Your privacy, plainly explained.

IndexGrid is operated by BD Interactive. We help businesses understand how well AI search tools can read, summarize, and recommend their websites. If you have questions about this policy, contact us at support@indexgrid.ai or through our contact page.

When you enter a website address, we fetch the publicly available content of that site, including page titles, meta descriptions, headings, paragraph text, structured data it already publishes, and site files such as robots.txt, sitemap.xml, and llms.txt. We analyze that content with our own checks and an AI model to produce a website readiness score and a written report.

If you purchase the full report, we save your report, collect your email address, process payment through Stripe, and generate downloadable files based on the report.

If you use IndexGrid Monitor, we periodically re‑scan the websites you add to your account. We store scan results, scores, recommendations, detected changes, and related historical information so we can compare your website over time and provide monitoring insights, alerts, and reports.

You can stop monitoring by canceling Monitor through your account, and you can ask us to remove a monitored website or delete your account at any time. Stopping monitoring ends future scheduled scans, subject to any scan already in progress.

Information you give us.

• The website addresses you ask us to scan or monitor.
• Your email address when you purchase a report or create an account, and your name or company if you choose to provide them at checkout.
• Your name, email address, and message if you contact us or request help installing your files.

Account information.

• Your email address and an account identifier assigned by our authentication provider.
• The websites added to your account and their monitoring schedules.
• Your Monitor status, including whether monitoring is included with a purchase or provided by a subscription, and its start and end dates.
• Your email notification preference for each monitored website.
• Sign‑in events and account activity needed to operate and secure your account.

You sign in with a one‑time link sent to your email address. We never create or store a password for you.

Information we generate.

• A structured summary of the public content we fetch from each website you scan or monitor.
• The AI‑generated report, score, recommendations, and downloadable files created for that website.
• For monitored websites, historical scores and scan results, changes detected between scans, the status of each recommendation, scan dates, and scan outcomes.
• Records of the monitoring emails we queue and send, including delivery status.
• Payment status and a Stripe payment reference for purchased reports.

Subscription information.

If you subscribe to Monitor, we receive information from Stripe about your subscription, such as your plan, subscription status, billing period, payment status, a Stripe customer identifier, and transaction references. We do not receive or store your full payment card number.

Information collected automatically.

• Basic usage analytics such as pages visited, referring site, browser type, and approximate region, collected through Vercel Analytics without cookies.
• Product usage events, such as completing a free scan, purchasing a report, viewing the dashboard, or subscribing to Monitor, recorded on our servers and linked to your account, website, or report identifier.
• Bot‑detection signals collected by Cloudflare Turnstile when you complete the robot check before a scan.
• A one‑way hashed representation of your IP address for each free‑scan attempt, retained for up to 30 days to enforce scan limits, detect abuse, and protect the service. We do not intentionally store the raw IP address in our application database for this purpose, although our hosting and security providers may receive it independently.
• Approximate location information, such as country, region, or city, that our hosting provider derives from the network address of a request to our service. We record it with free‑scan attempts at roughly city‑level precision and use it for analytics, security, fraud prevention, abuse detection, and service improvement. This is a network‑based estimate, not GPS or device location, and it can be wrong when you use a VPN, proxy, or mobile network.

We do not collect or store your payment card details. Payment information is handled directly by Stripe.

Please do not submit sensitive information. IndexGrid is designed to analyze public business websites. Do not intentionally submit passwords, financial account information, government identifiers, private health information, or other sensitive personal information through website scans, contact forms, or support requests.

IndexGrid analyzes content that is publicly accessible at the website addresses submitted to the service. Our crawler does not intentionally bypass authentication, paywalls, or other technical access controls to access non‑public content.

Website content may be temporarily or persistently stored when necessary to provide reports, monitoring, change detection, caching, abuse prevention, or other features described in this policy.

To avoid repeating identical scans, we cache the analysis of each scanned website for a limited time, keyed by the website's domain rather than by you. Another person who scans the same website within that window may receive the same cached result.

By adding a website to Monitor you authorize us to re‑scan it on a schedule without further action from you, as described in our Terms of Service.

• To scan the website you submit and generate your report and files.
• To process your purchase and deliver what you paid for.
• To create and secure your account and sign you in.
• To periodically re‑sca websites you choose to monitor.
• To calculate and store historical website readiness scores and detect changes between scans.
• To provide your Monitor dashboard, recommendations, and historical trends.
• To send monitoring summaries and alerts that you enable.
• To manage subscriptions, renewals, cancellations, and account access.
• To respond to support requests and help you install your files.
• To prevent duplicate or abusive scans, fraud, and automated misuse, and to control infrastructure and AI processing costs.
• To understand how the service is used so we can improve it.
• To send transactional and service‑related emails, including purchase confirmations, sign‑in links, account messages, monitoring summaries, scan alerts, subscription notices, and support responses.

To generate reports we send OpenAI a compact, structured summary of the public content of the website being analyzed: its domain, page titles, descriptions, headings, short text excerpts, detected FAQs, the types of structured data it publishes, and any business contact details that the website itself publishes.

We do not send OpenAI your email address, account information, payment details, or anything you type into contact or checkout forms. We do not send raw HTML or full pages.

We use OpenAI through its API. OpenAI states that content sent through its API is not used to train its models by default. We do not use your information to train AI models.

We use third‑party service providers to operate IndexGrid. Depending on the service they provide, these companies may process information on our behalf or under their own applicable terms and privacy policies.

• OpenAI receives website content and related analysis instructions necessary to generate reports, recommendations, and other AI‑powered results, as described in the AI processing section above.
• Stripe processes payments and subscriptions and receives the information necessary to complete billing and prevent fraud, including your email address, your name if you provide it, and the amount paid.
• Supabase provides our database, authentication, and related backend infrastructure, where accounts, reports, monitoring history, and purchase records are stored.
• Vercel hosts the application, runs our scheduled monitoring jobs, and provides privacy‑friendly analytics.
• Cloudflare provides the Turnstile robot check that protects the free scan.
• Resend sends account, transactional, and monitoring email. Web3Forms delivers contact form submissions to our support inbox.

We do not sell your personal information, and we do not use personal information for third‑party behavioral advertising. We may disclose information if required by law or to protect the rights, safety, or property of BD Interactive, our users, or others.

When you buy the full report, Stripe collects your payment details directly. We receive confirmation of the payment, the amount, and a payment reference, and we link them to your report and email address.

When you subscribe to Monitor, Stripe creates a customer record and a subscription for you. We store the Stripe customer and subscription identifiers and the subscription's status and billing period so we can keep monitoring active, show your billing status, and open Stripe's billing portal when you want to update your card or cancel.

Purchase and subscription records are kept for as long as required for tax, accounting, and dispute purposes.

We send service emails you need in order to use the product: sign‑in links, purchase confirmations, notices about your subscription or the end of included monitoring, and replies to your support requests.

If you use Monitor, we also send weekly monitoring summaries and alerts for each monitored website. You can turn these off for any website in your dashboard settings. Certain account, security, billing, or legally required messages cannot be disabled while your account remains active.

We do not send promotional marketing email unless you have separately opted in, and any marketing email includes a way to unsubscribe.

IndexGrid does not use advertising cookies or third‑party tracking pixels. A first-party, HttpOnly visitor identifier lasts 30 days and links scans with report saves and purchases for conversion measurement. Campaign tags may be stored with a report.

When you save a report or proceed to checkout, we set an HttpOnly access cookie that expires after 30 days. You can also open a report through the verified account that owns it.

If you create an account, we also use strictly necessary session cookies set by our authentication provider to keep you signed in and protect access to your dashboard. They are refreshed while you use the service and cleared when you sign out.

A small preference cookie remembers your language choice.

Cloudflare Turnstile and Stripe may also set strictly necessary cookies to complete the robot check and payment securely. Vercel Analytics does not use cookies and does not track you across sites.

We retain information for only as long as reasonably necessary for the purposes described in this policy, including providing the service, maintaining security, resolving disputes, and satisfying legal and accounting requirements. The periods below apply unless a longer period is required by law.

• Free scan results are shown in your browser and are not saved to an account. The cached analysis of a website is kept for up to 90 days after the website was last scanned.
• Hashed abuse‑prevention identifiers and approximate location information for free‑scan attempts are kept for up to 30 days.
• Purchased reports and generated files are kept for as long as your report remains available to you, and are deleted on request.
• Monitor history, including scans, detected changes, and recommendations, is kept while the website remains in your account, and is deleted when you ask us to remove the website or close your account.
• Account information is kept while your account is active and deleted when you close your account, except as noted below.
• Billing records are kept as required for tax and accounting obligations, generally seven years.
• Queued email records are kept for up to 90 days after sending, and email delivery logs for up to 12 months.
• Product usage events are kept for up to 24 months.
• Contact messages are kept in our support mailbox for as long as we need them to handle your request and any follow‑up.

You can ask us to delete your account, reports, and personal information. We may retain limited information when necessary to comply with legal obligations, resolve disputes, prevent fraud or abuse, enforce agreements, or maintain financial records.

We use industry‑standard safeguards including encrypted connections, access‑controlled databases, passwordless sign‑in, and payment processing that keeps card data off our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You may also have the right to receive information about how we collect and disclose your personal information, to opt out of certain uses, to withdraw consent where processing relies on consent, and not to be discriminated against for exercising applicable privacy rights.

To exercise any of these rights, email support@indexgrid.ai. We will respond within a reasonable time and in line with applicable law, and we may need to verify your identity, for example by confirming access to the email address on your account.

IndexGrid and its service providers may process information in the United States and other countries where they operate. Those countries may have privacy laws that differ from those where you live. Where required, we rely on appropriate safeguards for those transfers.

IndexGrid is intended for businesses and adults and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

We may update this policy as IndexGrid changes or as required by law. When we make changes, we will update the effective date above. If changes materially affect how we use personal information, we will provide additional notice, such as by email or in your dashboard, where appropriate or required by law.

Questions or requests about privacy can be sent to support@indexgrid.ai or submitted through our contact page. Our Terms of Service describe the agreement that governs your use of the service.