Privacy policy
Last updated: 16 October 2026
1. Who is responsible
The controller for data processing on instantindexingpro.com and in the InstantIndexingPro app is:
Abdul Musah, InstantIndexingPro, Hutäcker 17, 91347 Aufseß, Germany
Phone: +49 151 68495881 · Email: support@instantindexingpro.com
For any question about your data, or to use your rights, write to support@instantindexingpro.com.
2. What we process and why
Visiting the website
When you open a page, our server receives technical data your browser sends automatically: IP address, date and time, page requested, referrer, browser and operating system. We use it to deliver the website, keep it secure and find errors (Art. 6 (1) (f) GDPR — legitimate interest in a secure, working website). Server logs are deleted after 14 days at the latest, unless we need a specific entry to investigate an attack.
Your account
When you register we store your name, email address, a securely hashed password, your plan and the settings you make. We need this to provide the service you signed up for (Art. 6 (1) (b) GDPR — contract). We send you the emails needed to run your account (confirmation, password reset, important service and billing notices).
Using the service
When you use InstantIndexingPro we process the URLs you submit, the results of our checks (status codes, indexing blockers, crawler visits, index checks), websites you connect, your IndexNow keys and — if you add them — Google service-account keys and API keys, which are stored encrypted and used only for your own submissions. URLs that pass the pre-flight check are listed on public discovery pages of our website so that crawlers can find them; do not submit URLs you want to keep private. Webhook URLs you add receive signed event messages. We process this data to provide the service (Art. 6 (1) (b) GDPR).
Payments
Paid plans are billed through Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. Stripe receives your payment details directly — we never see or store your full card number. We receive and keep the plan, payment status, invoice data and a Stripe customer reference (Art. 6 (1) (b) and (c) GDPR; invoices are kept for the periods required by German tax and commercial law, usually 8–10 years). Stripe's privacy policy: stripe.com/privacy.
Contact form and email
If you contact us, we use your message and contact details only to answer your request (Art. 6 (1) (b) or (f) GDPR) and delete them when they are no longer needed, unless legal retention periods apply.
3. Service providers we use
- Hosting: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus — our server is located in the EU. Data processing agreement in place (Art. 28 GDPR).
- Payments: Stripe (see above).
- Search engines and indexing services: the URLs you submit (never your personal data) are sent to IndexNow, Bing, Yandex and other search engines, feed hubs and ping services, and — only if you connect it — to the Google Indexing API under your own Google account.
- Search results data: to check whether URLs are indexed and to track Google AI Overviews we query a search-results API (Serper.dev / SerpApi). Only the URL or keyword is sent.
- AI providers: for AI features (such as the AI visibility check) the questions and brand names you enter are sent to AI model providers (for example via OpenRouter or Ollama Cloud). No account data is sent.
- Email: service emails are sent through our own mail server at Hostinger.
Where a provider processes data outside the EU/EEA, this happens on the basis of an adequacy decision (such as the EU-U.S. Data Privacy Framework) or the EU standard contractual clauses.
4. Cookies and tracking
We only use cookies that are strictly necessary: a session cookie that keeps you logged in and a small setting that remembers your light/dark theme. We do not use advertising cookies and do not sell your data. We do not use analytics or tracking tools.
5. How long we keep data
Account data is kept while your account exists. When you delete your account or ask us to, we delete your data within 30 days, except where the law requires us to keep it (for example invoices). Backups are overwritten within 30 days.
6. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). If you gave consent, you can withdraw it at any time with effect for the future. Just email support@instantindexingpro.com.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany — www.lda.bayern.de.
7. Security
All connections use encrypted HTTPS. Passwords are stored only as secure hashes, and secrets such as API keys you add are stored encrypted.
8. Changes
We update this policy when our service or the law changes. The current version is always available on this page.