Privacy & Cookie Policy

Version 1.0 • Last updated 7 octobre 2025

1. Introduction

This Privacy & Cookie Policy explains how OÜ b2bspace ("IndexDock", "we", "us") collects, processes, and protects personal data when you visit our marketing properties or use the IndexDock Analyzer. It also describes your choices regarding cookies and consent. The policy applies to all visitors and registered users of indexdock.com and the connected analysis tooling.

2. Data controller & contacts

OÜ b2bspace (registry code 16957970) is the controller for the data described below. Our registered address is Veskiposti tn 2-1002, 10138 Tallinn, Estonia. For data protection inquiries contact info@indexdock.com.

3. Data we process

  • Account data. Email address, hashed password, language preference, timestamps of consent and agreed legal terms.
  • Analyzer usage. URL you submit for screening, job identifiers, number of free analyses performed, diagnostic logs required to run the report, and optional feedback you share.
  • Communications. Emails or contact-form messages you send to us, together with metadata (time, topic, follow-up notes).
  • Device & security data. IP address, user agent, referrer, and request metadata captured in our server logs to keep the service secure.

4. Why we process data

  • Delivering the service. Creating accounts, verifying email ownership, running Analyzer jobs, and providing API responses rely on Art. 6(1)(b) GDPR (performance of a contract).
  • Improving and protecting IndexDock. Usage analytics, security monitoring, and preventing abuse rely on our legitimate interest (Art. 6(1)(f) GDPR).
  • Marketing follow-up. If you request a demo or contact us, we rely on your request (Art. 6(1)(b)) or our legitimate interest to respond (Art. 6(1)(f)).
  • Optional analytics & advertising cookies. These run only after you grant consent (Art. 6(1)(a)).

5. Cookies & tracking technologies

We keep the cookie footprint intentionally small. Essential cookies are set automatically, while analytics cookies run only after you choose “Accept”. Details and retention periods are listed in the Cookie Policy. You can revisit your choice anytime via “Cookie Settings” in the footer.

6. How we share data

  • Infrastructure & operations. We use trusted EU/EEA processors for hosting, logging, and security monitoring. Each processor is bound by a data processing agreement.
  • Analytics & advertising. If you consent, Google Analytics 4 and Google Tag Manager may set cookies. Data is pseudonymised and kept for the minimum practical period.
  • Legal requirements. We may disclose information where required by law or to defend our rights.

7. International transfers

If we transfer personal data outside the EU/EEA, we rely on recognised safeguards such as Standard Contractual Clauses and continuous due diligence on the receiving party.

8. Retention

Account records remain active while you use IndexDock. We delete inactive accounts and related analysis jobs after 12 months or earlier upon request. Server logs are retained for up to 180 days unless needed for incident review.

9. Security

We implement access controls, encryption in transit, continuous monitoring, and regular security reviews. For a detailed description of the safeguards applied when we process data on behalf of customers, see the Data Processing Addendum.

10. Your rights

  • Access, rectification, erasure, restriction, or objection to processing.
  • Data portability for information you provided.
  • Withdrawal of consent at any time (without affecting prior processing).
  • Right to complain to your local supervisory authority (in Estonia: Andmekaitse Inspektsioon).

11. Pricing & Taxes

Prix HT. TVA appliquée selon la réglementation ; autoliquidation possible pour le B2B intra-UE.

Contact commercial : sales@indexdock.com — réponse sous 1 jour ouvré.

11. Contact & requests

Email privacy@indexdock.com for privacy inquiries, or use the contact form for general questions. We respond within 30 days.

12. Updates to this policy

We may revise this policy to reflect legal, technical, or business changes. Significant updates are announced on the website and via email where appropriate. Continued use of IndexDock after the effective date constitutes acceptance of the revised policy.