Who operates inDex
inDex is operated by Donald Lee Stivison Jr. as an Arizona sole proprietorship. Donald Lee Stivison Jr. is the controller of personal information described in this Policy where applicable. Privacy, account, billing, and legal inquiries may be sent to the contact email listed below.
1. Information we collect
Information you provide
- Account information such as email address, username, display name, and profile settings.
- Authentication information supplied through supported sign-in methods, including information returned by an identity provider when you choose that provider.
- Membership and billing-related account information such as plan, billing status, Stripe customer/subscription identifiers, and transaction state. inDex does not store your full payment-card number or card security code.
- Your confirmation of United States paid-membership eligibility and the billing country supplied through Stripe Checkout.
- Waitlist, feedback, support, or other communications you send to us.
- Collection, portfolio, preference, or other user-entered information if you use features that request it.
Information collected automatically
- Device, browser, IP address, request timestamps, referring page, and basic server/security logs.
- Session and authentication information needed to keep you signed in and protect account access.
- Product usage information needed to operate, troubleshoot, secure, and improve inDex.
2. How we use information
- Provide, authenticate, personalize, and secure the service.
- Provision Basic, Index Plus, and Index Premium access and reconcile subscription state.
- Process account requests and coordinate payment/subscription administration with Stripe/Link.
- Operate market, simulation, ranking, research, and other product features.
- Send transactional or service communications such as authentication messages, billing notices, security notices, and important product updates.
- Prevent fraud, abuse, scraping, unauthorized access, and other harmful activity.
- Debug errors, monitor reliability, measure product performance, and improve the service.
- Comply with legal obligations and enforce our Terms of Service.
3. Payments and Stripe Managed Payments
Paid memberships use Stripe Managed Payments. Link/Stripe acts as merchant of record for those transactions and handles payment collection, transaction-level support, applicable indirect taxes, receipts, invoices, and subscription notifications. Payment information you enter at Checkout is provided directly to Stripe/Link rather than stored by inDex.
inDex receives the identifiers and status information necessary to associate a Stripe customer and subscription with your inDex account, determine your membership entitlement, and provide billing-management features. Stripe/Link processes information under its own privacy terms and may retain transaction records as required for payment, tax, fraud, dispute, and legal obligations.
4. Service providers and disclosures
We disclose personal information only as reasonably necessary to operate the service, complete transactions, protect inDex and its users, or comply with law. Categories of recipients may include:
- cloud hosting and deployment providers;
- database, authentication, and infrastructure providers such as Supabase;
- payment and merchant-of-record providers such as Stripe and Link;
- email and transactional communication providers;
- security, logging, reliability, and fraud-prevention providers; and
- government authorities, courts, or other parties when disclosure is legally required or reasonably necessary to protect rights, safety, or the integrity of the service.
inDex does not currently sell personal information for money and does not currently share personal information for cross-context behavioral advertising. If those practices change, we will update this Policy and provide any legally required choices before the change applies.
5. Cookies and similar technologies
inDex uses essential cookies and similar storage technologies for authentication, security, session continuity, and user preferences. Stripe/Link and other service providers may set their own cookies when you use their services. See our Cookie Policy for more detail.
6. Data retention
We keep personal information for as long as reasonably necessary to provide the service, maintain account and billing records, meet legal or tax obligations, resolve disputes, prevent fraud, enforce agreements, and maintain security. Retention periods vary by data type. We may retain de-identified or aggregated information that no longer identifies you.
7. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls and encrypted network connections where appropriate. No online system can guarantee absolute security, and you are responsible for protecting your account credentials and devices.
8. Your choices and privacy rights
Depending on where you live and which privacy laws apply, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, or to object to or restrict certain processing. You may also have rights concerning the sale or sharing of personal information. inDex does not discriminate against users for exercising legally protected privacy rights.
You can update certain account information through the product where available. For other privacy requests, contact us using the address listed at the bottom of this Policy. We may need to verify your identity before completing a request and may retain information where an exception or legal obligation applies.
California residents may have rights under California privacy law where that law applies to inDex, including rights to know, correct, delete, and obtain information about certain disclosures. We will honor applicable rights and browser-based opt-out signals where legally required.
9. Children's privacy
inDex accounts and paid memberships are intended only for people who are at least 18 years old and at least the age of legal majority where they live. We do not knowingly collect personal information from children. If we learn that a child has created an account or provided personal information, we will take appropriate steps to delete or restrict the information and account. Parents or guardians who believe a child has provided personal information can contact us.
10. International users
inDex and its service providers may process information in the United States and other countries. Those countries may have privacy laws different from the laws where you live. Where required, we rely on appropriate legal mechanisms for international processing or transfer.
11. Third-party sites and services
inDex may link to third-party websites, marketplaces, identity providers, payment experiences, or other services. Their privacy practices are governed by their own policies, not this Privacy Policy.
12. Changes to this Policy
We may update this Privacy Policy as our service or legal obligations change. We will post the updated Policy with a revised effective date and provide additional notice when required by law.