Политика Конфиденциальности
Мы обеспечиваем абсолютную изоляцию данных на уровне схем PostgreSQL и минимальный сбор информации.
1. Schema-per-tenant Data Isolation
How Your Data is Isolated
At Indxflow, data privacy is enforced at the database kernel level. When you register a new database, we execute:
CREATE SCHEMA tenant_<your_unique_id>;
SET LOCAL search_path TO tenant_<your_unique_id>;
Every SQL query passing through our Axum API Gateway is strictly scoped to your tenant search path. No user can access, query, or view data from another tenant schema under any circumstances.
2. Data Collection Limits
We adhere strictly to the principle of data minimization under GDPR and global privacy standards. We collect only:
Used strictly for account authentication via Auth.js (Google OAuth) and transaction receipts.
Recorded temporarily in Governor rate-limiting logs to prevent DDoS attacks and API abuse.
Processed securely via Paddle Merchant of Record. We never store credit card numbers.
3. Cookies & Session Consent
Indxflow believes in zero invasive ad tracking. We do NOT embed third-party advertising pixels, Google Tag Manager scripts, or cross-site tracking cookies.
authjs.session-token: Essential HTTP-only cookie for dashboard authentication.indxflow_lang: Local storage key for preserving language selection (RU/EN).
4. Right to Erasure (Data Deletion)
You retain full ownership of your database. At any time, you may request account termination and full data deletion. Upon request, we immediately execute:
DROP SCHEMA tenant_<your_unique_id> CASCADE;
All database tables, indexes, audit logs, and backups associated with your tenant ID are permanently erased within 24 hours.