Privacy Policy

Data Collection

We collect the minimum data needed to provide the service: your email address and name when you create an account, and usage data such as votes and feedback submissions.

Anonymous voters on a FeedIndex portal are identified by a random identifier stored in a first-party cookie (see Cookies below). We do not process your IP address for portal voting. Anonymous voters submitting through a FeedIndex widget embedded on a third-party site, or through the server-to-server public API, are identified by a salted hash of IP address and user agent, because cross-site and server-to-server requests cannot rely on browser cookies — we do not store raw IP addresses in either case.

Lawful Basis

We process personal data on two legal bases under the GDPR: performance of a contract (to provide the service you signed up for) and legitimate interest (to operate, secure, and improve the service). We do not rely on consent for core service functionality, so there is nothing to withdraw — but you can delete your account and all associated data at any time.

How We Use Your Data

Your data is used to operate the FeedIndex service, send transactional emails (login links, status notifications, digest emails), and improve the product. We do not sell your data to third parties or use it for advertising.

Data Storage

All data is stored and processed on servers in the European Union. Data is encrypted in transit and at rest.

Cookies

We use two first-party cookies and nothing else. A session cookie keeps you signed in, managed by our authentication provider. An anonymous-voter cookie (a random identifier, no personal data) is set the first time you vote or submit feedback on a FeedIndex portal, so we can prevent duplicate votes without processing your IP address. Both are strictly necessary under ePrivacy Article 5(3) — they support actions you actively initiate — and neither requires consent.

We do not use marketing, advertising, or third-party tracking cookies, and we do not run analytics that require a cookie banner.

Subprocessors

We use the following third parties to operate FeedIndex. Each processes personal data only as necessary to provide their service, under their own privacy policy:

• Neon — database hosting (EU region)
• Vercel — application hosting (EU region)
• Resend — transactional email delivery
• Google — optional Google sign-in
• Stripe — payment processing (only once paid plans are enabled)

Your Rights

Under the GDPR you have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. You can delete your account and all associated data from your account settings at any time, or request a data export by contacting us. Board owners can export their own board data via CSV export.

Contact

Questions about this policy? Email us at privacy@feedindex.app.