Privacy Notice
Last updated: October 26, 2026
Who is responsible
The operator of Index Viz and Income Viz ("we", "us") is the controller of the personal data described here. Privacy questions and requests: contact us through indexviz.com.
What we collect, and why
- Account: your email, display name and password. The password is never stored in readable form. Used to provide your account (contract).
- Sign-in sessions: a session identifier, your IP address, your browser type, and sign-in times. Used to keep you signed in, show you your active sessions, and protect accounts from abuse (contract and legitimate interest in security).
- Preferences: your workspace settings, such as chart and panel choices. Used to restore your workspace on any device (contract).
- Waitlist: your email and the product you asked about. Used only to tell you when it opens (consent, which you can withdraw at any time).
- Billing: Paddle processes your payment. We receive your name, email, country and subscription status, never your card details (contract, and legal obligations for tax records).
- Security: IP addresses are held briefly in memory to limit repeated requests and failed sign-ins (legitimate interest in security).
We don't sell personal data and don't use it for advertising.
Who receives it
- Paddle.com, our Merchant of Record, for payments, taxes and refunds.
- Hosting and network providers, including Cloudflare, which carries traffic to our servers and counts visits to our public pages (below).
- Professional advisers, such as accountants and lawyers, when needed.
- Authorities, where the law requires it.
Our market data providers receive no personal data.
Where it's processed
Our servers are run by our hosting provider. Paddle and Cloudflare may also process data in other countries, under their own safeguards for international transfers.
How long we keep it
- Account and preferences: until you delete your account.
- Sessions: until they expire (30 days at most) or you sign out.
- Waitlist: until the product opens and we've emailed you, or until you ask us to remove you.
- Billing records: as long as tax law requires.
Your rights
You can ask to see, correct or delete your personal data, withdraw consent, or object to how we use it. Contact us through indexviz.com and we'll answer within 30 days. You can also contact your local data protection authority.
Security
We use industry-standard measures to protect your data, including encrypted connections and passwords that are never stored in readable form.
Cookies and storage
After you sign in we set one cookie that keeps you signed in. It is strictly necessary and is removed when you sign out. The app also keeps your preferences in your browser's local storage. We use no analytics or advertising cookies, and the public pages set none. Paddle's checkout may set its own cookies under Paddle's privacy notice.
On the public pages only (the home pages, guides and these legal pages), Cloudflare Web Analytics counts visits — which page, where the visit came from, and how fast the page loaded — without cookies and without identifying you. The apps themselves send nothing to it (legitimate interest in knowing how the site is found and used).
Changes
If we change this notice in a material way, we'll tell you by email or in the app.