Privacy Policy

This Privacy Policy explains how Vindex ("we," "us," or "our") collects, uses, and shares information when you use our website and services (the "Service").

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

Account data: your name and email address, managed through our authentication provider, Clerk.

Payment data: handled by Stripe. We do not store your card numbers. Stripe processes your billing and payment details on our behalf.

Customer content: the websites you clone and edit, which we store as code repositories on GitHub so that we can host and update your site.

Usage data: technical information including IP addresses, which we use for rate limiting, security, and to keep the Service running.

Chatbot data: questions and conversations submitted by visitors to your site when you enable the AI chatbot.

Cookies: including session cookies set by Clerk to keep you signed in.

We use the information we collect to provide and improve the Service, process billing, keep the Service secure, provide support, and communicate with you about your account and important updates.

We share information with the service providers we rely on to operate Vindex. You can see the current list on our Subprocessors page.

We do not sell your personal information.

We use session and authentication cookies, primarily set by Clerk, to keep you signed in and to operate the Service. You can control cookies through your browser settings, though disabling them may affect how the Service works.

We keep your information while your account is active and for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

Depending on where you live, you may have the right to access, correct, delete, and receive a copy of your personal information (portability).

If you are a California resident, the CCPA and CPRA give you rights regarding your personal information, including the right not to be discriminated against for exercising those rights. If you are in the EU or UK, the GDPR provides similar rights where applicable.

To exercise any of these rights, contact us at [LEGAL CONTACT EMAIL].

For chatbot data and cloned-site data, we act as a processor on your behalf. You are the controller of that data, which means you are responsible for providing your own privacy notices to your site visitors and for having a lawful basis to collect their information.

We use reasonable technical and organizational safeguards to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We are based in the United States, and your information may be processed and stored in the United States or other countries where our providers operate.

The Service is not directed to children under 13 (or under 16 where a higher age applies), and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you through the Service.

If you have questions about this policy or your information, contact us at [LEGAL CONTACT EMAIL].