Your data, handled plainly.

Who this covers

This policy explains how Indexive AI ("Indexive", "we", "us") handles personal information when you visit indexive.ai or ask us for a free execution audit or a conversation. It applies to this website only. Work we do for clients is covered by the agreement we sign with them.

We keep what we collect to a minimum. We do not run analytics, advertising, or tracking tools on this site, and we do not set cookies.

What we collect

We collect information in three ways.

• What you give us. When you use the audit or contact form, you give us your website address and your work email. That is all the form asks for. If you reply to our email, we also keep what you write.
• What your browser sends. Like any website, our servers receive your IP address, browser and device type, the pages you request, and the time of each request. Our hosting provider records this in server logs.
• What other services see. A few small images on this site, such as company logos and product icons, load from third-party services. Your browser contacts them directly, so they receive your IP address and browser details. See "Third parties" below.

What we do not collect

• We do not use cookies, local storage, or similar technologies to identify or track you.
• We do not run analytics, advertising pixels, session recording, or fingerprinting.
• We do not ask for or store payment information through this site.
• We do not knowingly collect information from children.

How we use information

We do not sell your personal information. We do not share it for advertising. We do not use it to train AI models.

• To respond to your request: review your site, email you initial findings, and answer your questions.
• To follow up on your request, and to keep a record of it so we can pick the conversation back up.
• To keep the site secure, prevent abuse and spam, and fix technical problems.
• To meet legal obligations and to protect our rights if there is a dispute.

Our legal bases

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your information because it is necessary to respond to a request you made, because we have a legitimate interest in running and securing a business website and following up on enquiries, and where the law requires it, because you consented. You can object to processing based on legitimate interests at any time.

Third parties that handle information

We use a small number of service providers. Each receives only what it needs to do its job.

• Vercel hosts the website and keeps server logs.
• Slack receives a notification of your request (website, email, the page you used, and the time) in a private channel our team uses.
• Calendly holds an internal calendar entry for your request, with the same details, on our team's calendar. It is not a meeting you booked, and it does not send you an invitation.
• Our email provider carries the messages we send and receive.
• Google's favicon service and the Simple Icons CDN supply some logos and icons. They see your IP address and browser details when those images load, and they have their own privacy policies.

How long we keep information

We keep form submissions and our email correspondence with you for up to 24 months after our last contact, unless you become a client, in which case the agreement with you governs. Server logs are kept by our hosting provider for a short period under its own retention settings. You can ask us to delete your information sooner at any time.

Where information is processed

Our providers operate mainly in the United States. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information may be transferred outside your region. Where that happens, we rely on the safeguards the law recognizes, such as standard contractual clauses, which our providers offer.

Your rights

Depending on where you live, you may have the right to:

• ask what personal information we hold about you and get a copy of it;
• correct information that is wrong;
• delete your information;
• object to or restrict how we use it;
• receive your information in a portable format;
• withdraw consent where we relied on it; and
• complain to your data protection authority.

California residents

If you live in California, you can ask us what personal information we collected about you in the past 12 months, why, and who received it, and you can ask us to correct or delete it. We do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of. We will not treat you differently for using these rights.

How to make a request

Use the form on our contact page and we will reply by email. Include what you would like us to do in your reply. We may need to confirm that the request comes from the email address in question before we act on it, and we respond within the time the law requires, usually within 30 days.

Security

The site is served over HTTPS only. Access to the notifications and calendar entries described above is limited to our team. No method of transmission or storage is perfectly secure, but we keep what we hold to a minimum so there is less to protect.

Do Not Track and Global Privacy Control

We do not track you across sites, so we treat Do Not Track and Global Privacy Control signals as honored by default.

Changes to this policy

If we change how we handle information, we will update this page and the date at the top. For significant changes we will say so on the site.