Identity of the Business and Contact Information

This Privacy Policy describes how IndexSpan (indspn.org) collects, uses, discloses, and protects personal information. IndexSpan is owned and operated by Ffion Evans, 1375 E South Boulder Rd, Louisville, CO 80027, United States.

For any privacy inquiries or to exercise your rights, contact: [email protected].

Scope and Applicability

This Policy applies to personal information collected through our website, applications, and services (collectively, the “Services”), as well as through customer support and marketing interactions. It applies to residents of the United States and is designed to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (as amended by the CPRA), the Colorado Privacy Act, and similar state laws.

Definitions

“Personal information” (or “PI”) means information that identifies, relates to, describes, or could reasonably be linked with a particular consumer or household.

“Sensitive personal information” (or “SPI”) may include account log-in and credentials, precise geolocation, financial account details with credentials, and certain demographic data where protected by law.

“Sell,” “sale,” “share,” and “targeted advertising” have the meanings assigned by applicable state privacy laws and may include the disclosure of PI for cross-context behavioral advertising, whether or not money is exchanged.

Notice at Collection (Categories, Purposes, and Retention)

Categories of Personal Information We Collect

  • Identifiers: name, email address, account username, IP address, cookie identifiers, and device identifiers.
  • Commercial information: subscription details, saved watchlists, alerts, preferences, and interaction history with our Services.
  • Internet or network activity: browsing history on our Services, pages viewed, referral URLs, device and browser type, and interactions with charts, tools, and notifications.
  • Geolocation data: approximate location derived from IP address.
  • Financial information: limited billing information and transaction records for subscriptions; payment card data is processed by our payment processors and is not stored in full by us.
  • Inferences: insights about interests and preferences derived from usage of analytics tools, watchlists, and content engagement.
  • User content: feedback, survey responses, support communications, and educational program submissions.
  • Sensitive personal information: account log-in and password. We do not seek to collect precise geolocation or government identifiers.

Sources of Personal Information

  • Directly from you when you register, subscribe, request alerts, submit forms, or communicate with us.
  • Automatically from your device through cookies, pixels, SDKs, and similar technologies.
  • From service providers and partners that support analytics, fraud prevention, payments, and marketing.

Purposes for Collection and Use

  • Provide, operate, and secure the Services, including account creation and authentication.
  • Deliver analytics, alerts, educational content, and personalized features.
  • Process subscriptions, payments, and customer support requests.
  • Improve Services, conduct research, and develop new features.
  • Detect, prevent, and investigate security incidents, fraud, and abuse.
  • Comply with legal obligations and enforce terms.
  • Marketing, including measuring performance, where permitted by law and your preferences.

Retention

We retain personal information only as long as necessary for the purposes described above or as required by law. Typical retention periods include:

  • Account and profile data: retained while the account is active and for up to 24 months after inactivity, unless longer retention is required for legal or security reasons.
  • Transaction and billing records: up to 7 years for tax, accounting, and compliance.
  • Analytics and event logs: up to 24 months.
  • Cookies and advertising identifiers: typically 13–24 months, depending on technology and settings.
  • Support communications: up to 36 months.

Disclosures of Personal Information

We disclose personal information to the following categories of recipients for the purposes described above:

  • Service providers and processors: hosting, cloud infrastructure, analytics, payment processing, security and fraud prevention, customer support, and communications.
  • Professional advisors: auditors, accountants, and legal counsel.
  • Compliance and safety: law enforcement or regulators, when required by law or to protect rights, safety, and security.
  • Business transfers: in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

We do not disclose full payment card details; these are handled by PCI-compliant payment processors.

Selling, Sharing, and Targeted Advertising

We do not sell personal information for money. We may allow certain third parties (e.g., analytics or advertising partners) to collect identifiers, device data, and internet activity from our Services to provide analytics and to deliver or measure ads. Some state laws may treat this as a “sale” or “sharing” of personal information or “targeted advertising.”

You can opt out of such “sale,” “sharing,” or targeted advertising as described in “Your Privacy Rights and Choices” below. We honor recognized browser-based opt-out signals, such as the Global Privacy Control (GPC), where required by applicable law.

Cookies and Tracking Technologies

We use cookies, web beacons, pixels, SDKs, and similar technologies to operate and secure the Services, remember preferences, perform analytics, and, where permitted, personalize content and measure marketing effectiveness.

  • Strictly necessary cookies are essential for core functions.
  • Functional and analytics cookies help us understand usage and improve performance.
  • Advertising cookies may be used for interest-based ads and measurement, where permitted.

You may manage cookies through your browser settings. Blocking cookies may affect Service functionality. Where required, we request consent for non-essential cookies.

Your Privacy Rights and Choices

Depending on your state of residence, you may have the right to:

  • Access/know: request information about our collection, use, and disclosure of your personal information, and obtain a copy in a portable format.
  • Delete: request deletion of personal information, subject to legal exceptions.
  • Correct: request correction of inaccurate personal information.
  • Opt out of sale/sharing/targeted advertising: opt out of disclosures for cross-context behavioral advertising or targeted advertising.
  • Limit use/disclosure of sensitive personal information: where applicable, request that we limit our use of SPI to necessary purposes.
  • Non-discrimination: exercise rights without unlawful discrimination.

How to Exercise Your Rights

  • Submit a request by emailing [email protected] with your name, state of residence, the right you wish to exercise, and sufficient details to verify your identity.
  • Opt-out signals: We process recognized browser-based opt-out signals (e.g., GPC) where required. If we cannot associate the signal with a known user, it may apply only to the browser or device used.
  • Authorized agents (CA): If you use an authorized agent, we may require proof of authorization and verification of your identity.
  • Verification: We may request information (e.g., email verification, account sign-in, or limited account details) to confirm your identity before fulfilling requests.

Appeals

If we deny your request, you may appeal by replying to our decision email or contacting [email protected]. We will inform you in writing of the outcome and your options. Colorado residents may contact the Colorado Attorney General if they are unsatisfied with our response after appeal.

State Disclosures

California (CCPA/CPRA)

  • Notice at Collection: See the “Notice at Collection” section above for categories, purposes, and retention.
  • Sensitive PI: We use SPI (account log-in and password) only for permitted purposes such as authentication and security.
  • Opt-out: You may opt out of “sale”/“sharing” as described in “Your Privacy Rights and Choices.” We honor GPC signals.
  • Financial incentives: We do not offer programs that provide financial incentives tied to the sale of personal information.

Colorado (CPA)

  • Consumers have rights to access, correct, delete, data portability, and opt out of targeted advertising or sale.
  • We recognize a universal opt-out mechanism as required by Colorado law.
  • Appeals process is described in “Appeals” above.

Virginia, Connecticut, Utah

Residents may have rights to access, correct (except Utah), delete, portability, and to opt out of targeted advertising or sale. We will process verified requests consistent with these laws.

Nevada

Nevada residents may opt out of the sale of covered information by emailing [email protected]. We do not sell covered information as defined by Nevada law.

Children’s Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it. If you are a parent or guardian and believe your child has provided personal information, contact us at [email protected]. For minors 13–16 in applicable jurisdictions, we do not sell or share personal information without required consent.

Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against accidental, unlawful, or unauthorized access, destruction, loss, alteration, disclosure, or use. No security measures are perfect, and we cannot guarantee absolute security.

International Data Transfers

We are based in the United States and may process information in the U.S. and other countries where our service providers operate. Those locations may have different data protection laws than your jurisdiction. We take steps to ensure appropriate protections for such transfers.

Data Accuracy and Your Responsibilities

You are responsible for ensuring that the information you provide is accurate and up to date. You may update certain information in your account settings or by contacting us.

Third-Party Content

The Services may include content or tools provided by third parties. This Policy does not cover the privacy practices of third parties, which are subject to their own policies.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date below indicates the effective date of the current version. Material changes will be communicated through the Services or by direct notice where required.

How to Contact Us

Owner: Ffion Evans

Address: 1375 E South Boulder Rd, Louisville, CO 80027, United States

Email: [email protected]

Last Updated: September 30, 2025

Comments

© 2025. All rights reserved.