Privacy Policy

FlashIndex ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect information about you when you use our website (flash-index.com) and services.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable EU data protection law. Our data controller is SHARKSOLUTIONS (SIRET: 106 338 296 00010), reachable at [email protected].

We collect the following categories of personal data:

We process your personal data under the following legal bases (GDPR Article 6):

Contractual necessity - Processing your account data, URL submissions, and payment data is necessary to provide the FlashIndex service you signed up for.

Legitimate interests - We process usage data and technical data to operate, secure, and improve our service, prevent fraud, and monitor API abuse.

Consent - Where we send you marketing emails, we do so only with your explicit opt-in consent. You can withdraw consent at any time via your account settings or by unsubscribing from emails.

Legal obligation - We may process data to comply with applicable law, court orders, or regulatory requirements.

Location: All data is stored on servers located within the European Union. We use CloudShark (cloudshark.fr) for application hosting and do not transfer data outside the EEA without appropriate safeguards.

Retention periods: - Account data: retained for the lifetime of your account, plus 30 days after deletion - URL submission history: retained for 90 days - Payment records: retained for 7 years (legal/accounting obligation) - Server logs: retained for 30 days - Support communications: retained for 2 years

After applicable retention periods, data is securely deleted or anonymized.

We share data with the following trusted third parties solely to provide our service:

Stripe (Payment processing) - Purpose: Processing credit and subscription purchases - Data shared: Email, payment amount, billing country - Privacy Policy: https://stripe.com/privacy

CloudShark (Hosting) - Purpose: Application hosting and content delivery - Data shared: Server-side request logs (IP, user agent) - Privacy Policy: https://cloudshark.fr/legal

Google Analytics (Audience measurement) - Purpose: Understanding aggregate site usage to improve the product - Data shared: Pages viewed, traffic source, device type, approximate location, IP address - Privacy Policy: https://policies.google.com/privacy

X / Twitter Ads (Advertising measurement) - Purpose: Measuring which advertising campaigns lead to signups and purchases - Data shared: Pages viewed, signup and purchase events, IP address - Privacy Policy: https://x.com/en/privacy

We do not sell, rent, or trade your personal data with any third party for marketing purposes.

FlashIndex uses minimal cookies:

Essential cookies (no consent required): - Session cookie: maintains your login session (HTTP-only, Secure) - CSRF token: prevents cross-site request forgery attacks - Referral cookie: attributes a signup to the affiliate who referred you

Analytics and advertising cookies: - Google Analytics 4: measures aggregate site usage (pages viewed, traffic sources, approximate location) so we can improve the product. Privacy Policy: https://policies.google.com/privacy - X (Twitter) Ads pixel: measures the performance of our advertising campaigns - specifically which visits led to a signup or purchase. Privacy Policy: https://x.com/en/privacy

These scripts are provided by third parties and may set their own cookies. You can block them with your browser settings or an ad blocker without losing access to any FlashIndex feature.

Disabling essential cookies in your browser will prevent you from logging in.

As a data subject under GDPR, you have the following rights:

Right of access - You can request a copy of all personal data we hold about you.

Right to rectification - You can correct inaccurate personal data via your account settings or by contacting us.

Right to erasure ("right to be forgotten") - You can request deletion of your account and personal data. Note: payment records may be retained for legal compliance.

Right to data portability - You can request your data in a machine-readable format (CSV/JSON).

Right to restrict processing - You can request that we limit how we process your data in certain circumstances.

Right to object - You can object to processing based on legitimate interests.

Right to withdraw consent - Where processing is based on consent (e.g. marketing emails), you can withdraw at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe we have not handled your data properly, you have the right to lodge a complaint with your national data protection authority (e.g. CNIL in France, ICO in the UK).

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted via TLS 1.2+
• Passwords are hashed using bcrypt with appropriate work factor
• API keys are stored hashed; only the masked version is displayed
• Database access is restricted to authorized services only
• Regular security audits and dependency updates
• Rate limiting and DDoS protection at the CDN layer

Despite these measures, no system is 100% secure. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users at least 14 days before taking effect. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy-related questions, data subject requests, or complaints:

Email: [email protected] Response time: Within 30 days Website: https://flash-index.com

Last updated: June 2025