Privacy Policy

1. Introduction

This Privacy Policy (“Policy”) describes how SaaS Experts, Inc. (“we,” “us,” “our”), the owner and operator of the BoastIndex brand, collects, uses, and safeguards the personal information you (“you” or “your”) provide when using our Google index status monitoring application, website tools, or related services (collectively, the “Platform”).

By using or accessing any BoastIndex services, you agree to the practices described in this Policy. If you do not agree, please discontinue use of our Platform and refrain from providing any personal information.

This Privacy Policy has been drafted to comply with various privacy regulations including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable laws.

2. Who We Are

Company Name: SaaS Experts, Inc.

Brand: BoastIndex (at https://boastindex.com)

Primary Purpose: We operate a Software-as-a-Service (SaaS) application for Google index status monitoring. Our platform helps teams connect Google Search Console properties, track important URLs, schedule URL inspections, receive alerts when index status changes, and generate index status reports. We also offer free website tools, such as indexing troubleshooting for a single URL.

Data Controller: For the purposes of the GDPR, SaaS Experts, Inc. is the data controller for personal information collected through our Platform.

Data Protection Representative: For individuals in the EU/EEA, our designated EU representative can be contacted at: privacy+eu-representative@boastindex.com

3. Categories of Data Subjects

This Privacy Policy applies to the following categories of individuals:

Software-as-a-Service (SaaS) Application Users: Individuals who create accounts and use BoastIndex to monitor Google index status, manage URL lists, configure inspections, or view reports and alerts.
Website Visitors: Individuals who visit boastindex.com or its subdomains.
Free Tool Users: Individuals who use free website tools (for example, the indexing troubleshooter) without creating a full BoastIndex subscription account.
Support Recipients: Individuals who contact us for technical support or assistance.

4. Information We Collect

4.1 Account & Subscription Details

Contact Information: When you create an account or subscribe to our services, we collect your name, email address, billing address, company information, and other details needed to manage your account and subscription.
Payment Information: Payments are processed by third-party providers (e.g., Stripe). We do not store complete credit card details on our servers.
User Roles & Permissions: We collect information about account roles and access permissions within your workspace.

4.2 Google Search Console Connection Data

OAuth Authorization: If you connect Google Search Console, we receive authorization credentials from Google so we can access Search Console data on your behalf. Access is limited to the scopes you approve (typically read-only Search Console access).
Property Information: We store identifiers for the Search Console properties you connect and related configuration needed to run inspections.
Tokens: Access and refresh tokens are stored securely and used only to call Google APIs for the purposes described in this Policy. You can disconnect Google access at any time through your account or Google account settings.

4.3 SaaS Application Data

URL Lists: URLs and URL groups you import or enter for monitoring, plus labels or settings you apply to them.
Inspection Configuration: Monitoring cadence (for example monthly, weekly, or daily), inspection schedules, quotas, and related preferences.
Index Status Data: Status results returned by Google Search Console URL Inspection and related indexed-state fields we store as history for your monitored URLs.
Reports & Alerts: Index status reports, alert preferences, notification destinations, and delivery records for service emails.
Usage Analytics: Platform usage patterns, feature utilization, and performance optimization data.

4.4 Free Tools Data

Submitted URLs: Public page URLs you enter into free tools such as the indexing troubleshooter.
Search Console Status Inputs: Status labels you select or paste, or compact indexed-state data retrieved when you optionally connect Google Search Console for a single-URL check.
Contact Email: Email address used to deliver a report and verify access to results.
Technical Check Results: Results of server-side checks we run against the submitted URL (for example redirect, headers, or robots-related signals), stored in a compact form needed to generate the report. We do not store full page HTML or full raw Google API responses longer than needed to deliver the tool.

4.5 Website & Platform Analytics

Technical Information: IP addresses, browser types, device information, operating systems, and pages visited across our platform.
Cookies & Tracking: We use cookies and similar technologies to improve user experience, maintain sessions, analyze usage patterns, and provide personalized content. You can control cookie preferences through your browser settings and any cookie consent controls we provide.

4.6 Support & Communications

Help Desk Communications: When you contact support, you may provide information such as account details, screenshots, error logs, or technical configurations.
Marketing Communications: With appropriate consent, we collect email addresses and preferences for newsletters, product updates, and promotional content. You can unsubscribe at any time.

4.7 Categories of Personal Information (for California Privacy Rights)

In accordance with the CCPA/CPRA, we collect the following categories of personal information:

Identifiers: Names, email addresses, IP addresses, domain names, business identifiers, and account identifiers.
Commercial Information: Services purchased, subscription details, transaction history.
Internet Activity: Browser information, website interaction data, search queries within the product, and platform usage.
Geolocation Data: General location data based on IP address or business location.
Professional Information: Company name, job title, and related business details you provide.
Inferences: Derived data about preferences or product usage based on platform activity.

For users in the European Economic Area (EEA), we process your personal data on the following legal bases:

Performance of Contract: Processing necessary to fulfill our contractual obligations, including providing SaaS services, free tools, and customer support.
Legitimate Interests: Processing that serves our legitimate business interests, such as improving our Platform, ensuring security, preventing fraud, analyzing usage patterns, and marketing to existing customers, where these interests are not overridden by your rights and freedoms.
Consent: Processing based on your specific, informed, and unambiguous consent, such as for marketing communications, certain cookies, or optional Google Search Console connections. You have the right to withdraw consent at any time.
Legal Obligation: Processing necessary to comply with applicable laws, regulations, tax requirements, or legal proceedings.

We only collect and process the minimum amount of data necessary for the stated purposes.

6. How We Use Your Information

Platform Operation & Service Delivery

We use your information to provide, maintain, and improve BoastIndex. This includes account management, subscription processing, Google Search Console connections, scheduled URL inspections, status history, alerts, reports, and free website tools.

Index Monitoring & Reporting

We process connected Search Console data, URL lists, inspection results, and report settings to track Google index status over time, notify you of changes, and generate index status reports.

Customer Service & Support

Support communications and technical information help us troubleshoot issues, improve our Platform, and provide assistance.

Communication & Marketing

We send service-related communications including account updates, security notices, inspection summaries, and platform changes. Marketing communications are sent only with appropriate consent and include opt-out mechanisms.

Platform Improvement & Analytics

We analyze aggregated and anonymized usage data to improve platform functionality, develop new features, and optimize performance.

Legal Compliance & Safety

We may process your information to comply with legal obligations, respond to legal claims, prevent fraud, or protect the rights and safety of users and the public.

Service Providers & Partners

We share limited personal information with third parties who perform services on our behalf (payment processors, hosting providers, email services, analytics tools). These providers are contractually required to protect your data and use it only for specified services.

Google Search Console

When you authorize a Google Search Console connection, we exchange data with Google as needed to authenticate and retrieve index status information for properties and URLs you choose to monitor or inspect. Google’s handling of data is governed by Google’s own policies and your Google account settings.

Third-Party Integrations

With your authorization, we may share data with integrated services such as payment processors or analytics tools. You maintain control over these integrations and can revoke access at any time where the integration allows it.

Legal Requirements & Safety

We may disclose your information if required by law or if we believe it is necessary to comply with legal obligations, enforce our terms, protect rights and property, or ensure user and public safety.

Business Transfers

If SaaS Experts, Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with continued protection under this Policy or notification of changes.

No Sale of Personal Information

We do not sell your personal information to third parties for monetary or other valuable consideration as defined under the CCPA/CPRA. We do not share your personal information with third parties for cross-context behavioral advertising purposes.

8. Data Retention & Security

Data Retention Periods

Account Information: Retained for the duration of your account plus 2 years for business records.
SaaS Application Data: URL lists, inspection history, reports, alerts, and related workspace data retained according to user settings and subscription terms, typically for the duration of active accounts plus historical access as needed.
Google Connection Data: OAuth tokens and property links retained while the connection remains active, and removed or invalidated when you disconnect or delete your account.
Free Tool Data: Compact session and report data retained long enough to deliver the tool, support verification, and handle limited follow-up or abuse prevention, then deleted or anonymized according to our operational schedules.
Transaction Data: Financial records retained for 7 years to comply with tax and accounting requirements.
Support Communications: Retained for 2 years from resolution for service improvement.
Marketing Preferences: Retained until you unsubscribe or withdraw consent.

Security Measures

We implement safeguards including encryption of data in transit and at rest, access controls, regular security assessments, staff training, and incident response procedures. Our security measures are designed to protect against unauthorized access, alteration, disclosure, or destruction of your personal information. However, no method of transmission over the internet or electronic storage is completely secure.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users and relevant supervisory authorities as required by applicable law, including GDPR requirements.

9. Your Rights & Choices

If you are located in the European Economic Area, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you, including your account information and monitoring records.
Right to Rectification: You can request that we correct inaccurate or incomplete information in your account or other records.
Right to Erasure: You can request that we delete your personal data (subject to certain exceptions for legal or business obligations).
Right to Restriction of Processing: You can request that we restrict the processing of your data under certain circumstances.
Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to our processing of your personal data based on legitimate interests or for direct marketing.
Right Against Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce legal effects.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time.

To exercise these rights, please contact us using the details provided in the “Contact Us” section. We will respond to your request within 30 days.

9.2 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know: You can request information about the personal information we have collected, used, disclosed, and sold.
Right to Delete: You can request the deletion of your personal information (subject to certain exceptions for legal obligations).
Right to Opt-Out of Sale/Sharing: You can opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising.
Right to Correct: You can request that we correct inaccurate personal information.
Right to Limit Use of Sensitive Personal Information: You can limit the use and disclosure of sensitive personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise these rights, submit a request via email to privacy@boastindex.com or privacy@boastindex.com. We will verify your identity before responding to your request. You may designate an authorized agent to make requests on your behalf.

9.3 Platform-Specific Rights & Choices

SaaS Application Users

Account Management: You can update, modify, or delete your account information at any time through your account settings.
URL & Monitoring Control: You can add, edit, or remove tracked URLs, change inspection cadence, and manage alert and report settings.
Google Connection Control: You can disconnect Google Search Console access from BoastIndex and revoke access from your Google account settings.
Data Export & Deletion: You can request export or deletion of workspace data where available in product settings or by contacting us.

Free Tool Users

Email & Report Control: You can choose whether to submit an email address for report delivery. Contact us if you need a free-tool record removed where we still retain it.

All Users – General Rights

Access & Correction: You can request to view, update, or correct your personal information by contacting us at privacy@boastindex.com.
Data Deletion & Portability: You can request the deletion or portability of your personal data where applicable by law. We will honor requests as required but may retain certain data for legal or business obligations.
Marketing Opt-Out: If you receive marketing emails from us, you can unsubscribe anytime by clicking the link in the email or contacting us directly.
Cookie Control: Most web browsers allow you to control cookies through their settings. Where we provide a cookie consent banner, you can select which categories of cookies you wish to accept. Disabling cookies may affect certain functionalities.

10. International Data Transfers

The personal information we collect may be transferred to and stored in countries outside of your jurisdiction, including the United States, where our servers are located. These countries may have different data protection laws than your country of residence.

For transfers from the European Economic Area (EEA) to countries not deemed to provide an adequate level of data protection, we implement appropriate safeguards such as:

Standard Contractual Clauses (SCCs): We use European Commission-approved Standard Contractual Clauses in our agreements with service providers and partners.
Data Processing Agreements: We enter into data processing agreements with all third-party service providers that access personal data of European Union (EU) residents.
Adequacy Decisions: Where available, we rely on European Commission adequacy decisions for certain countries.

You can request a copy of these safeguards by contacting us using the details in the “Contact Us” section.

11. Third-Party Links & Integrations

BoastIndex services may contain links to third-party sites or services. We are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party services you use.

When our Platform integrates with third-party services (such as Google Search Console, payment processors, email delivery, or analytics tools), those services may collect data according to their own privacy policies. We recommend reviewing those policies before connecting such services.

Specific third-party integrations may include:

Google APIs for Search Console authentication and URL inspection data
Payment processors for subscription fees
Email delivery providers for transactional and optional marketing messages
Analytics tools for platform improvement

12. Children’s Privacy

Our Platform is intended for business and professional use and is not designed for children under the age of 16. We do not knowingly collect information from anyone under 16. If you believe we have inadvertently collected such data, please contact us immediately so we can remove it.

Our website uses cookies and similar technologies to enhance user experience. We categorize cookies as follows:

Strictly Necessary Cookies: Essential for website functionality, account access, sessions, and platform security. These cannot be disabled.
Performance/Analytics Cookies: Help us understand how visitors interact with our website and platform features.
Functional Cookies: Enable enhanced functionality, personalization, and remember your preferences.
Targeting/Advertising Cookies: Used to deliver relevant advertisements and marketing content where enabled.

You can manage your cookie preferences through our cookie banner or your browser settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business practices. When we do, we will post the updated version at https://boastindex.com/privacy and note the effective date.

If changes are significant, we will:

Notify you by email (if we have your email address)
Display a prominent notice on our website
In some cases, obtain your consent again if required by law

Your continued use of BoastIndex services after any revisions become effective indicates your acceptance of the updated Policy.

15. Data Protection Contact

For questions related to data protection and privacy compliance, including General Data Protection Regulation (GDPR) inquiries, please contact us at:

Email: privacy@boastindex.com
Subject Line: “Data Protection Inquiry”

16. Contact Us

If you have questions or concerns regarding this Privacy Policy or our data practices, please reach out:

Email: privacy@boastindex.com
General Inquiries: support@boastindex.com
Postal Address: SaaS Experts, Inc., 136 Arthurs Rd, Troutman NC USA
For EU/EEA Inquiries: privacy+eu-representative@boastindex.com
For California Privacy Requests: privacy+california-privacy@boastindex.com

You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.