Privacy policy

IndexHigh is made by Harshva Technology Private Limited (“Harshva Technologies”, “we”, “us”), Bageshwar, Uttarakhand 263639, India, and is used by businesses in many countries. We are responsible for the personal data described here. This policy says what IndexHigh collects, why, who else handles it, and what you can ask us to do with it.

In short

• We collect what it takes to research, write, check and publish articles for the websites you add.
• We don’t sell your data, use it for advertising, or use it to train AI models.
• Passwords and tokens for your website and Google are stored encrypted, and nobody can read them back.
• You can disconnect a service or delete a site at any time, and ask us to delete your account.

What we collect

• Your account. Your email address, your name if you give it, and when you signed in. Our sign-in provider, Clerk, handles these.
• The websites you add. When you add a site, we read its public pages: what it’s built with, its plugins, how many posts and pages it has, its categories and time zone, and the text of a few pages, such as the homepage, pricing and about pages. We use these to describe your product and plan articles.
• What a connected site holds. For WordPress, its posts, pages, categories and media library (file names, titles, alt text and addresses). For GitHub, the articles in the repository you choose. We read these so new articles link to what you have and don’t repeat it.
• What you tell us. Your business facts, writing voice, topics to avoid, and the authors you add, with their names and short bios.
• The work itself. Keyword research, drafts and their earlier versions, check and review results, and who approved each article and when.
• Connection keys. The WordPress application password, GitHub access token or Google access you give IndexHigh. They are encrypted before they are stored.
• Activity records. What ran, when, what it cost us, and what changed, such as “article approved” or “site disconnected”. Our logs mask passwords and tokens.

Who else handles it

These companies process data for us, each only for the job listed. Each one handles it under its own terms and privacy policy.

• Clerk: sign-in and account details.
• Vercel: runs the IndexHigh website and app, in Singapore.
• Neon: our database, in Singapore.
• Anthropic: its Claude models write, check and review articles and describe your photos. We send the text of your site’s pages, your facts and voice, topics, keywords, search results, drafts, and the photos being described. We don’t send your account details.
• DataForSEO: keyword and search research. We send your site’s address, keywords, and the country and language you target.
• WordPress, GitHub and Google: only if you connect them, and only your own site, repository or Search Console property.

So your data may be processed outside the country you’re in, including in Singapore, India and the United States. Where the law requires a safeguard for that, such as the European Commission’s Standard Contractual Clauses, we rely on the ones in these companies’ data processing terms.

If your business needs a data processing agreement with us, write to support@harshvatechnologies.com.

Google Search Console

You can connect Search Console to a site, so IndexHigh can show how your articles do on Google. If you do:

• We ask Google for read-only access. IndexHigh can’t change anything in your Search Console account, submit pages, or see your Google email address.
• We read the list of properties your Google account can see, to find the one that matches your site, and that property’s clicks and impressions.
• This data is used only to show you those results in IndexHigh. It is not sent to Anthropic, DataForSEO or anyone else.
• Disconnecting Search Console, or deleting the site, deletes our access and asks Google to cancel it. You can also remove IndexHigh at any time from your Google Account’s security settings.

IndexHigh’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. That means we use Google data only to provide the features you see, never sell it, never use it for advertising, and never use it to train AI models. People at IndexHigh read it only with your permission, to keep the service secure, or when the law requires it.

Why we use it

• To run IndexHigh for you: research, write, check, schedule and publish the articles you ask for.
• To keep it secure, find and fix problems, and control what it costs to run.
• To answer you when you write to us.
• To meet our legal duties, such as tax and accounting records once paid plans start.

If you’re in the European Economic Area or the UK, our legal bases are: providing the service you signed up for (contract), keeping it secure and working (legitimate interests), the connections you choose to make (consent, which you can withdraw by disconnecting), and legal duties.

Cookies and storage in your browser

• Clerk’s cookies keep you signed in.
• One cookie in the dashboard remembers which site you last opened. It lasts a year.
• Your browser’s storage remembers whether you picked light, dark or your device’s setting.

We don’t use analytics, advertising or tracking cookies.

How long we keep it

• We keep a site’s data until you delete the site, and your account until you ask us to close it. We delete an account’s data within 30 days of closing it.
• Deleting a site removes everything we hold for it: facts, research, drafts, photos’ descriptions, results and connections. If it was connected to WordPress, we also delete IndexHigh’s password inside WordPress.
• If it was connected to GitHub, we delete the token on our side. Delete it on GitHub too, since only you can do that.
• Your account’s activity list keeps one line saying the site, by its address, was deleted.
• Backups may hold copies for a short time after that, until they are replaced.
• We keep invoices and payment records for as long as tax law requires, once paid plans start.

How we protect it

Data is encrypted in transit. Website passwords, tokens and Google access are encrypted again with keys kept apart from the database, and they are never shown, even to you. Only the people who run IndexHigh can reach the data, and only to run and support it.

If a breach puts your personal data at risk, we’ll tell you without undue delay, along with the authorities the law requires us to tell.

Your rights

Wherever you live, you can ask us to tell you what we hold about you, give you a copy, correct it, or delete it. You can also withdraw a permission by disconnecting the service. Write to support@harshvatechnologies.com. We’ll reply within 30 days and may ask you to confirm it’s you.

• India. Under the Digital Personal Data Protection Act, 2023, you can also name someone to act for you if you can’t, and raise a grievance with us at support@harshvatechnologies.com. If we don’t resolve it, you can complain to the Data Protection Board of India.
• European Economic Area and UK. Under the GDPR you can also object to how we use your data, ask us to limit it, and complain to your local data protection authority.
• California and other US states. We don’t sell or share personal information for advertising, and we won’t treat you differently for using your rights.

Children

IndexHigh is for businesses and isn’t meant for anyone under 18. We don’t knowingly collect children’s data.

Changes

If this policy changes, we’ll update this page and the date at the top. If a change affects how we use data you already gave us, we’ll tell you in IndexHigh or by email first.

Contact

Questions and requests go to support@harshvatechnologies.com, or see our contact page. Harshva Technology Private Limited, Bageshwar, Uttarakhand 263639, India.