inndx.io ("we," "us," "our," or the "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web crawling platform and related services (the "Service").
Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Service.
1. Information We Collect
We collect information about you in various ways when you use our Service.
1.1 Information You Provide to Us
Account Information:
- Name and contact information (email address, phone number)
- Company name and business information
- Username and password
- Account preferences and settings
Communication Information:
- Information you provide when contacting our support team
- Feedback, survey responses, and other communications with us
- Information submitted through forms or during onboarding
Crawl Configuration Data:
- Target URLs and crawl parameters you specify
- Custom crawl job definitions and scheduling preferences
- API configurations and integration settings
1.2 Information Collected Automatically
Usage Information:
- Log data including IP address, browser type, operating system
- Pages visited, time and date of visits, time spent on pages
- API calls made and service features used
- Device identifiers and network information
- Crawl job execution logs and performance metrics
Cookies and Tracking Technologies:
- We use cookies, web beacons, and similar technologies to collect information about your use of the Service
- See Section 8 (Cookie Policy) for detailed information
1.3 Payment Information
Third-Party Payment Processing:
- We use third-party payment processors (such as Stripe) to handle all payment transactions
- We do NOT directly collect, store, or process your full credit card numbers or payment card details
- Our payment processors collect and process payment information according to their own privacy policies
- We may receive limited payment information from our payment processors, such as:
- Payment method type (e.g., Visa ending in 1234)
- Billing address
- Transaction history and payment status
- Information necessary for tax compliance and accounting
For information about how our payment processors handle your payment data, please refer to:
- Stripe Privacy Policy: https://stripe.com/privacy
1.4 Information from Third-Party Sources
Integration Data:
- Information from third-party services you connect to our platform
- Data from identity verification services (for enterprise customers)
- Business information from public databases or data enrichment services
2. How We Use Your Information
We use the information we collect for the following purposes:
2.1 To Provide and Maintain the Service
- Create and manage your account
- Process and execute crawl jobs
- Store and deliver Licensed Data Products and Custom Data
- Provide customer support and respond to inquiries
- Send administrative information, service updates, and security alerts
2.2 To Process Payments and Prevent Fraud
- Facilitate payment processing through our third-party payment processors
- Verify your identity and prevent fraudulent transactions
- Maintain billing records and transaction history
- Comply with tax and accounting requirements
2.3 To Improve and Optimize the Service
- Analyze usage patterns and service performance
- Develop new features and functionality
- Conduct research and testing
- Troubleshoot technical issues and improve infrastructure
2.4 To Communicate with You
- Send you technical notices and support messages
- Respond to your comments and questions
- Send marketing communications (with your consent where required)
- Notify you about changes to our Service or policies
2.5 To Ensure Security and Compliance
- Detect, prevent, and address fraud and security issues
- Monitor for abuse and violations of our Terms of Service
- Comply with legal obligations and enforce our agreements
- Protect our rights, property, and the safety of our users
2.6 For Business Operations
- Perform accounting, auditing, and financial functions
- Manage business relationships and contracts
- Conduct data analysis and market research
- Facilitate corporate transactions (mergers, acquisitions, etc.)
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide the Service under our Terms of Service
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service, security, and fraud prevention
- Consent: Where you have provided explicit consent (e.g., marketing communications)
- Legal Obligations: Processing necessary to comply with applicable laws and regulations
4. How We Share Your Information
We do not sell your personal information. We share your information only in the following circumstances:
4.1 Service Providers and Business Partners
We share information with third-party service providers who perform services on our behalf:
- Payment Processors: Stripe and other payment service providers process payment transactions
- Cloud Infrastructure: Amazon Web Services (AWS), Google Cloud Platform, or similar providers host our infrastructure
- Email and Communication Services: Providers that help us send emails and notifications
- Analytics Services: Tools that help us understand service usage and performance
- Customer Support Tools: Platforms that help us provide customer support
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
4.2 Business Transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have.
4.3 Legal Requirements and Protection
We may disclose your information if required to do so by law or in response to:
- Legal process (subpoena, court order, or government request)
- Enforcement of our Terms of Service or other agreements
- Protection of our rights, property, or safety, or that of our users or the public
- Detection, prevention, or investigation of fraud or security issues
4.4 With Your Consent
We may share your information with third parties when you give us explicit consent to do so.
4.5 Aggregated or De-Identified Data
We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, marketing, analytics, or other purposes.
5. Data You Collect Through the Service
5.1 Your Responsibility for Crawled Data
When you use the Service to crawl websites and collect data:
- You are the Data Controller: You determine what data to collect and how to use it
- Your Compliance Obligation: You are solely responsible for complying with all applicable privacy laws, data protection regulations, and website terms of service
- No Liability: We are not responsible for the content, accuracy, or legality of data you collect through Custom Crawl Jobs
5.2 Our Role as Data Processor
For Custom Data you collect:
- We act as a data processor, storing and processing data solely to provide the Service to you
- We do not use, analyze, or share your Custom Data except as necessary to provide the Service
- You must ensure you have legal authority to collect and process any personal data contained in your Custom Data
5.3 Licensed Data Products
For Licensed Data Products we provide:
- We are the data controller and grant you a license to use this data per our Terms of Service
- You must comply with all applicable laws when using Licensed Data Products
- We make no representations about the presence or absence of personal data in Licensed Data Products
6. Data Retention
6.1 Account and Usage Data
We retain your account information and usage data for as long as your account is active and for a reasonable period thereafter to:
- Comply with legal obligations (typically 7 years for financial records)
- Resolve disputes and enforce our agreements
- Maintain business records and perform analytics
6.2 Custom Data
- We retain Custom Data according to your subscription plan (typically 30-90 days after crawl completion)
- Upon account termination or your request, we delete Custom Data within 30 days
- Data may persist in backup systems for up to 90 days after deletion from production systems
6.3 Licensed Data Products
We retain Licensed Data Products indefinitely as part of our service offerings.
6.4 Communication Records
We retain customer support communications and inquiries for up to 3 years for quality assurance and legal compliance purposes.
7. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
7.1 Access and Portability
You have the right to:
- Access the personal information we hold about you
- Receive a copy of your data in a structured, commonly used format (data portability)
7.2 Correction and Deletion
You have the right to:
- Correct inaccurate or incomplete personal information
- Request deletion of your personal information (subject to legal retention requirements)
7.3 Restriction and Objection
You have the right to:
- Restrict or object to our processing of your personal information
- Object to processing based on legitimate interests
- Opt out of marketing communications at any time
7.4 Withdrawal of Consent
Where we process your data based on consent, you have the right to withdraw that consent at any time.
7.5 How to Exercise Your Rights
To exercise these rights, please contact us at:
- Email: [[email protected]]
- Subject line: "Privacy Rights Request"
We will respond to your request within 30 days (or as required by applicable law).
7.6 California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information we collect, use, and disclose
- Right to request deletion of your personal information
- Right to opt-out of the "sale" of personal information (note: we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
To exercise these rights, contact us using the information in Section 7.5.
7.7 European Privacy Rights (GDPR)
If you are located in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation:
- All rights listed in Sections 7.1-7.4
- Right to lodge a complaint with your local data protection authority
- Right to restrict automated decision-making and profiling (where applicable)
8. Cookies and Similar Technologies
We use cookies and similar technologies, such as web beacons, pixels, and local storage, to operate and secure the Service, to remember your preferences, and to understand how the Service is used. These technologies fall into essential, analytics, and preference categories, and we do not currently use cookies for targeted advertising.
For a full explanation of the cookies we use, how long they last, and how to manage or disable them, see our dedicated Cookies Policy.
9. Data Security
9.1 Security Measures
We implement commercially reasonable technical and organizational measures to protect your information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and authentication mechanisms
- Regular security assessments and monitoring
- Employee training on data protection and security
- Secure development practices and code reviews
9.2 Limitations
While we strive to protect your information, no security system is impenetrable. We cannot guarantee absolute security of your data. You are responsible for maintaining the security of your account credentials.
9.3 Data Breach Notification
In the event of a data breach that affects your personal information, we will notify you in accordance with applicable laws and regulations, typically within 72 hours of becoming aware of the breach.
10. International Data Transfers
10.1 Data Location
Our Service is operated in the United States. If you are located outside the United States, your information will be transferred to, stored, and processed in the United States.
10.2 Adequacy Mechanisms
For transfers from the EEA, UK, or Switzerland, we rely on:
- Standard Contractual Clauses approved by the European Commission
- Other legally recognized transfer mechanisms as appropriate
10.3 Your Consent
By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.
11. Children's Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.
If you believe we have collected information from a child, please contact us immediately at [[email protected]].
12. Third-Party Links and Services
Our Service may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated Privacy Policy on our website
- Sending notice to your registered email address
- Displaying a prominent notification in the Service
The "Last Updated" date at the top of this Privacy Policy indicates when it was most recently revised. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.
14. Do Not Track Signals
Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Our Service does not currently respond to DNT signals or similar mechanisms.
15. Your California "Shine the Light" Rights
California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
inndx.io
Privacy Officer
Email: [[email protected]]
Address: [P.O. Box 476, Grand Junction CO, 81502]
16.1 Supervisory Authority
If you are located in the EEA, UK, or Switzerland and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
By using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.