easyIndex privacy policy

Last updated October 8, 2026

This policy explains what personal data easyIndex (https://easyindex.app) collects, why, how it is used, stored, shared and protected, how long it is kept, and how you can access or delete it. It covers the easyIndex website and dashboard, the easyIndex MCP server your coding agent connects to, and the tracking script you may install on your own website.

easyIndex helps a company become the source AI assistants such as ChatGPT, Claude, Gemini and Perplexity cite. The company's own coding agent changes its website; easyIndex tells the agent what to do next, checks the result on the live website, connects to Google Search Console when the owner asks, and shows the results on a dashboard.

1. Who is responsible

easyIndex is responsible for the personal data described here. For any question or request about your data, write to support@easyindex.app.

2. Data we collect

Account data. Your name, email address and Google account ID, received when you sign in with Google, or, if you sign up with email and a password, your name, email address and the password stored only as a one-way hash (bcrypt), never in readable form; the easyIndex accounts you belong to; invitations you send (the invited person's email address); and when your coding agent last called easyIndex.
Website data you or your agent provide. Each website's address, and what your coding agent saves about the business: what it sells, markets and languages, official facts and their sources, the plan of pages, page drafts, and ranking scan results.
Checks of your public website. What easyIndex reads from your public pages when it audits them (titles, headings, structured data, links, status codes). These are public pages, not personal data.
Google user data. Only if you connect Google Search Console for a website; described in detail in section 5.
Visitor data from your website, if you install our tracking script. For each page view: the page path, the referring site, the utm_source parameter, and a random visitor ID stored in the visitor's own browser (localStorage). For conversions you choose to report: the conversion name. For AI crawlers: the crawler's user agent and the path it read. When a page view arrives, we look up its IP address in an offline database (DB-IP) on our own server and keep only the country and the state or region; the IP address is then discarded, never stored and never sent to anyone. We do not store IP addresses, names, emails or any other identifier of your visitors, and the script sets no cookies.
Billing data. If billing applies, payments are processed by Stripe. We store only the Stripe customer and subscription IDs, the subscription status, the trial end date and the currency. The currency follows your country, which we look up from your IP address in the same offline database (DB-IP); the IP address is not stored. We never receive or store card numbers.
Cookies. easyIndex sets only cookies needed for it to work: a session cookie that keeps you signed in (up to 30 days), a cookie that remembers the language you chose, and short-lived cookies that protect the Google sign-in and Search Console connection against forgery. No advertising or analytics cookies.

3. How we use data

To provide the service: sign you in, guide your coding agent, check your public pages, measure visits and AI crawler reads on your website, and show you the results.
To operate Google Search Console for your website when you ask, as described in section 5.
To bill the account, when billing applies.
To keep easyIndex secure, prevent abuse, and fix problems.

We do not sell personal data, do not use it for advertising, and do not use it to build profiles of you or your visitors.

4. How we share data

We share data only in these cases:

With the people in your easyIndex account. Everyone you invite to an account sees that account's websites and their data.
With service providers that run easyIndex for us: Railway (hosting and database), Stripe (payments) and Resend (sending the emails that confirm your address, reset your password and answer support). They process data only on our instructions.
When the law requires it, or to protect the rights and safety of our users.

5. Google user data

easyIndex asks for access to your Google account only for features you start yourself. The table below lists each permission (OAuth scope), when it is requested, and exactly what easyIndex does with it.

openid, email, profileSigning in to easyIndexYour name, email address and Google account ID, to create your easyIndex account and sign you in. Nothing else from your Google account.

Search Console (webmasters)Connecting Search Console for a website, which you start yourselfLists the Search Console properties of the Google account you connect, so you can pick your website's; adds your website as a property when you ask; submits its sitemap; reads its search performance (clicks, impressions, queries and pages) and the index status of its pages through URL Inspection. Shown only to the people in your easyIndex account.

Site Verification (siteverification)Only when the connected Google account does not own your website yetGets a verification tag for your website from Google and asks Google to check it, so the website can be added to Search Console.

Data accessed

From Google sign-in: your name, email address and Google account ID.
From Google Search Console, for the website you connect: the list of Search Console properties the connected Google account can use; search performance data (clicks, impressions, queries, pages, positions); the indexing status of the website's pages from URL Inspection; and the sitemap and property settings easyIndex creates for you.
From Google Site Verification, only when needed: the verification token for your website and the result of Google's check.

Data usage

Google user data is used only to provide the features you see in easyIndex: signing you in, adding your website to Search Console and verifying it, submitting its sitemap, recording the starting point of your website when Search Console is connected, showing your Google searches in Analytics, and showing which of your pages Google has indexed. It is not used for any other purpose.

Data sharing

Google user data is shown only to the people in the easyIndex account that owns the website. It is not shared with, sold to, or transferred to any third party, except the hosting provider that stores it for us (Railway) and where the law requires it.

Data storage and protection

We store: the email of the Google account you connected, its OAuth refresh token, the Search Console property you chose, the verification token while verification is in progress, the sitemap address and when it was submitted, a one-time starting point (28 days of clicks and impressions, and which sitemap pages were indexed when you connected), and each published page's indexing status.
Search performance shown in Analytics is read from Google when you open it and kept only in server memory, for up to one hour.
The refresh token is encrypted at rest with AES-256-GCM. All traffic is encrypted with TLS. Access to the database is limited to the people who operate easyIndex.

Data retention and deletion

Google user data is kept while the website stays connected to Search Console in your account.
You can disconnect Search Console at any time from the website's Search Console panel in easyIndex. easyIndex then revokes its Google access and deletes the stored connection, including the refresh token, at once.
You can also remove easyIndex's access in your Google account permissions; easyIndex then can no longer read or change anything.
To delete all your data, including Google user data, write to support@easyindex.app; we delete it within 30 days.

Limited Use

easyIndex's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: Google user data is used only to provide or improve user-facing features of easyIndex; it is not transferred to others except as needed for those features, for security, or to comply with the law; it is never used or transferred for advertising, sold, or used to determine creditworthiness; it is never used to train or improve AI or machine learning models; and no person reads it unless you give permission, it is needed for security or to investigate abuse, or the law requires it.

6. How long we keep data

Account and website data: while your account exists.
Visitor and crawler data from your website: while the website is in your account.
When you ask us to delete your account, we delete its data within 30 days; copies in backups are deleted as those backups expire.

7. Your rights and choices

You can see and correct most of your data in easyIndex itself (Company, Content, Settings).
You can ask for a copy of your data, its correction or its deletion by writing to support@easyindex.app. We answer within 30 days.
You can disconnect Search Console and all coding agents at any time, as described above.

8. Where data is stored

Data is stored by our hosting provider, Railway, which may store it outside your country. We rely on the provider's safeguards for international transfers.

9. Children

easyIndex is a business tool. It is not meant for people under 18, and we do not knowingly collect their data.

10. Changes to this policy

If easyIndex changes what it collects or how it uses data, we update this page and the date at the top before the change takes effect.

11. Contact

Questions, requests to access, correct or delete data: support@easyindex.app. See also the terms of service.