Privacy Policy

1. Who We Are

Rapid Indexer ("we", "us") operates rapid-indexer.com and related APIs. This Privacy Policy explains what data we collect and how we use it when you use our Service. By using the Service you acknowledge this Policy together with our Terms of Service and Refund Policy.

2. Information We Collect

We collect:

• Account data: email address, password hash, verification status, role, account status
• Usage data: URLs submitted, task metadata, API requests, credit ledger entries, support chat messages
• Payment data: amounts, methods, statuses, processor references (PayPal / Stripe / cryptocurrency processors). We do not store full card numbers or crypto private keys
• Technical data: IP address, user agent, session identifiers, approximate geolocation derived from IP, device / browser signals, and security logs
• Analytics data: pages you visit on rapid-indexer.com (including /resources), the referring site or campaign link that brought you, time on page, clicks on outbound links and buttons, signups, and approximate location (country, region, city) and device type. When you are logged in, these visits are linked to your account (user ID and email) and to your payments
• Communications: support messages and email correspondence

3. How We Use Your Information

• Provide, operate, bill for, and improve the Service
• Process payments and credit balances
• Understand which pages, articles, and marketing channels bring visitors, signups, and purchases
• Send transactional email (verification, security, support, important service notices)
• Detect, investigate, and prevent fraud, chargebacks, hacking, scraping, and abuse
• Enforce our Terms, suspend accounts, and protect our infrastructure and other users
• Comply with law and respond to lawful requests
• Where permitted, send product updates or marketing (you may opt out of non-essential marketing)

4. Security, Fraud, and Abuse Monitoring

We actively monitor for abuse. That includes reviewing support content for attack payloads, correlating accounts and IPs, logging API and payment activity, and suspending accounts involved in exploits, IDOR/XSS/SSTI probes, payment manipulation, or similar misconduct.

We may retain security logs and evidence related to abuse investigations even after account closure where needed to protect the Service and pursue remedies.

5. Payment Processors

Payments are handled by third parties such as PayPal, Stripe, and cryptocurrency payment processors. Their processing of your payment data is governed by their own privacy policies. We receive confirmation and reference data needed to credit your account and fight fraud.

6. Sharing of Information

We do not sell your personal information. We may share data with:

• Infrastructure, email, and analytics providers that help us run the Service
• Payment processors for checkout and dispute handling
• Upstream indexing / crawling systems as needed to perform the Service you request (URLs you submit are sent for crawling)
• Law enforcement or regulators when required by law or to protect rights and safety
• Professional advisors in connection with legal, accounting, or security matters

7. Cookies and Similar Technologies

We use essential cookies / session storage for login, CSRF protection, and security.

We also use our own first-party analytics, which we host ourselves (on Cloudflare) at analytics.rapid-indexer.com. It sets two cookies on rapid-indexer.com:

• ml_vid: a random visitor ID, kept for up to 1 year, so repeat visits are recognised
• ml_sid: a random session ID that expires after 30 minutes of inactivity

Analytics data is used only by us to understand and improve the Service and our marketing. It is not sold or shared with advertising networks, and we do not use third-party advertising cookies. You can block or delete these cookies in your browser, or block analytics.rapid-indexer.com, without affecting the Service. Disabling essential cookies may break login and other features.

8. Data Retention

We retain account, payment, task, and log data for as long as needed to operate the Service, meet legal and accounting obligations, and investigate abuse. Security and fraud records may be kept longer when justified. Analytics data is kept for as long as it is useful for reporting, and is deleted with your account on request. You may request account deletion; we may retain minimal records required for compliance or dispute defense.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Contact us to exercise these rights. We may need to verify your identity and may decline requests that are excessive, legally restricted, or that would impair fraud prevention or security.

If you are in the EEA/UK, our lawful bases typically include contract performance, legitimate interests (security, fraud prevention, service improvement), and consent where required.

10. International Transfers

We and our providers may process data in countries other than yours. Where required, we use appropriate safeguards for such transfers.

11. Children

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children.

12. Changes

We may update this Policy at any time. The "Last updated" date will change when we do. Material changes may be highlighted in-product or by email. Continued use after changes means you accept the updated Policy.

13. Contact

Privacy questions: [email protected] or [email protected].