onindex.ai/privacy
onindex privacy policy
Status: version of 2026-10-25, published as our current practice. A lawyer's review is pending and may change the wording; the facts below are the system as built. Not legal advice.
1. Who we are
onindex is run by doop Technologies Inc., a federal corporation based in Ontario, Canada. Canada's federal privacy law for businesses, the Personal Information Protection and Electronic Documents Act (PIPEDA), applies to us. Our privacy officer is David Gafni, reachable at corrections@onindex.ai, the one address for corrections, privacy requests and questions.
2. Two kinds of personal information
Personal information is information about an identifiable person. onindex handles two kinds: information about people who use onindex (customers, people who try the free check, people who claim an organization or get alerts), and information inside pages, drawn from public sources. Sections 3 to 5 cover the first, section 6 the second.
3. What we collect, why, where and for how long
| What | Why | Where | How long |
|---|---|---|---|
| Your email address, and for a claimed organization the fact that it is on the organization's own domain | Sign you in by a link sent to it; send the report, alerts and account notices | Our database in Canada; Resend sends the mail | While your account exists, then thirty days |
| What you tell us about the organization: name, website, city, registry identifier, your custom questions, your official answers | Build and check the report; publish the official answer on the record | Our database in Canada; the public page carries the organization's name and the official answer | While the account exists; a published official answer stays on the record, dated, with its history |
| Reports and alerts: what each assistant answered, the verdict, the pages it relied on | The service you bought; the history behind the alerts | Our database in Canada | While the account exists, then thirty days |
| The assistants' raw answers | Re-check a verdict; audit the method | Working storage with our compute provider in the United States, never served to anyone | Ninety days, longer only while a subscription needs them for its history |
| Copies of the public pages we read: the organization's site and public registries | Source each claim; let a second reader re-check it | Working storage with our compute provider in the United States | While the page or report they support is published |
| The free check: the organization name and website you type, and your network address kept only as a keyed hash | Run the check; limit each address to three a day | Our database in Canada; the hash cannot be turned back into the address | The hash for one day; the check itself as a funnel event (below) |
| Funnel events: a check run, an email left, a checkout started, a payment, a claim, each with the account it belongs to | Know whether the service is being found and bought | Our database in Canada | Twelve months |
| Payment: your name as Stripe holds it, a Stripe customer reference, the subscription and its status | Charge for paid tiers; let you manage the subscription | Stripe holds the card details; we never see full card numbers | Invoices and payment records seven years, as Canadian tax law requires |
| Sign-in: a single-use link (valid fifteen minutes for a claim, a day for a login) and one signed session cookie | Keep you signed in without a password | The link is stored only as a hash; the cookie lives in your browser | The link until used or expired; the cookie fourteen days |
| Site visits: your network address and browser as every web server sees them | Serve the pages; tell AI crawlers from people | Cloudflare, which serves the site; the page fonts load from Google, which sees your address as any font server does | Cloudflare's own log retention |
We keep no advertising identifiers and set no cookie other than the session cookie. There is no analytics script on any page.
Processors, and where each holds data: Supabase (our database, Canada Central region), Modal (compute and working storage, United States), Cloudflare (hosting, DNS and the routing of our email addresses), Stripe (payments), Resend (transactional email, United States), Google Fonts (the page typefaces), and the assistant vendors we ask on your behalf: Anthropic, OpenAI, Perplexity and xAI. The vendors receive the organization's name, its website and the questions, never your email or account details; we ask them not to store the exchange where their API allows it, and xAI states that it keeps API traffic for thirty days. Our content repository is private.
4. What we do not do
- No advertising, ever: no ad networks, no ad trackers.
- No sale, rental or trade of personal information.
- No sharing beyond the processors above, except where the law requires it; a legal demand that changes a page is logged and published, as the corrections and removal process describes.
- No accounts for people under eighteen: the service is for organizations and the people who act for them.
- If the company is sold, this policy continues to apply and we tell you.
5. Your rights and how to use them
You can ask to see, correct or delete the personal information we hold about you, or withdraw consent. Write to corrections@onindex.ai. We check that you are who you say and answer within thirty days, as PIPEDA requires. When you close an account we delete your information within thirty days, except the payment records we must keep and the public correction log, which never names a private person. Complaints go to the Office of the Privacy Commissioner of Canada.
6. Information inside pages
Pages describe organizations. They name people only in public, professional roles, drawn from official sources, registries and reputable publications, attributed and dated. If a page names you and you want to see, correct or remove what it says, use the corrections and removal process. Pages about individual people do not exist; their rules are added there before the first one.
7. If you are in the European Economic Area or the United Kingdom
The General Data Protection Regulation (GDPR) and its UK equivalent give you the rights in section 5, plus the rights to object and to receive your data in a portable form, answered within one month. Our lawful basis for publishing pages is legitimate interest; for customers it is our contract with you; for alerts it is your request. Your information is held in Canada or by the processors in section 3, and the EU and UK recognise Canada's PIPEDA regime as adequate for commercial organizations. You may complain to your local data protection authority.
8. Security
Each system holds only the secret it needs, raw fetched content is isolated from every credential, the model that reads it can take no action, and the protocol we follow is published. If a breach creates a real risk of significant harm, we notify the Privacy Commissioner and the people affected, as PIPEDA requires.
9. Changes
Changes are dated on a public changelog. Changes to how we use your information are emailed to subscribers and customers first.