1. Information we collect
- Account and contact data: email address, authentication details, and support communications.
- Submitted price data: category, service, city or region, amount, date, notes, and verification status.
- Source documents: invoices, quotes, or images you choose to upload.
- Technical data: IP address, device and browser information, timestamps, logs, security events, and basic usage information.
- Billing data: if billing launches, our payment provider will process payment credentials; we expect to retain transaction and subscription records rather than full card numbers.
2. How we use information
We use information to authenticate users; receive and review contributions; generate de-identified pricing references; provide searches and tools; prevent fraud and abuse; maintain security; communicate about the service; comply with law; and analyze and improve PaidIndex.
3. What becomes public
Original source documents are not published. Approved records may display limited pricing facts such as service, approximate location, price, date, scope, evidence type, and verification status. We aim to remove names, exact street addresses, account numbers, contact details, and other direct identifiers before publication.
4. Service providers and disclosures
We use service providers to run PaidIndex, currently including Cloudflare for hosting, security, and private object storage; Supabase for authentication and database services; and Resend for transactional email. Stripe may process payments if paid billing launches. Providers process information under their own terms and our instructions as applicable.
We may also disclose information when reasonably necessary to comply with law, protect rights or safety, investigate fraud or security issues, or complete a merger, financing, acquisition, reorganization, or asset transfer subject to appropriate safeguards.
5. Sale, targeted advertising, and profiling
We do not sell personal information for money and do not use personal information for targeted advertising or profiling that produces legal or similarly significant effects. If this changes, we will update this Policy and provide legally required choices before the new practice begins.
6. Retention
Source documents are configured for a 30-day retention period after upload unless longer retention is needed for review, security, dispute resolution, legal compliance, or you request earlier deletion where available. Account, contribution, transaction, and security records are retained only as reasonably necessary for the purposes described here. De-identified public pricing facts may be retained to preserve historical market information.
7. Security
We use reasonable administrative and technical safeguards, including access controls and private storage. No system is completely secure, so we cannot guarantee absolute security. Do not include unnecessary sensitive data in a submission.
8. Your choices and rights
Depending on where you live and whether applicable thresholds are met, you may have rights to access, confirm, correct, delete, or obtain a copy of personal data, and to opt out of certain sale, advertising, or profiling uses. You may also appeal a denied request where required. We will not discriminate against you for exercising applicable rights.
Submit a request through Support. We may verify your identity and authority. Authorized agents may submit requests where permitted by law. You may also unsubscribe from non-essential email using the link in that message.
9. Cookies and local storage
PaidIndex may use essential browser storage or cookies to maintain authentication, security, and preferences. We do not currently describe non-essential advertising cookies because they are not part of the service. If analytics or advertising practices change, we will add appropriate notice and controls.
10. Children
PaidIndex is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child supplied information.
11. International use
PaidIndex is operated from the United States. Information may be processed in countries where our service providers operate. Where legally required, appropriate transfer safeguards will be used.
12. Changes and contact
We may update this Policy and will post its effective date. For privacy questions or requests, visit Support or write to:
Privacy — Media Yard LLCPO Box 73
Pennsauken, NJ 08110
United States