Privacy policy

Last updated 13 October 2026. IndexPulse is operated by PuzariCloud (Ritom Puzari, Assam, India). Contact: ritom@puzaricloud.in.

What we collect

• Account: your email address, sign-in times, plan and (if you subscribe) the customer and subscription IDs from our payment provider Paddle. Paddle handles card details; we never see them.
• Search engine credentials: your Bing Webmaster Tools API key or Bing refresh token, and your Google refresh token, encrypted at rest. They are used only to make the requests your AI assistant asks for.
• Sites: the domains you use with IndexPulse and the IndexNow key we generate for each.
• Usage: monthly counts of tool calls and URL checks, and a short log of recent tool calls (tool name, time, duration, success or error message, the name of the AI app) shown on your dashboard and kept for 90 days.
• OAuth for AI apps: the name and redirect address of each AI app you connect, and hashes of the tokens we issue to it.

What we don't store

Search Console and Bing data (queries, clicks, impressions, index status, links) is fetched live when a tool runs, passed to your AI app, and not stored by IndexPulse. Your AI app's own provider (for example Anthropic or OpenAI) processes the results under its own privacy policy.

Google user data

IndexPulse requests read-only access to Google Search Console (webmasters.readonly), or full Search Console access (webmasters) only if you choose to allow sitemap submission. We use this access only to provide the features you request. IndexPulse's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI models, and no person at IndexPulse reads it except with your permission for support, for security, or where the law requires.

Who we share data with

• Microsoft (Bing Webmaster Tools API), Google (Search Console API) and the IndexNow endpoint, when your tools call them.
• Brevo, to send sign-in emails. Paddle, for payments and invoices. Hetzner (Germany), which hosts our server.

Security and retention

Data is stored on our server in Germany with encrypted credentials, HTTPS everywhere and daily backups kept for 14 days. When you disconnect an engine its credentials are deleted (Google access is also revoked). When you delete your account, everything above is deleted immediately, and from backups within 14 days. Paddle keeps invoice records as tax law requires.

Your rights

You can see your data on the dashboard, export it or ask for corrections by email, and delete your account yourself under Account. You can also revoke IndexPulse's Google access at myaccount.google.com/permissions.

Cookies

One sign-in cookie and a short-lived message cookie. No analytics or advertising cookies.