Logo

Privacy Policy

Last updated: 3 January 2026

This Privacy Policy explains how Indexio ("Company", "we", "us", "our") collects, uses, discloses, and protects your personal data when you access or use our services (the "Services").

Indexio is a personal knowledge organization tool. Your content is private by default and is not displayed publicly unless you explicitly choose to share it using a feature provided by the Services (if available).

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

Information we collect

Personal information

When you register for or use the Services, we may collect personal information such as your email address, authentication identifiers, and account-related metadata (for example, account creation date and basic settings).

User-generated content

We collect and store content you save or create using the Services, such as links, titles, descriptions, tags, notes, collections, and related metadata ("User Content").

Automatically collected information

We may automatically collect limited technical information such as IP address, device type, browser type, and usage data for security, analytics, and performance purposes. Where possible, we minimize this data and use it in aggregated form.

How we use your information

We use your information to:

  • Provide, operate, and maintain the Services
  • Authenticate users and manage accounts
  • Store, process, and display User Content to you within the Services
  • Improve functionality, reliability, and user experience
  • Monitor for abuse, fraud, or security issues
  • Communicate service-related notices (such as important updates or security messages)
  • Comply with legal obligations

Legal basis for processing (EEA users)

If you are located in the European Economic Area (EEA), we process your personal data based on one or more of the following legal grounds:

  • Your consent (where applicable)
  • The performance of a contract with you (to provide the Services)
  • Compliance with legal obligations
  • Our legitimate interests, such as improving, maintaining, and securing the Services

Sharing your information

We do not sell your personal data. We may share your information with trusted third-party service providers who help us operate the Services (such as hosting, authentication, analytics, error monitoring, and email delivery), strictly for business purposes and subject to appropriate safeguards.

We may also disclose information if required to do so by law or in response to valid legal requests, or when necessary to protect the rights, safety, and security of the Company, our users, or others.

Data retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including providing the Services and complying with legal obligations. If you delete content (or delete your account where supported), we will take reasonable steps to remove it from active systems, subject to limited retention required for legal, security, or backup purposes.

Data security

We implement reasonable technical and organizational measures to protect your personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your privacy rights

Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal data, as well as the right to data portability and to object to certain processing activities.

You may exercise these rights by contacting us using the details provided below.

Cookies and tracking technologies

We use cookies and similar technologies to operate and improve the Services (for example, to keep you signed in and to maintain basic preferences). We may also use limited analytics to understand product performance and reliability.

If we maintain a Cookie Policy, it will describe the categories of cookies we use and any choices available to you.

Children's privacy

The Services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can take appropriate action.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by an updated "Last updated" date. Your continued use of the Services after such changes constitutes acceptance of the updated Privacy Policy.

Contact us

If you have any questions or concerns about this Privacy Policy or our data practices, you can contact us at contact@indexioapp.com.