Privacy Policy

Account details. Your first and last name, email address, a salted hash of your password (never the password itself), the API key we generate for you, your credit balance, your daily submission count and the time you last signed in.

Google sign-in and connection. When you sign in with Google or connect a Google account, Google gives us your Google account ID, name, email address and profile picture, the access and refresh tokens that let us act within the permissions you approved, the list of those permissions, and the list of Search Console properties your account owns or has full access to.

URLs and results. The URLs you submit, what our scan found, each submission’s status and error messages, the indexing status Search Console reported, and timestamps.

Technical data. Our servers receive your IP address and request details. We use them for security, abuse prevention, rate limiting and debugging, and keep them in operational logs.

We ask Google for read-only access to Search Console (the webmasters.readonly permission), together with your basic profile (name, email address and picture). We use the Search Console access only to:

• list the sites you can access, so we can confirm you are allowed to submit a URL;
• check whether the pages you submitted have been indexed, using Search Console’s URL Inspection.

We never use your Google connection to change anything in your Search Console. We do not use Google data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide the service, to comply with the law, or with your consent. People at IndexMeNow do not read your Google data unless it is needed for security or abuse investigations, to comply with the law, or you ask us to.

IndexMeNow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Service account instead of Google sign-in. If you do not want to connect your Google account, you can add our service account as a Full user of your property in Search Console. We then read indexing status for that property with the service account. Removing it in Search Console ends that access.

To ask Google to crawl a URL, we publish a short public page on our own domain that refers to the URL you submitted. While it is active it is public and may be listed in our sitemap and RSS feed and crawled by search engines. We deactivate it when the job finishes.

When you submit a URL, our servers also request that page, your robots.txt and, if you use sitemap import, your sitemap, to scan them.

To run your account and credits, show your results, keep the service secure, prevent abuse, answer support requests and fix problems. We do not sell your personal information, and we do not show advertising.

We use these providers to run the service. They process data only on our behalf:

• Google — sign-in, Search Console and the indexing requests described above.
• MongoDB Atlas — hosts our database.
• Vercel — hosts this web app.
• Our server host — runs the API and background jobs.

We may also disclose information when the law requires it or to protect the service and its users. Your data may be processed in countries other than your own.

We do not use advertising or analytics cookies. To keep you signed in, your browser’s local storage holds your sign-in token and basic profile details. Signing out removes them.

We keep your account details and job history while your account exists. To delete your account, including its jobs and Google connections, contact us at the contact details shown on our website; we will delete it within a reasonable time. Copies in backups are removed as the backups expire.

You can disconnect a Google account in Settings → Google, which stops us using it. The stored connection record stays until you ask us to delete it or delete your account. You can also revoke our access at any time from your Google Account permissions page.

We store passwords only as salted hashes, serve the site over HTTPS and limit who can reach our systems. No system is perfectly secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your API key private; you can generate a new key on your Profile page.

You can view and update your details on your Profile page, and ask us to correct, export or delete your data at the contact details shown on our website. Depending on where you live, you may have further rights under local law, and we will honour them.

IndexMeNow is not intended for anyone under 16, and we do not knowingly collect their information.

If we change this policy, we will update the date above and, for significant changes, tell you in the app or by email. Our Terms of Service also apply to your use of IndexMeNow.

Questions about this policy or requests about your data: the contact details shown on our website.