Privacy Policy
1. Commitment to Privacy & Least Privilege
At AnswerIndex (accessible via https://answerindex.xyz), we design our autonomous growth systems around the strict principle of least privilege. We operate with radical transparency regarding data collection, storage, and processing.
2. Information We Collect
We collect only the minimum operational information required to analyze and deliver authoritative AEO/GEO improvements:
- Account & Contact Data: Name, work email address, company name, and billing details processed securely via our payment processor.
- Connected Platform Integrations: Scoped OAuth tokens or API keys for Google Search Console (read-only query impressions and click telemetry), GitHub (scoped to branch creation and pull request submission on target repositories), and CMS credentials (scoped draft generation in WordPress, Shopify, or Magento).
- Brand Truth Wiki Data: Ground-truth company facts, official pricing tiers, leadership bios, and product specifications you explicitly input into your D1 Knowledge Base to prevent AI hallucinations.
- Technical Diagnostics: Domain name, public HTTP headers, DNS records, robots.txt, sitemaps, and publicly visible Schema.org markup inspected during audit scans.
3. Information We Explicitly Never Collect
- ❌ Proprietary intellectual property, unpublished codebase logic, or internal database records outside target documentation/landing pages.
- ❌ Credit card numbers or full bank account details (managed directly by PCI-DSS Level 1 compliant processors).
- ❌ Personal identification numbers, health records, or sensitive personal data.
4. Data Storage & Cryptographic Security
All account information, Brand Truth documents, and integration credentials are encrypted at rest using industry-standard AES-256 GCM encryption in Cloudflare D1 distributed databases. All transmission across our edge network enforces TLS 1.3 / HTTPS with strict HTTP Strict Transport Security (HSTS) headers.
5. Third-Party Sub-Processors
We work with vetted enterprise infrastructure providers who maintain strict security certifications:
- Cloudflare, Inc.: Global Edge Network, DNS, D1 Relational Storage, and Email Routing. ISO 27001, SOC 2 Type II certified.
- Dodo Payments Inc.: Payment processing, merchant of record, automated taxation, and subscription lifecycle management. PCI-DSS Level 1 compliant.
- GitHub (Microsoft Corp): Version control integration for pull request dispatch and review workflows.
6. GDPR, CCPA & Global User Rights
Regardless of your geographic location, AnswerIndex affords all users full privacy rights:
- Right to Access: You can request a complete export of your account data, Brand Truth Wiki records, and audit logs at any time.
- Right to Rectification: Edit or update your verified facts instantly via the Client Dashboard.
- Right to Erasure (Be Forgotten): Upon account cancellation or written request to
[email protected], all associated tokens, Brand Truth Wiki entries, and audit logs are permanently wiped within 48 hours. - No Sale of Data: We never sell, rent, monetize, or barter your company or user data to third parties, data brokers, or advertising networks.
7. Cookies and Local Storage
We use strictly necessary functional session cookies and local storage tokens solely to maintain authenticated user sessions in the Client Portal and retain client-side audit state. We do not embed third-party retargeting pixels, social tracking widgets, or behavioral advertising cookies.
8. Contact Our Data Protection Officer
For privacy inquiries, GDPR data requests, or compliance documentation, contact our founder and chief architect directly: