Privacy Policy

Last updated: 19 March 2026

1. Who we are

IndexNow Sync ("we", "us", "our") operates the IndexNow Sync HubSpot app and the website at indexnowsync.com. If you have questions about this policy, contact us at Contact Us.

2. What data we collect

When you install IndexNow Sync we collect and store:

• Your HubSpot portal ID and domain
• OAuth tokens required to read your HubSpot content (stored encrypted)
• The email address of the person who installed the app (used to send a welcome email and pre-fill Stripe Checkout)
• Your Bing IndexNow API key (stored encrypted)
• A log of URLs submitted to Bing via IndexNow, including submission status codes and timestamps
• Stripe customer and subscription IDs (no card details — payment is handled entirely by Stripe)

3. How we use your data

• To provide the service: We use your HubSpot OAuth tokens to read published pages and submit their URLs to Bing via IndexNow on your behalf.
• To process payment: Your installer email is shared with Stripe to pre-fill the checkout form. Stripe processes all payments; we store only the resulting subscription ID and status.
• To send a welcome email: We send a single welcome email via Resend when your subscription activates. We do not send marketing emails.
• To operate and improve the service: Submission logs are used to populate your in-app dashboard and to debug any submission failures.

4. Data sharing

We do not sell your data. We share data only with the third-party services required to operate IndexNow Sync:

• Stripe — payment processing (stripe.com/privacy)
• Resend — transactional email (resend.com/privacy)
• Bing / Microsoft — URLs are submitted to Bing via the IndexNow API as the core function of the service
• Vercel — hosting and infrastructure (vercel.com/legal/privacy-policy)
• Supabase — database hosting (supabase.com/privacy)

5. Data retention

We retain your installation data for as long as your account is active. Submission logs are retained for 90 days. If you uninstall the app, you may request deletion of your data by emailing Contact Us.

6. Security

HubSpot OAuth tokens and your Bing API key are stored encrypted at rest. All connections use HTTPS. We follow industry-standard security practices.

7. Your rights

You have the right to access, correct, or delete your personal data. To exercise these rights, email Contact Us.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date above. Continued use of the service after a change constitutes acceptance.

9. Contact

Questions about this policy? Email Contact Us.