Privacy Policy — IndexPro

Last updated: August 22, 2026 | Effective immediately upon use

Overview

Welcome to IndexPro. We are committed to protecting your privacy and being transparent about how we handle your data. This policy explains what information we collect, why we collect it, and how we use it.

By using our service, you agree to the collection and use of information in accordance with this policy.

Data We Collect

Data Type	Why We Collect It	Retention Period
IP Address	Security, abuse prevention, geographic analytics	30 days
User Agent (Browser)	Compatibility, fraud detection	30 days
Country	Regional analytics, compliance	30 days
Email Address	Account identification, login	Until account deletion
Google Account Info	OAuth login (name, email, picture)	Until account deletion
Service Account JSON Key	Google Indexing API authentication	30 days maximum, then auto-deleted
Submission Logs	Usage tracking, quota management	30 days rolling
Payment Records	Billing, plan activation, dispute resolution	7 years (financial regulation)

Google Service Account JSON Key

Important: Your Google Service Account JSON key is the most sensitive data we handle. Here's exactly how we treat it:

The JSON key file is stored encrypted on our servers in a directory inaccessible via web browser
It is used only to authenticate API requests to Google Indexing API on your behalf
It is automatically deleted after 30 days — we never retain it longer
Only you (logged in) and our automated systems can access it
You can delete it at any time from your dashboard
We never share, sell, or expose your key to third parties

Cookies & Sessions

We use minimal, essential cookies:

_gidx_id — A unique anonymous identifier stored for 2 years. Used to maintain your session without requiring login. Contains no personal information.
Session cookie — Stores your login state during your browser session. Expires when you close the browser.

We do not use advertising cookies, cross-site tracking cookies, or analytics platforms like Google Analytics or Facebook Pixel.

Payments

Payments are processed through NOWPayments (cryptocurrency payment processor). We receive:

Order ID and payment status from their IPN (webhook) notifications
Cryptocurrency payment amounts and transaction data

We do not collect or store credit card numbers, bank account details, or crypto wallet private keys. All payment security is handled by NOWPayments.

Data Sharing

We do not sell, trade, or share your personal data with third parties, except:

Google APIs — Your Service Account key is used to call Google Indexing API directly
NOWPayments — Payment processor for subscription handling
Legal requirements — If required by law, court order, or government authority

Data Security

All data is stored in files protected by .htaccess rules blocking direct web access
HTTPS encryption for all data in transit
CSRF tokens on all state-changing operations
Passwords stored as bcrypt hashes (never plain text)
Service Account keys stored in non-public directories
Automatic data expiry after 30 days

Your Rights

You have the right to:

Access — Request a copy of data we hold about you
Delete — Request deletion of your account and all associated data
Correct — Update inaccurate information in your profile
Export — Download your submission history
Withdraw — Delete your Service Account key at any time

To exercise these rights, contact us at: support@

Children's Privacy

Our service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

IndexPro
For privacy inquiries, data deletion requests, or security concerns:
Website: https://yoursite.com