Privacy Policy
We collect as little as possible, never sell your data, and let you delete it in one click. This page explains exactly what we keep and why.
We keep the cookie and data footprint intentionally small — essential cookies only, unless you opt in.
Analytics and advertising cookies run only after you choose “Accept”.
Access, delete, port or object anytime — accounts removed after 12 months of inactivity.
Introduction
This Privacy & Cookie Policy explains how AIR SCULPT LLC (ТОВ «АІР СКУЛЬПТ»), trading as "IndexDock" ("we", "us"), collects, processes, and protects personal data when you visit our marketing properties or use the IndexDock Analyzer. It also describes your choices regarding cookies and consent. The policy applies to all visitors and registered users of indexdock.com and the connected analysis tooling.
Data controller & contacts
AIR SCULPT LLC (ТОВ «АІР СКУЛЬПТ»), registry code 40911978, is the controller for the data described below. Our registered address is Honty Ivana St 2, office 1, 07400 Brovary, Kyiv region, Ukraine. For data protection inquiries contact info@indexdock.com.
Data we process
- Account data. Email address, hashed password, language preference, timestamps of consent and agreed legal terms.
- Analyzer usage. URL you submit for screening, job identifiers, number of free analyses performed, diagnostic logs required to run the report, and optional feedback you share.
- Communications. Emails or contact-form messages you send to us, together with metadata (time, topic, follow-up notes).
- Device & security data. IP address, user agent, referrer, and request metadata captured in our server logs to keep the service secure.
Why we process data
- Delivering the service. Creating accounts, verifying email ownership, running Analyzer jobs, and providing API responses rely on Art. 6(1)(b) GDPR (performance of a contract).
- Improving and protecting IndexDock. Usage analytics, security monitoring, and preventing abuse rely on our legitimate interest (Art. 6(1)(f) GDPR).
- Marketing follow-up. If you request a demo or contact us, we rely on your request (Art. 6(1)(b)) or our legitimate interest to respond (Art. 6(1)(f)).
- Optional analytics & advertising cookies. These run only after you grant consent (Art. 6(1)(a)).
International transfers
If we transfer personal data outside the EU/EEA, we rely on recognised safeguards such as Standard Contractual Clauses and continuous due diligence on the receiving party.
Retention
Account records remain active while you use IndexDock. We delete inactive accounts and related analysis jobs after 12 months or earlier upon request. Server logs are retained for up to 180 days unless needed for incident review.
Security
We implement access controls, encryption in transit, continuous monitoring, and regular security reviews. For a detailed description of the safeguards applied when we process data on behalf of customers, see the Data Processing Addendum.
Your rights
- Access, rectification, erasure, restriction, or objection to processing.
- Data portability for information you provided.
- Withdrawal of consent at any time (without affecting prior processing).
- Right to complain to your local supervisory authority (in Ukraine: the Ukrainian Parliament Commissioner for Human Rights).
Pricing & Taxes
Preise zzgl. MwSt. Umsatzsteuer nach gesetzlicher Regelung; Reverse-Charge ggf. bei innergemeinschaftlichen B2B-Leistungen.
Vertriebskontakt: sales@indexdock.com — Antwort innerhalb von 1 Werktag.
Contact & requests
Email privacy@indexdock.com for privacy inquiries, or use the contact form for general questions. We respond within 30 days.
Updates to this policy
We may revise this policy to reflect legal, technical, or business changes. Significant updates are announced on the website and via email where appropriate. Continued use of IndexDock after the effective date constitutes acceptance of the revised policy.
Questions about your data?
Email our privacy contact, or request access or deletion of your data — handled in one step.