indifeed Privacy Policy

Effective date: 4 September 2026

indifeed is operated by Bit Monkey Ltd, a company registered in England and Wales under company number 17306463 ("Bit Monkey", "we", "us" or "our").

This Privacy Policy explains how we collect, use and protect personal information when you visit indifeed.dev, create or use an indifeed account, contact us, or interact with a service operated using indifeed.

1. Our role

Depending on how you interact with indifeed, we may process personal information in different capacities.

When we are the controller

Bit Monkey is the data controller for personal information relating to:

visitors to indifeed.dev;
people who create or administer indifeed accounts;
billing and subscription contacts;
communications with us;
security, fraud prevention and service administration; and
information we use to operate and improve our own business.

When we are a processor

Our customers use indifeed to collect, manage and respond to feedback and related information.

Where personal information is submitted to a customer's indifeed workspace, the customer will normally be the data controller and Bit Monkey will process that information on the customer's behalf.

If you have submitted information to one of our customers and want to exercise your data protection rights in relation to that information, you should normally contact that customer directly.

We will assist our customers in responding to appropriate data protection requests.

2. Information we collect

Depending on how you use the service, we may collect the following information.

Account information

This may include:

your name;
email address;
organisation or workspace;
account identifiers;
authentication information; and
account preferences.

Billing information

We may collect:

billing contact details;
subscription information;
transaction references; and
limited payment information supplied by our payment provider.

Payments are processed by Stripe. We do not normally receive or store complete payment card details.

Feedback and workspace content

Customers and their users may submit information including:

feedback;
feature requests;
bug reports;
comments;
contact details;
attachments; and
other information entered into the service.

This information belongs to the relevant customer and is generally processed by us on their behalf.

Technical and usage information

When you use our website or service, we may process technical information necessary to operate and secure the service, including network requests, browser and device information, authentication events, security events and error logs.

We also collect anonymous usage statistics using a self-hosted instance of Umami, as described under Analytics and cookies below.

Communications

If you contact us, we may retain your message, contact details and our correspondence with you.

Transactional and service email is delivered using Resend.

3. How we use personal information

We process personal information where necessary to:

provide and operate indifeed;
create and administer accounts;
authenticate users;
process subscriptions and payments;
provide customer support;
send service-related communications;
maintain the security and integrity of the service;
detect and prevent abuse, fraud and unauthorised access;
diagnose faults and improve reliability;
understand how our service is being used;
comply with legal and regulatory obligations; and
establish, exercise or defend legal claims.

Where appropriate, we rely on one or more of the following lawful bases:

contract — where processing is necessary to provide services you or your organisation have requested;
legitimate interests — including operating, securing, improving and protecting our service and business;
legal obligation — where we must process information to comply with the law; and
consent — where we specifically ask for your consent.

Where we rely on legitimate interests, we consider whether those interests are overridden by your rights and interests.

4. Customer data

We do not acquire ownership of content submitted to indifeed by our customers or their users.

We process customer data only as required to:

provide the service;
comply with the customer's instructions;
maintain security and reliability;
meet our legal obligations; or
otherwise as agreed with the customer.

We do not sell customer data or personal information.

Customer Content may be submitted to Cloudflare Workers AI where AI functionality is used within indifeed. Bit Monkey does not use Customer Content to train general-purpose artificial intelligence models.

5. Service providers

We use selected third-party service providers where necessary to operate indifeed. These include providers of hosting and storage, network and application security, AI inference, transactional email, error monitoring and payment processing.

Our principal providers include Hetzner, Cloudflare, Sentry, Resend and Stripe.

Where a provider processes personal information on our behalf, we require appropriate contractual and security protections. A current list of subprocessors used to process Customer Personal Data is available at https://indifeed.dev/legal/subprocessors.

6. International transfers

Some of our service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we use an appropriate mechanism under UK data protection law. Depending on the destination and provider, this may include:

UK adequacy regulations;
the UK International Data Transfer Agreement;
the UK International Data Transfer Addendum to the European Commission Standard Contractual Clauses; or
another legally recognised safeguard.

We assess international transfers where required by applicable law.

7. Analytics and cookies

We use Umami to understand how indifeed is used and to help us improve the website and service.

Umami is self-hosted within infrastructure controlled by Bit Monkey. It does not use analytics cookies, does not track visitors across different websites and our configuration does not intentionally collect personally identifiable information.

Analytics information may include:

pages visited;
referring website;
browser and operating system;
device type;
approximate geographical region; and
anonymous information about how the service is used.

We use this information only to produce statistics about use of indifeed and to improve the service.

Essential cookies

When you sign in to indifeed, we use a first-party session cookie to maintain your authenticated session.

This cookie is strictly necessary for the operation and security of the service. It is not used for analytics, advertising or cross-site tracking and cannot be disabled while using authenticated parts of the service.

We do not use advertising or cross-site tracking cookies.

8. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods depend on the type of information concerned. For example:

active account information is normally retained while the account remains active;
customer workspace data is retained in accordance with the customer's subscription and deletion arrangements;
security and operational logs are retained for a limited period appropriate to their purpose;
financial records may be retained for the period required by tax and accounting law; and
information required to resolve disputes or enforce agreements may be retained while a relevant claim could reasonably arise.

When information is no longer required, we delete or anonymise it where reasonably practicable.

Backup copies may remain for a limited period until they are overwritten through normal backup rotation.

9. Security

We use technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration or loss.

These include measures relating to access control, authentication, encryption, software development, infrastructure security, monitoring, backup and incident response.

Further information is available in our Security Policy at https://indifeed.dev/legal/security.

10. Your rights

Depending on the circumstances, UK data protection law may give you rights to:

access your personal information;
correct inaccurate information;
request deletion of your information;
restrict certain processing;
object to certain processing;
receive certain information in a portable format; and
withdraw consent where processing is based on consent.

These rights are not absolute and may depend on the circumstances and lawful basis for processing.

To exercise a right relating to information for which Bit Monkey is the controller, contact [email protected].

If your request concerns information held within one of our customers' workspaces, you should normally contact that customer.

11. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

12. Children

indifeed is a business service and is not intended for use by children.

13. Changes to this policy

We may update this Privacy Policy as our service, suppliers or legal obligations change.

Where a change is significant, we will take reasonable steps to notify affected customers.

The effective date shown at the top of this policy indicates when it was last materially updated.

14. Contact

Bit Monkey Ltd
Company number: 17306463
ICO registration number: ZC239561
132a High Street
Bromsgrove
United Kingdom
B61 8ES

Privacy enquiries: [email protected]