Privacy Policy

1. Introduction

Vindex ("we", "us", or "our") is operated by Auxiliary Digital. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our client registration and management platform (the "Service"). Please read it carefully. By accessing or using the Service you agree to the practices described here.

2. Information We Collect

We collect information you provide directly to us, including:

• Account registration details (full name, email address, company name, industry)
• Authentication credentials (passwords are hashed and never stored in plain text)
• Profile and company information you update within the platform
• Communications you send to our support team

We also automatically collect certain technical data when you use the Service, such as IP address, browser type, operating system, referring URLs, and pages visited. This data is used solely for security, performance monitoring, and improving the Service.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and provide the Service
• Authenticate your identity and maintain session security
• Send transactional communications (e.g. account activation, password reset)
• Respond to your enquiries and provide customer support
• Monitor and analyse usage to improve functionality
• Detect, investigate, and prevent fraudulent or unauthorised activity
• Comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Cookies and Session Tokens

We use HTTP-only cookies to manage authentication sessions. These cookies are strictly necessary for the Service to function and are not used for tracking or advertising. You may disable cookies in your browser settings, but doing so will prevent you from signing in to the platform.

5. Data Sharing and Disclosure

We may share your information with:

• Service providers — trusted third-party vendors who assist us in operating the platform (e.g. cloud hosting, email delivery) under confidentiality obligations.
• Legal authorities — where required by law, court order, or governmental regulation.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to continued privacy protections.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us. Residual data may be retained in backups for a limited period as required by our security and legal obligations.

7. Security

We implement industry-standard technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS), hashed passwords, and role-based access controls. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data
• Object to or restrict certain processing
• Lodge a complaint with a data protection authority

To exercise any of these rights, please contact us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or via an in-app notice prior to the change becoming effective. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact: