Nouveau : push IndexNow + alertes de perte d'indexation — la couverture qui compte

Privacy Policy

Ce document est uniquement disponible en anglais pour le moment.

Last updated: October 20, 2026

This policy explains what personal information IndexSubmit ("we") collects, why, and who we share it with. The Service is operated by an individual developer under the name IndexSubmit. Contact: [email protected].

What we collect

  • Account data: your email address, name, and sign-in method (email and password, Google, GitHub, passkey and optional two-factor authentication).
  • Site and search data you authorize: sites you add, and — through Google OAuth with read-only scopes you approve — Google Search Console and Google Analytics data such as URLs, queries, clicks, impressions, indexing status and sitemaps. We store the summaries needed to show reports.
  • Usage and technical data: log data (IP address, browser, pages and actions) for security, abuse prevention and diagnostics.
  • Billing data: payments are handled by Dodo Payments. We receive your customer ID, subscription status, plan, payment amounts, tax and refund status, and the email used at checkout. We do not receive your full card number.
  • Messages: emails you send us and service emails we send you (sign-in, billing, alerts).

How we use it

To provide and secure the Service; to authenticate you; to run indexing submissions and reports; to generate insights; to process subscriptions and refunds; to communicate with you; to comply with law; and to improve the Service. We do not sell your personal information.

Who we share it with (service providers and recipients)

| Provider | Purpose | Data | | -------------------------------------------------------------------------- | -------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Google (OAuth, Search Console and Analytics APIs) | Reading your site data (read-only) | Your authorized site data; OAuth tokens | | GitHub (optional sign-in) | Authentication | Your GitHub account identifier, name and email | | IndexNow-compatible search engines | URL submission at your request | The URLs you submit | | Dodo Payments (acting as an independent controller for payment data) | Merchant of Record: payment, tax, invoices, refunds, customer portal | Email, name, billing details, payment data | | DeepSeek (AI model provider, servers in the People's Republic of China) | Weekly insights for paid plans | Aggregated numbers, status codes and site labels (domain and short path) and internal site identifiers — not your account email or raw page content. DeepSeek's own privacy policy allows it to use input to improve its models; we do not control this | | Cloudflare | DNS/CDN, security and transactional email delivery | Request metadata; recipient email and message | | Hosting and infrastructure provider (Netcup, servers in the United States) | Running the application and storing data | All data stored by the Service | | Sentry | Error monitoring | Technical diagnostics (may include account ID, URL, browser) |

The recipients above may process data outside the People's Republic of China and outside your country. Where the law of the People's Republic of China applies to you,we ask for your separate consent for such cross-border transfers before you can use the Service (a dedicated screen at first sign-in, recorded with its time and version; you may withdraw it at any time by emailing us, after which we will close the account), tell you the recipient, purpose, data categories and how to exercise your rights against the recipient, and rely on the mechanism required by law. We also disclose information where required by law.

Retention and deletion

We keep data while your account exists.You can delete your account in the app (Settings → Account) or by emailing [email protected]; this cancels active subscriptions and deletes your account and all of your site, report, task, notification and API-key data, except that we retain records we are required to keep (such as payment and tax records, held by us and by Dodo Payments) and limited security logs for a reasonable period. Backups are retained for 7 days and then overwritten.

Legal bases and retention

Where the GDPR applies we process data to perform our contract with you (account, reports, billing), for our legitimate interests (security, abuse prevention, service improvement), to comply with legal obligations, and on consent where required. We keep account and site data until you delete your account; server log data for up to 7 days and application audit logs (such as outbound-call records) for up to 30 days; payment records as required by tax and accounting law.

Your rights

Depending on where you live (including under the Personal Information Protection Law of the PRC and, where it applies, the GDPR), you may request access, correction, deletion, restriction, portability, or withdraw consent. Email [email protected]. You can also revoke our Google access at any time at myaccount.google.com/permissions.

Cookies

We use essential cookies for sign-in and session security and do not use third-party advertising cookies. You can control cookies in your browser.

Children

The Service is for adults (18+). We do not knowingly collect data from children; if you believe a child has registered, contact us and we will delete the account.

Changes and contact

We will post changes here and, for material changes, notify you in the app or by email. Questions or complaints: [email protected]; you may also complain to your local data protection authority.