Privacy Policy — Speed Index

1. Introduction

Speed Index ("we", "us", or "our") is operated by The DIGIT. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our URL indexing service. Please read this policy carefully.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and a securely hashed password. We never store your password in plain text.

Usage Data: We log the URLs you submit, submission timestamps, credit usage, and API response data. This data is used to provide and improve the Service.

Payment Information: We collect payment request details (amount, payment method reference, screenshot upload). We do not process card payments directly — all payments are handled manually.

Technical Data: We may log IP addresses for rate-limiting and security purposes. We use session cookies for authentication.

Communications: If you contact us or subscribe to our newsletter, we store your email address and any message content.

3. How We Use Your Information

To provide, operate, and maintain the Service.
To process your URL submissions via the Google Indexing API.
To manage your account, credits, and payment requests.
To send transactional emails (email verification, password reset, payment confirmation).
To send newsletter updates (only if you subscribe — unsubscribe at any time).
To detect and prevent fraud, abuse, and security incidents.
To improve the Service and analyse usage patterns.

4. Data Sharing & Third Parties

We do not sell your personal data. We share data only in the following limited circumstances:

Google Indexing API: URLs you submit are sent to Google's Indexing API as part of the core Service functionality.
Email delivery: We use SMTP to deliver transactional emails. Your email address is used solely for this purpose.
Legal requirements: We may disclose information if required by law or to protect our legal rights.

5. Cookies

We use session cookies solely for authentication — to keep you logged in during your session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required as we only use essential functional cookies.

6. Data Retention

We retain your account data and submission history for as long as your account is active. You may request deletion of your account and associated data by contacting us. Submission logs may be retained for up to 90 days after account deletion for abuse-prevention purposes.

7. Data Security

We implement industry-standard security measures including:

HTTPS/TLS encryption for all data in transit.
Bcrypt password hashing.
CSRF token protection on all forms.
Rate limiting on all public-facing endpoints.
Prepared statements to prevent SQL injection.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but take all reasonable precautions.

8. Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and data.
Unsubscribe from marketing emails at any time.
Object to processing of your data in certain circumstances.

To exercise any of these rights, please contact us.

9. Children's Privacy

The Service is not directed to children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or by posting a notice on our website. Your continued use of the Service after such notice constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us.