Privacy Policy
Effective February 25, 2026. This statement describes how IndexBox, Inc. (controller), 2093 Philadelphia Pike #1441, Claymont, DE 19703, USA collects and processes personal data.
1. Data controller & scope
IndexBox, Inc. is the controller for personal data obtained through the website, web application, APIs, and customer support. Payments are processed via Stripe, Inc. acting as our processor. This policy applies to trial users, paying customers, invited collaborators, and website visitors.
2. Data we collect
- Account data: name, email address, phone numbers, organisation details, plan selections, and billing contacts provided during signup or onboarding.
- Usage & telemetry: login timestamps, IP address, device/browser characteristics, API usage, and workspace actions needed to secure the service and enforce limits.
- Payment data: last four digits of cards, billing country, tax identifiers, and invoice history recorded by Stripe. Full payment credentials are stored only by Stripe.
- Content: coursework submissions, practice artifacts, feedback notes, and learning progress data you upload to the platform.
3. Purpose & legal basis
We process personal data to deliver contracted services, comply with legal obligations (including sanctions screening and tax rules), and pursue legitimate interests such as platform analytics, fraud prevention, and product communications. Marketing emails rely on consent and may be withdrawn at any time.
4. Sharing, transfers & retention
Personal data is shared only with vetted sub-processors (hosting, monitoring, email, payments, CRM) under written agreements. Active customer data is retained for the duration of the subscription and archived for up to 12 months for audit and disaster recovery before deletion.
5. Your rights
- Request access, correction, portability, or deletion of your personal data.
- Object to processing based on legitimate interests or restrict specific processing activities.
- Appeal or lodge complaints with your local regulator where applicable.
Requests can be sent to support@indexbox.io. We aim to respond within one month.
6. Contact
Privacy contact: support@indexbox.io — IndexBox, Inc., 2093 Philadelphia Pike #1441, Claymont, DE 19703, USA.