Privacy Policy
Effective date: pending pre-launch legal review.
What we collect
Account data (email, hashed password, full name), project data you create, third-party OAuth tokens (Google Search Console) encrypted at rest, anonymous tool-usage logs (hashed IP only).
How to access, export, or delete your data
GDPR Art 15 + Art 17 + CCPA + DPDP Act 2023. Visit /dashboard/account to download a JSON export of all your data, or to delete your account (30-day soft delete then permanent purge).
Cookies + tracking
Strictly-necessary cookies (auth session) are exempt from consent. PostHog analytics and marketing emails are gated behind your Klaro consent choice — toggle anytime via the cookie banner.
Breach notification
We follow GDPR Art 33: any breach of personal data is reported to regulators within 72 hours and to affected users where required.
Contact
Questions: privacy@getindexed.com.
This is a compliance-scaffold placeholder. Termly-generated + lawyer-reviewed copy replaces it before Sprint 11 launch.