Privacy Policy
Last updated: August 4, 2026 · Applies to cuyava.com and the IndexSweep WordPress plugin
Who we are
Cuyava builds WordPress plugins, including IndexSweep. You can reach us at hello@cuyava.com.
This website
We do not run advertising, sell or share your data, or build a profile of you. You will not see a cookie banner here, because we use no cookies for tracking or advertising.
We count page views in aggregate using Cloudflare Web Analytics, which does not identify individual visitors. Cloudflare also hosts the site and processes technical request data, such as IP addresses, to deliver and secure it.
The IndexSweep plugin — free version
The free version of IndexSweep collects and transmits no data whatsoever:
- All scanning, analysis, and fixes run entirely on your own WordPress server.
- Search Console CSV files you upload are processed on your server and are never sent to us or anyone else.
- The plugin has no account system, no phone-home, no telemetry, and makes no external network requests.
The IndexSweep plugin — Pro version (Google Search Console connection)
The Pro version can, at your explicit instruction, connect to the Google Search Console API to read indexing and performance data for the site you authorize. Here is precisely how that data is handled:
- What is accessed: read-only Search Console data for your verified property — index-status information and search-performance metrics (clicks, impressions) for your own URLs.
- Where it goes: directly from Google's API to your own WordPress server, where it is stored in your WordPress database and displayed in your admin dashboard. Cuyava operates no servers that receive, store, or process your Google data.
- What it is used for: solely to provide the plugin's user-facing features — identifying junk URLs, monitoring index coverage, and alerting you to declining content. Nothing else.
- Revoking access: you can disconnect at any time from the plugin's settings, or revoke access from your Google Account permissions page. Deleting the plugin removes all locally stored data (see uninstall behavior below).
Google API Services Limited Use disclosure: IndexSweep's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not transfer it to third parties except as necessary to provide the plugin's user-facing features, to comply with applicable law, or as part of a merger or acquisition with notice to users. Humans do not read this data except with your permission for support, for security purposes, or to comply with law.
Purchases and licensing
Pro licenses are sold through Freemius, our e-commerce partner, which processes your name, email address, and payment information as the merchant of record under its own privacy policy. We receive from Freemius the information needed to manage your license (such as your email and license status), and use it only for licensing, support, and service communications.
Support
If you email us or post in a support forum, we receive what you send. We use it to help you and for nothing else. We don't add you to any marketing list without your explicit consent.
What we never do
- Sell or rent any user data, ever.
- Use your site's data or your Google data for advertising or profiling.
- Collect data from your site's visitors.
Data deletion
Uninstalling IndexSweep through WordPress removes all data the plugin stored on your site — rules, logs, settings, and any synced Search Console data. For license-related data held by Freemius, you may contact them or us and we will assist with deletion requests.
Why we are allowed to process this data
- Website analytics and security — our legitimate interest in understanding whether anyone visits the site and in keeping it online and protected.
- Support correspondence — our legitimate interest in answering people who contact us.
- Purchases and licensing — performance of the contract you enter when you buy a licence, and our legal obligation to keep tax and accounting records.
- The Search Console connection (Pro) — your consent, given on Google's authorization screen. You can withdraw it at any time, which stops the processing from that point on.
How long we keep it
- Website analytics — aggregate figures only, kept by Cloudflare under its own retention schedule. Nothing is linked to you as an individual.
- Emails you send us — kept while we are helping you and for a reasonable period afterwards in case you follow up, then deleted.
- Licence records — kept while your licence is active, and afterwards only as long as tax and accounting law requires.
- Anything the plugin stores — held on your own server, under your control, for as long as you choose to keep it. Uninstalling removes it.
Your rights
You have the right to ask us for a copy of the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time. Email hello@cuyava.com and we will respond within one month.
If you are unhappy with how we have handled your data, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office; in the EU it is the supervisory authority for the country you live in.
Where your data is processed
We are a small operation and use established providers rather than running our own infrastructure. Cloudflare (hosting, DNS, analytics), Freemius (payments and licensing), and Google (the optional Search Console connection) are US-based companies operating globally, and data may be processed outside your country. Each provides its own safeguards for international transfers, including the European Commission's standard contractual clauses where applicable.
Changes
If this policy changes materially, the "last updated" date above will change, and material changes affecting Pro users will be announced in the plugin's changelog.