Privacy policy

Privacy Policy

VINDEXAI HOLDINGS LLC (“VindexAI,” “we,” “us”) operates vindexai.io. This policy is effective 2026-08-25 and describes what this site receives, why, and what you can ask us to do about it.

Policy status

Effective 2026-08-25.

Operator and site

VINDEXAI HOLDINGS LLC (“VindexAI,” “we,” “us”) operates vindexai.io. This policy is effective 2026-08-25 and applies to that site and to the first-party lead service behind the Request a Quote form.

The short version

We built this site to run without watching you by default. Nothing is tracked while you browse unless you choose analytics. Information is collected when you submit a form: the Request a Quote form, the Reader Room registration on the book page, the Growth Constraint Map, and the Capability Discovery or AI Ops Discovery intakes. We also record consent-gated analytics page-views if you accept an optional measurement choice. All information is used only for its stated purpose.

What we collect

What we collect, and when.

Browsing the site

Nothing. Standard web server logs — IP address, requested page, timestamp, user agent — are generated by the hosting infrastructure for operational and security purposes such as diagnosing outages and detecting abuse. They are not tied to an identity or used for tracking.

Requesting a quote

When you submit the Request a Quote form, we collect exactly what the form asks for and nothing else.

  • Your contact name
  • Your work email address
  • Your company or organization name
  • Your answers to three qualifying questions: who the request is for, how much of your operation is in view, and the kind of need you are describing

Registering for the Reader Room

Registering on the book page collects your email address and, when the link that brought you to the site carries them, that link's campaign tags (the utm parameters). The address is used to send your sign-in link, to keep a reader record — your address, when you first and most recently signed in, and a sign-in count — and to send you a single welcome note from our customer experience desk the first time you sign in. The campaign tags record only which link brought you here.

  • Registration does not subscribe you to marketing or any recurring email
  • The reader record is visible to the site operator, who is notified when readers sign in
  • If you use the Reader Room's ordering or sample handoff to the retailer, the click itself is recorded alongside your reader record; what happens on the retailer's site is never visible to us
  • No password is ever created or stored — access is the emailed link or your own Google account

Choosing the follow-up series

The book page offers an optional five-part email series. It is a separate, unchecked box: leaving it empty changes nothing, and ticking it sends only a confirmation email first — the series starts when you confirm from your inbox, never before. If you tick it, we keep a consent record: your address, the first name you gave, whether you confirmed, and which of the five messages have been sent.

  • Every series message carries a one-click unsubscribe link, and unsubscribing never affects Reader Room access
  • The series is five messages over two weeks, then it ends
  • Consent records live in the same first-party store as the rest of this policy — no third-party marketing platform is involved

Responding to a post or sharing a story

When you respond to a blog post or the book, or offer your own story, we collect your name if you give one, your email address, and your message, and keep them to respond to you. If you check the publish box, we may show your reply or story publicly on this site — under the name you gave, or as "A reader" if you left it blank — but only after we review it and choose to publish it; your email address is never shown. Leaving the box unchecked keeps it a private note to us, never published.

What these forms never ask for

We do not collect payment information, government identifiers, or any sensitive personal data through this site.

What we do not do

No tracking without consent, no ads, no data brokers.

No cookies or tracking without your consent

By default this site sets no cookies and runs no analytics. A Content-Security-Policy header keeps scripts, styles, fonts, and images on this site's own origin, and the cross-origin connections it permits each have one named job: the VindexAI lead service that receives quote submissions, reader registrations, and the responses and stories sent from the book and blog pages, Google's identity service that emails Reader Room sign-in links, and — only after you accept the analytics choice below — Google Analytics measurement.

Analytics only if you say yes

A one-time banner asks whether we may measure visits with Google Analytics. Declining is the default, changes nothing about how the site works, and is remembered so you are not asked again. If you accept, Google Analytics sets its measurement cookies and receives page-view data with your IP address anonymized; advertising signals are configured off and stay off either way. Signed-in areas such as the Reader Room carry no analytics at all, regardless of your choice.

No session replay or advertising pixels

We do not run session-replay tools or advertising pixels, with or without consent.

No selling or sharing

We do not sell, rent, or share your information with data brokers or advertisers. Ever.

No secondary use

We do not use your information for anything other than the purpose stated in this policy.

How we handle it

Purpose, storage, retention, and security.

Why we collect it

Solely to respond to your quote request — to understand what you are asking about and route it to the right person at VindexAI. We do not use this information for marketing unrelated to your request, and we do not combine it with data from other sources to build a profile of you.

Where it is stored

Submissions are sent to a first-party API we operate on Google Cloud Run and stored in Google Cloud Firestore in a United States region. No third-party CRM, email marketing platform, or data processor receives this information as part of the current design.

How long we keep it

We keep a quote submission for 24 months from the date it is submitted, after which the record is deleted — unless you have become a customer, in which case ordinary business-relationship recordkeeping applies.

Reader record retention

Your reader record is kept while your Reader Room access remains active. Write to info@vindexai.io from your registered address to have it deleted; deletion removes your reader record and ends Reader Room access for that address.

Security

Traffic to this site is encrypted in transit over HTTPS and enforced with HSTS. Access to stored submissions is limited to VindexAI personnel who need it to respond to your request.

Your rights and contact

Ask us to see, correct, or delete it.

What you can ask for

VindexAI is a small U.S. company. We are not going to cite statutes that do not apply to us just to sound thorough. Wherever you are located, you can ask us at any time to do any of the following.

  • See what information we hold about your quote request
  • Correct it
  • Delete it

How to make a request

Email info@vindexai.io. We will confirm receipt and act on your request within 30 days.

Changes to this policy

If how we collect or use information changes, we will update this page and change the effective date above. We will not quietly expand what we do with your information without saying so here first.

Contact

Questions about this policy or your information: info@vindexai.io