store plaintext passwords)
• Any keywords, domains, or URLs you submit for tracking and indexing

1.2 Payment Information

We use Paddle as our payment processor. When you purchase a subscription, Paddle collects and processes your payment information (such as credit card number, billing address, and transaction details) directly. We do not store your full payment card details on our servers. We receive from Paddle your transaction ID, subscription status, billing period, currency, and amount paid.

1.3 Information Collected Automatically

When you access the Service, we automatically collect:

• IP address
• Browser type and version (user agent)
• Device type (desktop, mobile, tablet)
• Pages visited and actions taken within the Service
• Date and time of access
• Referring URL
• Operating system

1.4 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential cookies: Required for authentication and session management (Supabase auth cookies)
• Analytics cookies: Used by PostHog and Google Analytics to understand usage patterns (only with your consent)
• Marketing cookies: Used by Google Tag Manager for advertising measurement (only with your consent)

You can manage your cookie preferences through the cookie consent banner displayed when you first visit our site. You may also configure your browser to block cookies, though this may affect functionality.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service, including keyword rank tracking, URL indexing, and SEO intelligence features
• To process your subscription payments and manage your account
• To send transactional emails such as account verification, password resets, job completion notifications, and billing receipts
• To send quota alerts and service notifications you have opted into
• To monitor and analyze usage trends, performance, and Service reliability
• To detect, prevent, and address fraud, abuse, security incidents, and technical issues
• To enforce our Terms of Service and comply with legal obligations
• To respond to your support requests and communications

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 Third-Party Service Providers

We use the following third-party services to operate and improve our Service:

• Supabase — Authentication, database hosting, and file storage (your account data, keywords, and ranking data are stored on Supabase infrastructure)
• Paddle — Payment processing, subscription management, and invoicing (receives your name, email, and billing information)
• SE Ranking — Keyword intelligence and search engine rank data enrichment (receives keywords and country codes you submit for tracking)
• Google Indexing API — URL submission for search engine indexing (receives the URLs you submit)
• Sentry — Error monitoring and crash reporting (receives technical error data, which may include anonymized user context)
• PostHog — Product analytics (receives anonymized usage events and page views, with your consent)
• Google Analytics — Website traffic analytics (receives page view and session data, with your consent)
• SMTP Email Provider — Transactional email delivery (receives your email address and message content for notifications)

3.2 Legal Requirements

We may disclose your information if required to do so by law, or in the good-faith belief that such action is necessary to comply with applicable laws, respond to a court order, judicial or other government subpoena, or warrant.

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our Service of any change in ownership.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:

• Account data: Retained for the duration of your account and for up to 30 days after deletion
• Transaction records: Retained for 7 years for accounting and tax compliance
• Security and audit logs: Retained for up to 12 months for security monitoring and incident response
• Keyword ranking history: Retained for the duration of your account
• Analytics data: Retained according to our analytics providers' retention policies (PostHog: 12 months; Google Analytics: 26 months)

5. Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
• Passwords are hashed using secure cryptographic algorithms (bcrypt) and are never stored in plaintext
• Sensitive data at rest is encrypted using AES-256 encryption
• Database access is controlled through Row-Level Security (RLS) policies, ensuring users can only access their own data
• All administrative and service-level database operations are logged to a security audit trail
• API endpoints are protected by rate limiting to prevent abuse
• Authentication tokens are managed securely with automatic refresh and expiration

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: You can view your profile information, keyword data, ranking history, and transaction history through your dashboard at any time
• Correction: You can update your name, email, phone number, and other profile details through your account settings
• Deletion: You may request deletion of your account and associated data by contacting us at the email address below. Account deletion will remove your profile, keywords, domains, and ranking data
• Data Portability: You may request a copy of your data in a machine-readable format by contacting us
• Opt-out of Analytics: You can decline analytics cookies via the cookie consent banner. You can also opt out of email notifications in your account settings
• Withdraw Consent: Where we process data based on your consent, you may withdraw that consent at any time

7. International Data Transfers

Our Service is hosted on infrastructure that may be located in different regions. Your data may be transferred to and processed in countries other than your country of residence. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction. We ensure appropriate safeguards are in place for such transfers.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information. If you believe a child has provided us with personal information, please contact us.

9. Third-Party Links

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policy of every site you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. Your continued use of the Service after any modifications constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

IndexNow Studio

Email: support@index-now.dev

Website: https://index-now.dev