Politique de Confidentialité

Last updated: August 2026

1. Who we are

GlobalIndex is a company discovery and indexing service operated by Powered By AI Services LTD, a company registered in the United Kingdom.

Contact: contact@poweredbyai.services

GlobalIndex is not a separate legal entity. It is a service operated by Powered By AI Services LTD. References to "we", "our", or "us" in this policy refer to Powered By AI Services LTD as the legal operator.

2. What data we collect

Information You Provide

Company name, business email, website, and contact details when you submit an application
Legal address, registration number, and country of incorporation for verification
Company profile information, descriptions, product listings, and images
Account registration data (name, email, company name)
Communication preferences and consent records
Agreements and contract signatures
Order and plan selection data
Reviews and ratings

Information Collected Automatically

IP address and browser user agent (for security, audit, and essential session management)
Cookie consent preferences (stored locally and in our consent records)
Aggregate page views, search activity, and interaction data (anonymised)
Referral source and coarse country/region derived from IP address (where lawful)

Website Crawl and Feed Data

GlobalIndex may index publicly available business information from company websites, including:

Company names, product/service names, descriptions, and pricing
Public business contact information
Categories, tags, and structured data from public pages

Not collected: personal email addresses (only business contact information), non-public or login-gated content, passwords, or sensitive personal data. The crawler targets public business data only.

What We Do Not Collect from Anonymous Visitors

If you browse GlobalIndex without registering, we do not collect your name, email address, or any personal identifier. We do not engage in behavioural advertising or cross-site tracking.

3. How We Use Your Information

We process personal data for the following purposes, relying on the lawful bases identified:

To process and review company applications (contract steps / legitimate interest)
To verify company information and maintain directory accuracy (legitimate interest)
To operate and improve our platform and search functionality (legitimate interest)
To provide analytics to companies about their listing performance (contract / legitimate interest)
To communicate important updates about your account and our services (contract / legal obligation)
To comply with legal obligations and enforce our terms (legal obligation)
To operate the crawler service for indexing public business data (legitimate interest)
For marketing communications, where you have provided consent (consent)

We do not sell personal information.

Important: Public availability of data does not automatically make every processing activity lawful. Public data processing remains subject to applicable privacy, accuracy, minimisation, retention, objection, correction, and removal requirements.

4. Lawful Bases for Processing

We process personal data on the following lawful bases under UK GDPR:

Consent (Article 6(1)(a)): for non-essential cookies, marketing communications, and any optional AI features (when enabled). Consent may be withdrawn at any time.
Contract performance (Article 6(1)(b)): to fulfil services, manage accounts, and process applications.
Steps before entering a contract (Article 6(1)(b)): to respond to enquiries and process applications.
Legal obligation (Article 6(1)(c)): where required by law to retain or disclose data.
Legitimate interests (Article 6(1)(f)): for essential cookies, security, service improvement, directory operations, and public data indexing. We have assessed our legitimate interests and balanced them against your rights. You have the right to object to processing based on legitimate interest.

5. Data Sharing and Disclosure

We share data only with trusted sub-processors who help us deliver our services, each subject to a Data Processing Agreement:

Cloudflare, Inc. — CDN, DNS, DDoS protection (US-based; DPA + SCCs/IDTA in place)
Hostinger — domain and email services (EU-based)
Hetzner Online GmbH — VPS hosting (EU-based, Germany)
OpenRouter — AI inference (future use only; DPA will be in place before activation)
Stripe — payment processing (future use only; DPA will be in place before activation)

Public company profiles and listings are displayed on our platform as part of the directory service at the direction of the submitting company. We may disclose information if required by law or to protect our legal rights.

6. Data Retention

Company account data: retained for the duration of the account plus 6 years after closure (tax/legal compliance)
Application data: 2 years after last contact, or until account deletion
Cookie consent logs: 3 years
Audit logs: 90 days (security), 3 years (consent records)
Crawled data: refreshed every 90 days; deleted within 7 days of opt-out
Public listings: retained until the company account is active or deletion is requested

7. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you (Article 15)
Request correction of inaccurate data (Article 16)
Request deletion of your data, subject to legal obligations (Article 17)
Restrict processing in certain circumstances (Article 18)
Withdraw consent where processing is based on consent
Object to processing based on legitimate interest (Article 21)
Request data portability (Article 20)

To exercise these rights, contact us at contact@poweredbyai.services. We will respond within one month.

Children: Our services are not intended for children under 16. If you believe a child has provided us with personal data, contact us to request deletion.

8. International Transfers

Your data is primarily processed on our VPS within the EU (Hetzner, Germany). Transfers to third countries (including the US) occur only where necessary for sub-processors such as Cloudflare. Where such transfers occur, we ensure appropriate safeguards are in place, including UK IDTA or EU SCCs, DPAs with all sub-processors, and supplementary technical measures.

9. Cookies and Local Storage

We use only essential cookies and local storage for the platform to function. No analytics, advertising, or third-party tracking cookies are currently deployed. See our Cookie Policy for full details.

10. AI Features

Public AI chat is currently disabled. No AI chat widget is active on GlobalIndex. If AI features are enabled in the future (e.g., AI-assisted classification, content assistance), users will be informed when interacting with an AI system. AI-generated content may be inaccurate and does not constitute professional advice. Human review is required for significant decisions. External AI providers will be disclosed before activation.

11. Data Breach Handling

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected individuals without undue delay.

12. Controller and Processor Roles

Powered By AI Services LTD acts as data controller for personal data collected through GlobalIndex. Customers remain responsible for the legality, accuracy, and authorisation of content they submit. When we process data on a customer's documented instructions, we may act as a data processor, governed by a Data Processing Agreement.

13. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

https://ico.org.uk/make-a-complaint/

If you are located in the EU/EEA, you may also lodge a complaint with your local supervisory authority.

14. Contact

If you have questions about this Privacy Policy, please contact us at contact@poweredbyai.services.