On this page
The short version
A plain-English summary. The full text below is what applies.
We never sell your data
Not to advertisers, not to data brokers, not to anyone.
No card numbers stored
Card payments are handled entirely by our payment partner; we only keep a purchase record.
Secrets stay hashed
Passwords and API keys are stored only as one-way hashes.
Delete anytime
Close your account yourself from Settings; your data goes with it.
01Who we are
PreIndex is operated by Seonest, Plot 174, 2nd Floor, Kashmir Block, Allama Iqbal Town, Lahore 54000, Pakistan. We are the controller of the personal data described in this policy. This policy applies to the PreIndex website, dashboard and API.
02What we collect
Information you give us
- Account details: your name, email address and password. If you sign in with Google, we receive your name, email address and profile photo from Google. We never receive your Google password.
- URLs and projects: the URLs you submit, project names, chosen speed and drip-feed settings.
- Purchases: the pack you bought, credits added, amount, payment method and the provider's transaction reference. For local transfers, the payment details you send us to confirm it.
- Support messages: whatever you share when you contact us by email or WhatsApp.
Information created when you use PreIndex
- Indexing activity: the status of each URL, credits used and refunded, and project history.
- API keys: a one-way hash of each key, its label, and when it was created and last used. The full key is shown to you once and never stored.
- Security signals: for sign-in attempts we record a hashed IP address, a hashed device identifier, your browser's user agent, a hashed copy of the email entered, and the outcome, so we can stop brute-force and abuse.
- Usage and device data: pages visited, browser and device type, collected through the analytics tools described below.
03How we use it
| Purpose | What we use | Legal basis |
|---|---|---|
| Run your account and index your URLs | Account details, URLs, projects | Performing our contract with you |
| Process purchases and keep billing records | Purchase records | Contract; legal and tax obligations |
| Issue automatic refunds and notifications | Indexing activity, credits | Contract |
| Keep accounts secure and prevent abuse | Security signals, API key hashes | Legitimate interest in a safe service |
| Send service emails (verification, password resets) | Email address | Contract |
| Understand and improve the product | Usage and device data | Legitimate interest, or consent where required |
| Answer your questions | Support messages | Contract; legitimate interest |
We only send marketing emails if you have agreed to receive them, and every such email includes a way to opt out. We do not use your data for automated decisions that have legal or similarly significant effects on you.
04Who we share it with
We share data only with service providers that help us run PreIndex. Each receives only what it needs for its job and may use it only to provide that service to us. We can change providers over time; email us for the current list.
| Provider | What they do for us | Data involved |
|---|---|---|
| Database & authentication provider | Stores your account and keeps you signed in | Account data, projects, URLs, purchase records |
| Hosting provider | Application hosting and privacy-friendly page analytics | Request and usage data |
| Payment partner (Merchant of Record) | Card, PayPal and Apple Pay payments, invoices and tax | Name, email, payment and billing details |
| Crypto payment gateway | Cryptocurrency payments | Order reference, amount, wallet transaction data |
| Email delivery provider | Delivery of transactional emails | Name, email address, email content |
| Sign in with Google; Google Analytics and Tag Manager | Google profile basics; usage and device data | |
| Indexing infrastructure partners | Submitting your URLs for crawling and indexing | The submitted URLs only |
We do not sell or rent personal data
We may also disclose information if the law requires it, to protect the rights and safety of PreIndex, our users or others, or as part of a merger or acquisition, in which case this policy would continue to apply to your data.
06How long we keep it
- Account, projects and URLs: for as long as your account is open.
- After you delete your account: personal data is removed within 30 days, apart from what we must keep by law.
- Purchase and invoice records: up to 7 years, to meet tax and accounting obligations.
- Security logs: only as long as needed to detect and investigate abuse.
We may keep aggregated statistics that cannot identify you.
07How we protect it
- All traffic is encrypted in transit with TLS.
- Passwords are hashed by our authentication provider; API keys are stored only as SHA-256 hashes.
- Row-level security in our database means each account can reach only its own data.
- Sign-in attempts and API requests are rate-limited, and sessions expire automatically.
- Staff access to production data is limited to what is needed to support you.
No system is perfectly secure. If a breach affecting your personal data occurs, we will notify you and the relevant authorities without undue delay, and where required within 72 hours of becoming aware of it.
08Your rights & choices
Depending on where you live, you may have the right to:
- Access the personal data we hold about you and receive a copy in a portable format.
- Correct inaccurate data. You can update your name and password yourself in Settings.
- Delete your data. You can close your account yourself from Settings → Profile & security.
- Object to or restrict certain processing, and withdraw consent where we rely on it.
- Complain to your local data protection authority.
To make a request, email [email protected] from the address linked to your account. We respond within 30 days and won't charge you for a reasonable request.
09International transfers
Our providers may process data in countries other than yours, including the United States and the European Union. Where that happens, we rely on the safeguards those providers offer, such as standard contractual clauses, to protect your data.
10Children
PreIndex is not intended for anyone under 16, and we don't knowingly collect their data. If you believe a child has given us personal information, contact us and we will delete it.
11Changes to this policy
When we make material changes, we'll notify you by email or in the dashboard before they take effect. The date at the top of this page shows when the policy last changed.
12Contact
For any privacy question or request, email [email protected] or write to us at Plot 174, 2nd Floor, Kashmir Block, Allama Iqbal Town, Lahore 54000, Pakistan.
Still have a question?
Write to us and a member of the team will get back to you. We read every message.
[email protected] · WhatsApp +92 301 9581647