Privacy statement

1. Data controller

Digital Forge, Beltmolen 22, 3352 XD Papendrecht, the Netherlands, is the data controller for the data processed through Indexly.

For privacy questions you can reach us through the contact form or by phone.

2. Which data we process

Account data: name, email address, phone number, language preference and the company details you enter yourself.

Data about your websites: the URLs from your sitemap, what Google reports about those URLs, and when we submitted a page.

Technical details when you log in, send a contact request or invite a colleague: IP address, browser type and time. We use these solely to spot abuse and to secure sessions.

To establish whether a page has changed, we fetch the page and keep a fingerprint of the parts that matter for indexing. The content of your pages itself is not stored.

3. Google Search Console

When you connect your Google account, we store a token that lets us access the Search Console data of your websites on your behalf. We never see your password.

We use that access solely to request the index status of your pages, submit your sitemap and offer pages for indexing.

You can disconnect at any time in the dashboard. The permission is then also revoked at Google itself.

4. Why we process the data

To deliver the service you created an account for (performance of the contract).

To reach you about your account, outages and changes to the service.

To secure the service against abuse and to establish who performed which action (legitimate interest).

5. Retention

Account data is kept for as long as you have an account. If you cancel, or your trial ends without you continuing, we delete the account in full one year later — provided nobody has signed in during that year. You get an email about it thirty days beforehand; sign in during that month and the deletion is called off, with nothing further for you to do.

You can also close your account yourself at any time, in the dashboard under Settings. Everything is then deleted immediately, with no waiting period.

Technical sign-in data is kept for a shorter time, because it needs to say the least about you: sign-in attempts with IP address and browser type for thirty days, ended sessions for ninety days, and the log of actions in your account for one year.

Pages and their current index status are kept for as long as the relevant website is in your account. If you delete a website permanently, that history goes with it.

The history around it runs shorter: runs, submitted pages and detected drops are kept for one year. The daily figures your graph is based on are kept for three years — that is one row per website per day, and it is precisely that long line that is worth something to you.

Messages you send through the contact form, and the sending history of our email alerts, are kept for one year.

Billing details such as your chamber of commerce number, VAT number and IBAN are kept for as long as your account exists. If you close your account they go with it straight away — nothing is charged at the moment, so there is no invoice administration subject to a statutory retention period. That will change here as soon as there is one.

6. Recipients and location

Data is stored on servers within the European Union.

We use service providers for hosting and sending email. Data processing agreements are in place with them.

For the Search Console connection we necessarily exchange data with Google. That happens only for the websites you added yourself.

To announce changes through IndexNow we pass the URLs of changed pages to the connected search engines, among them Bing, Yandex, Seznam, Naver and Yep. Only URLs of your own website are involved.

7. Your rights

You have the right to access, correct and delete your data, and to data portability. You may also object to processing.

Deletion is not something you have to request: in the dashboard, under Settings, you can close your account and everything disappears immediately. For the other requests you can use the contact form; we respond within one month.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority.

8. Cookies

Indexly uses functional cookies only: one for your session after logging in and one to remember your language choice.

There are no tracking cookies and no third-party analytics on the site.