Hidden Link Studios
Last updated: June 18, 2026
Applies to the Index web app at in-dex.co and the Index iOS app (together, the “Service”).
Index (“the Service”) is operated by Esguerra Enterprises L.L.C., doing business as Hidden Link Studios (“Hidden Link Studios,” “we,” “us,” “our”), a limited liability company organized in Nevada, United States.
This policy explains what personal data we collect, how and why we use it, who we share it with, and the rights you have over it. It covers both the web app (in-dex.co) and the iOS app. Where a practice applies to only one of them, we say so.
When you create an account we collect your email address. If you sign in with Google or Apple, we also receive the name and avatar that those providers share with us, where you have provided them. Sign in with Apple may give us a private relay email address instead of your real email address, depending on your Apple settings.
“Your content” is the material you save and create in the Service, including saved URLs and links, images and files you upload, thumbnails and screenshots we generate from your saves, and the notes, tags, folders, boards, and projects you use to organize it.
When you save a URL, our server fetches that web page to extract its title, source domain, and a thumbnail so we can show you a preview. This means third-party web page content is retrieved and processed by us on your behalf, solely to produce the preview and metadata for your save.
We collect usage and analytics data about how the Service is used — for example, the pages and features you interact with, the links you click, your device and browser type, and approximate location derived from your IP address. We use a third-party analytics provider to help us understand usage and improve the product. This applies across the Service, in both the web app and the iOS app. We do not use this data to sell you anything or to build advertising profiles.
We use your information to:
Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you (to provide the Service and process payments); our legitimate interests (to understand usage, improve and secure the Service, and prevent fraud); and compliance with legal obligations. Where we rely on consent, you can withdraw it at any time.
Index lets you make individual saves or whole boards public and share them through a public link. When you do this, the content becomes accessible to anyone who has the link, without an account, and may be viewed or indexed by people outside our control.
Please do not put sensitive, confidential, or personal information in content you mark as public. Your content is private by default — nothing is made public without a deliberate action by you — and you can switch public content back to private at any time, which removes public access going forward.
Index does not use artificial intelligence to write, generate, or create content on your behalf. Any related-content or “connection” features simply surface relationships between items you have already saved; they do not produce new content.
We do not sell your personal information. We share it only as needed to run the Service, with the following recipients:
We may also disclose information where required by law, to enforce our Terms, or to protect the rights, safety, and property of our users or others. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
We maintain a current list of the service providers we use. You can request it at support@in-dex.co.
Our infrastructure and several of our service providers are based in the United States. If you use the Service from outside the United States (including the EU or UK), your personal data will be transferred to and processed in the United States, which may have different data protection laws than your own country.
Where we transfer the personal data of individuals in the EU or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable). You can contact us at support@in-dex.co for more information.
We keep your account data and content for as long as your account is active, and only as long as needed for the purposes in this policy unless a longer period is required by law (for example, payment records for tax purposes).
When you delete content, it is removed from your account. When you delete your account, your personal data and content are removed from our active systems promptly, except where we must keep certain records to meet legal obligations. Residual copies in encrypted backups are deleted in the ordinary course of our backup rotation.
You can manage much of your data directly in the Service:
To request a copy of your data, a correction, or full deletion, email support@in-dex.co. We will respond within the timeframes required by applicable law.
We take reasonable technical and organizational measures to protect your data, including:
No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If you are in the EU or UK, you have the right to access your personal data; correct inaccurate data; request deletion; restrict or object to certain processing; data portability; and withdraw consent where processing is based on consent. You also have the right to complain to your local data protection authority. To exercise any right, contact support@in-dex.co.
If you are a California resident, you have the right to know what personal information we collect and how it is used and shared; access and obtain a copy of it; request correction; request deletion; and opt out of any “sale” or “sharing” of personal information. We do not sell your personal information. We will not discriminate against you for exercising these rights. To exercise them, email support@in-dex.co. We may need to verify your identity first.
The Service is not directed to, and not intended for, children under 13 (or the minimum age of digital consent in your country, where that is higher), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact support@in-dex.co and we will delete it.
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above and, for material changes, provide additional notice (for example by email or an in-app notice). Your continued use of the Service after changes take effect means you accept the updated policy.
For any questions about this Privacy Policy or your data, contact us at support@in-dex.co.