Privacy Policy
This Privacy Policy explains what information InstantIndexer.in ("we", "us") collects when you use https://instantindexer.in and our API, why we collect it, and the choices you have. We only collect what we need to run the Service, keep it secure and meet our legal obligations. We do not sell your personal data.
Information we collect
| Category | What | Why |
|---|---|---|
| Account | Name, email address, password (stored only as a secure hash), email verification status, optional Telegram / mobile you add | Create and run your account, send service emails |
| Usage | URLs and project names you submit, submission history, API keys and API usage | Provide the indexing service, show your history, billing |
| Credits & payments | Plan bought, amount, credit history, payment reference IDs. For USDT: network, transaction hash and sending wallet address | Add credits, prevent fraud, accounting, refunds |
| Security | IP address, approximate location from IP, browser and operating system (user agent), a device fingerprint (a hashed value derived from browser characteristics), login history | Protect accounts, detect fraud and multiple-account abuse, enforce bans |
| Support | Messages you send us by email or Telegram | Answer your questions |
We do not receive or store your full card or bank details — card and UPI payments are handled directly by our payment partner.
How we use your information
- To provide the Service: process your URL submissions, manage credits and show your history.
- To process payments and refunds and keep financial records.
- To send essential emails such as email verification, security notices and important service changes.
- To keep the Service secure: detect suspicious logins, fraud, chargebacks, spam and abuse of free credits.
- To improve the Service using aggregated, non-identifying statistics.
- To comply with legal obligations and respond to lawful requests.
Who we share it with
We share data only with service providers that help us run InstantIndexer.in, and only as much as they need:
- Indexing infrastructure — the URLs you submit are passed to our indexing partner so they can be queued for search engines. Your name and email are not sent with them.
- Payment processors — Dodo Payments for card and UPI payments. They act under their own privacy policy.
- Blockchain networks — USDT payments are recorded on public blockchains (Tron, BNB Smart Chain). We use public blockchain data providers to confirm transactions. Blockchain records are public and cannot be changed or deleted by anyone.
- Email and hosting providers that send our emails and host our servers.
- Authorities, if required by law or to protect our rights, users or the public.
Cookies and local storage
- A session cookie keeps you logged in. It is essential and is deleted when you close your browser or log out.
- Your theme preference (light/dark) is saved in your browser's local storage.
- We do not use advertising cookies or third-party tracking pixels.
How long we keep data
- Account data is kept while your account is active.
- Submission, credit and payment records are kept for as long as needed for accounting, tax and dispute purposes (usually up to 8 years for payment records).
- Security logs (logins, IPs, devices) are kept for as long as needed to protect the Service and prevent abuse.
- When you ask us to delete your account we remove or anonymise your personal data, except records we must keep by law.
How we protect it
Passwords are hashed, all traffic uses HTTPS, secrets are kept outside the database, and access to admin tools is restricted. No system is 100% secure, but we work to protect your data and will notify you if a breach affects you as required by law.
Your rights
Depending on where you live (for example under India's Digital Personal Data Protection Act or the EU/UK GDPR) you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data (you can update your profile in Account settings);
- ask us to delete your account and personal data;
- object to or restrict certain processing, and withdraw consent where we rely on it;
- complain to your local data protection authority.
To make a request, email [email protected] from your account email. We reply within 30 days.
Children
The Service is not intended for anyone under 18 and we do not knowingly collect data from children.
International transfers
Our servers and service providers may be located in different countries. When your data is transferred outside your country, we take reasonable steps to make sure it stays protected.
Changes to this policy
We may update this policy from time to time. The date at the top shows the latest version. Significant changes will be announced by email or on your dashboard.
Contact
Privacy questions or requests: [email protected] · Telegram.