Privacy Policy

Effective May 25, 2026

This Privacy Policy explains how Bifrost Index LLC (“we,” “us,” or “our”) collects, uses, and shares information when you use BifröstIndex (the “Service”).

1. Information We Collect

We collect only what we need to operate the Service:

• Account information — name, email address, and authentication identifiers provided through our identity provider.
• Subscription & billing information — handled by our third-party payment processor (currently Paddle). We receive transaction metadata (subscription tier, status, renewal dates, and a customer id), but full card numbers are stored only by the processor, not by us.
• Contributor content — questions, comments, profile information, and other content you submit.
• Referral data — referral codes generated for your account and events recorded when someone uses your code.
• Usage and device data — pages visited, clicks, search queries, approximate IP-derived location (hashed using a server-side salt), browser/device type, and referrer. Used to operate, secure, and improve the Service.
• Cookies & similar technologies — used for authentication sessions, remembering checkout intent, and basic analytics. You can clear cookies through your browser; doing so may sign you out and reset preferences.
• Communications — messages you send to us at the contact address below.

2. How We Use Information

We use information to:

• provide, maintain, secure, and improve the Service;
• process subscriptions, renewals, refunds, and credits;
• operate the contributor and referral programs;
• send transactional messages (receipts, renewal reminders, security alerts, scheduled administrative alerts you have asked us to track);
• monitor and prevent abuse, fraud, scraping, and violations of our Terms;
• comply with legal obligations.

We do not sell your personal information, and we do not use it to train third-party AI models. We do use AI services (including OpenAI) as part of our editorial pipeline to help review and structure publicly available primary sources; queries to those services are generally not personally identifiable.

3. How We Share Information

We share information only with:

• Service providers who operate parts of the Service on our behalf (hosting, database, authentication, payments, email delivery, AI inference, error monitoring). Each is bound by confidentiality and security obligations and may use information only to provide their service to us.
• Other users, when you publish or contribute content — your contributor display name and the contributions themselves are public.
• Legal, safety, and enforcement recipients, when we believe in good faith that disclosure is required by law or necessary to protect rights, safety, or the integrity of the Service.
• Successors, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Data Retention

We retain personal information for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and dispute resolution needs. Published contributions may remain published after account closure unless removal is required by law or our Terms.

5. Security

We use industry-standard administrative, technical, and organizational safeguards (encryption in transit, scoped credentials, principle-of-least- privilege access, audit logging). No system is perfectly secure; you use the Service at your own risk and are responsible for safeguarding your credentials.

6. Your Choices & Rights

You can:

• access and update your account information from your profile;
• request a copy, correction, or deletion of your personal information;
• cancel your subscription at any time from your account;
• opt out of non-essential email by following the unsubscribe link (transactional emails are required to operate your account).

Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA/CPRA, including the right to portability and to lodge a complaint with a supervisory authority. To exercise any right, email us at the address below; we may need to verify your identity before acting.

7. International Users

The Service is operated from the United States. If you access it from outside the U.S., you understand that your information will be processed in the U.S. and other countries where our service providers operate, which may have different data-protection laws than your country.

8. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced through the Service or by email. Continued use of the Service after the effective date of an update constitutes acceptance of the updated Policy.

10. Contact

Bifrost Index LLC · jamie@bifrostindex.ai