Privacy Policy

Nov 1, 2025

This Privacy Policy applies to Indexos Labs, Inc. (or applicable affiliate) and its subsidiaries and affiliates (collectively, “Indexos”, “we”, “us”, “ our”), and to all Indexos websites, applications, promotions, products, and services (collectively, the “ Service”), including those that link to this Privacy Policy. It describes how we collect, use, share, transfer, store, retain, and otherwise process your personal information. This Privacy Policy also applies to any surveys, rewards, promotions, sweepstakes, contests, referrals, events, or other marketing activities conducted by Indexos or in connection with the Service (“Indexos Marketing”). We share your information only as described here or as permitted by law. Capitalized terms not defined here have the meanings given in Indexos’s Terms of Service. Please review this Privacy Policy carefully.

This Privacy Policy does not apply to, and we are not responsible for, any third-party services, websites, or applications that we do not own or control, including those that link to or integrate with the Service. To understand how third parties process and protect your information, please review their privacy policies and terms.

We may update this Privacy Policy periodically and post the updated version on our website at https://indexos.com (the “Website”), indicating when it was last updated. If there are material changes, we will post a notice on the Website and/or provide other notice as required by law. If you object to changes, you may cancel your account at any time per our Terms of Service.

Information We Collect From You

Contact Information. Name, email address, telephone number, job title, company name and size.

Account Information. When you sign up for a Indexos account or register as a Indexos user, we collect contact and identifying information about you and your organization (e.g., company name and address, formation or business documents, business license, tax documents, phone number, business email). We may also collect sensitive personal information as needed to establish or verify your business account.

Sensitive Personal Information. In connection with identity and account verification, we may collect your date of birth (for natural persons), government-issued identification, and tax identifiers (e.g., Tax Identification Number or Social Security Number) ( collectively, “TIN”). Where permitted by law and only if strictly necessary, we may collect additional attributes you provide.

Device Information. We may require device details for multi-factor authentication (e.g., device ID).

Financial Information. If you use the Service to make or receive payments, we may collect bank routing and account information (including statements or ownership verification) and/or a credit or debit card for billing Service fees. Where relevant, we may collect revenue or other financial data to verify financial condition or creditworthiness.

Business and Customer Contacts. You may provide information about your business customers and vendors (e.g., name, address, email, phone, TIN, and financial information) as part of your use of the Service and payment instructions. If you import contacts (e.g., from email or CRM) to invite them to Indexos, we will process the credentials or tokens you authorize and the contact details you choose to import.

Payment Transaction Information. When you request, make, receive, record, or otherwise process a payment via the Service, we collect details such as date/time, locations, sender/recipient identifiers, amounts, bank information, descriptions, and any Service fees.

Other Transactional Information. Any other information you choose to share in connection with your use of Indexos.

Customer Support and Feedback. We collect information you provide when you contact support or give feedback, including via in-product tools or when participating in Indexos Marketing. Where permitted by law, we may monitor or record phone calls or messages for training, quality assurance, and security.

Referrals. If you refer a business to Indexos, we use the contact details you provide to send an invitation and may retain referral information solely to track program success.

Online Forms. Information you provide when engaging at events, completing surveys, or participating in promotions or referrals.

Indexos Marketing Participant Information. Name, email address, telephone number, job title, company name and size.

Other. As we introduce new products, features, or uses, we may collect new categories of information as reasonably necessary to provide the Service and as disclosed to you.

Information We Collect From Your Use of the Service

Device Information. When you install, access, or use the Service, we collect device details (e.g., IP address, hardware model, OS version, app version, browser type, mobile network). Depending on your settings, your device may allow access to contacts or other device-based data (you control this via OS permissions).

Analytics Information. We collect usage data about how you access and use the Service (e.g., approximate geolocation, ISP domain, access dates/times, pages viewed, search terms, and device identifiers).

Application Integrations. Application Integrations. If you connect third-party services (e.g., accounting tools, cloud storage, e-commerce, communication platforms, TikTok SDK/Pixel or Ads integrations, etc.), we may receive information from those services per your settings and the third party’s policies.

Business Records. Records of your purchases of products or Services from us.

Marketing Information. We and our partners use cookies and similar technologies to gather information about your activities to provide analytics and interest-based advertising. See Cookies and Third-Party Technologies below.

Information We Collect About You From Third Parties

Contact & Demographic Information. From consumer data providers or enrichment services (where lawful).

Vendors / Business Customers. Vendors / Business Customers. From third parties you interact with via the Service (e.g., your vendors or business customers).

Financial Information. From credit bureaus (credit history), banks, or payment partners (account verification) when you create or use your account.

Address & Organization Verification. From commercially available sources to help keep account details accurate and up-to-date.

Marketing Leads. From lead-generation services and analytics providers (including enriched visitor data).

Device & Risk Signals. From fraud-prevention and risk-management service providers.

How We Use Information

Registering Your Account. To review, establish, provide, administer, maintain, and monitor your Indexos account and access to the Service.

Identity & Compliance. To verify identity and comply with AML/CFT, KYC, sanctions, and other legal obligations.

Providing the Service. To operate core features (including processing payments you request), maintain transaction history, provide account info, and conduct general business operations (accounting, recordkeeping, audits). We use information only for purposes for which you shared it.

Address & Organization Verification. From commercially available sources to help keep account details accurate and up-to-date.

Communications. To contact you regarding the Service or your account (security alerts, MFA, technical or administrative messages) and to provide customer and technical support.

Improvement & Development. To aggregate/anonymize data (including transaction and feedback data) to improve the Service, develop new features, measure performance, and understand usage patterns. We may track link clicks to improve quality and partner activities.

Marketing & Advertising. To market the Service, communicate about features and offers, and identify similar prospective business customers.

Referrals. To send invitations and track program success.

Security & Fraud. To prevent, detect, investigate, and report fraud, abuse, or security incidents.

Legal Compliance. To respond to lawful requests (e.g., warrants, court orders, subpoenas) and comply with applicable law.

How We Share Information

With Third Parties You Authorize. With other users on your Indexos account per your settings. Account administrators may access user information and adjust settings. If you authorize accountants or other providers, we share data as needed to provide their services.

With Third Parties You Interact With via Indexos. With vendors, business customers, and integrated third-party services (e.g., data entry, accounting software, social platforms, TikTok SDK/Pixel/Ads if you opt in). We use shared information only for the purposes you direct.

With Participants in the Indexos Network (for relevant transactions). With network members or payment partners to administer transactions you initiate. Their processing is governed by their own privacy policies.

With Service Providers & Business Partners. With providers supporting identity verification, payment processing, fraud prevention, hosting, storage, database management, web analytics, customer support, and marketing. These providers access your information only to perform tasks for us, consistent with this Policy and our agreements.

Online Advertising Partners. With partners that use cookies and similar technologies to personalize, retarget, and measure ads.

Government / Law Enforcement. Where we believe we are lawfully authorized or required to respond to legal requests or to protect rights, property, or safety.

Business Transactions. In connection with mergers, acquisitions, financings, reorganizations, asset sales, bankruptcies, or similar transactions.

Identity & Compliance. With third parties for KYC/AML/CFT and sanctions checks as required by law.

Aggregated/Anonymized Uses. We may share aggregated and anonymized data for analytics and industry insights. Such data does not identify you.

With Your Consent. As otherwise directed or consented by you.

Data Retention

We retain information per our internal retention policies and as necessary to provide the Service, administer your account, comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements.

Security

We implement technical, administrative, and physical safeguards designed to protect your information against unauthorized access, disclosure, use, and modification. However, no security program is infallible, and we cannot guarantee absolute security of networks, systems, servers, devices, or databases we operate or that operate on our behalf.

International Transfers

Your information may be transferred to and processed in countries other than your own (including the United States), which may have different data-protection laws. By providing information or using the Service, you consent to such transfers, subject to applicable safeguards.

Job Applicants

We may collect information you provide in applications, information available publicly or via social media, and details from references or former employers (with your authorization). If you apply via a third-party platform, their privacy practices apply to the submission of your materials.

Children’s Privacy

The Service is not intended for individuals under 18. If we learn that a child under 18 has created an account or used the Service, we will take reasonable steps to remove access and delete related information.

Privacy Disclosures for Specific Jurisdictions: California

Your California Privacy Rights (CCPA/CPRA). These disclosures apply to California residents from whom we collect personal information through any channel (Site, Service, communications).

Notice at Collection. In the past 12 months, we may have collected for business or commercial purposes the following categories of personal information:

  • Identifiers (e.g., name, address, email, IP address, online identifiers)
  • Customer Records (e.g., phone number, bank or card details)
  • Protected Class Characteristics (as voluntarily provided and where lawful)
  • Commercial/Transaction Data (e.g., Services obtained)
  • Internet Activity (e.g., browsing, interactions with site/app/emails)
  • Geolocation Data (approximate)
  • Employment Information (e.g., professional history)
  • Inferences (derived from the above)

See sections Information We Collect and How We Use Information for details. We disclose personal information as described in How We Share Information.

Rights to Know, Correct, and Delete. You may request:

  • Categories of personal information collected;
  • Categories of sources;
  • Categories of personal information disclosed/sold/shared;
  • Categories of recipients;
  • Business/commercial purposes;
  • Specific pieces of personal information we collected about you;

Subject to legal exceptions, you may request correction or deletion. To exercise rights, contact us at contact@indexos.com with your name and sufficient details regarding your request. We will verify your identity/authority as required by law and respond within statutory timeframes. If we processed your data as a service provider on behalf of a business customer, please direct requests to that business; if you contact us, include the business customer’s name so we can route the request.

Sale/Sharing Opt-Out. CPRA defines “share” broadly (e.g., cross-context behavioral advertising) and “sell” broadly (e.g., for value). Our marketing may constitute “selling” or “sharing” of identifiers, characteristics, commercial data, internet activity, non-precise location, and inferences with advertising partners. You may opt out by adjusting cookie preferences (see How You Can Manage Your Privacy Choices), emailing contact@indexos.com, or submitting a request via [Your Privacy Choices] on our Website.

Retention. We retain each category of personal information for as long as reasonably necessary for the purposes collected and to meet legal, security, and operational requirements.

Non-Discrimination. We will not discriminate against you for exercising your rights.

Shine the Light. California residents may request information about our disclosures of certain personal information to third parties for their direct marketing in the prior calendar year. We do not share your information with third parties for their own direct marketing purposes.

Cookies and Third-Party Technologies

Indexos and our service providers use cookies, pixels, SDKs (including, where applicable and with your consent, the TikTok Pixel/SDK), and similar technologies to store preferences, enable content, gather analytics, and deliver targeted ads.

Types of Cookies

  • Essential: Required for core functionality and secure login.
  • Analytics: Help us understand usage (e.g., which pages are most visited).
  • Customer Interaction: Enable live chat or messaging features.
  • Marketing: Support interest-based advertising and measurement.

See How You Can Manage Your Privacy Choices to control cookies.

How You Can Manage Your Privacy Choices

Profile Visibility. Your account/profile settings control how information is shared within theIndexos network or with the public.

Update Account Information. You can access and edit your information and email preferences in your account settings. Restricting processing may limit features (e.g., payment capabilities).

Cancel Your Account. You may cancel at any time via the Service (see Terms of Service). This Policy continues to apply to information previously collected.

Marketing Preferences.

  • Emails: click Unsubscribe in any marketing email.
  • SMS: reply STOP or follow instructions in the message. We may still send transactional or account-related messages.

Device & Browser Settings. Adjust OS/browser permissions to control access to contacts, notifications, and cookies. Disabling certain cookies or permissions may affect functionality or require additional authentication.

Targeted Ads Opt-Out.

  • Industry Choices: Network Advertising Initiative (NAI), Digital Advertising Alliance (DAA), and European Interactive Digital Advertising Alliance (EDAA).
  • Analytics Controls: You can opt out of Google Analytics via their browser add-on or by configuring your browser to delete/reject cookies.
  • Do Not Track: Browser DNT signals are not yet uniform; we currently do not respond to DNT.

Third-Party Syncs. If you connect Indexos to third-party services (e.g., accounting, social, ad platforms), we will share data with those services as needed. To stop sharing, disconnect the integration in your settings.

Community Forums. Information you post in public forums or blogs may be read, collected, and used by others.

Auto-Dialed Calls / MFA. With your consent and where lawful, we may send informational auto-dialed calls or texts (including for MFA). Opting out may limit access to certain features (e.g., payment authorization).

Contact Us

If you have questions or wish to exercise your rights, please contact:

See How You Can Manage Your Privacy Choices to control cookies.

Indexos, Inc.

Attn: Privacy / Operations

Email: contact@indexos.com

E-SIGN Disclosure and Consent

By using the Service, you agree to receive electronic communications and disclosures as described in our E-SIGN Disclosure, which we provide electronically and store for your records.

Table of contents

Indexos is your command center for smarter inventory management, forecasting, and financing

© Indexos, 2025

SOC 2 Compliant