This Privacy Policy explains how Indigo Design Company LLC (“Indigo,” “we,” “us,” or “our”), the company that operates IATO (“the Service”), collects, uses, and shares information about you. Indigo is responsible for the personal information described in this policy.
Account information. When you create an account, we collect your email address, name, and password (stored as a cryptographic hash). If you sign in with Google or GitHub, we receive your name and email address from that provider. You may also add a company name and tax ID for your invoices. Payments are processed by Stripe — we do not store credit card numbers.
Crawl data. When you run a crawl, we store the crawled page data (URLs, titles, meta descriptions, status codes, content, links, and other technical SEO data) within your workspace. This data belongs to you.
Usage data. We record how you use the Service, such as pages visited, features used, and performance metrics, and link this activity to your account so we can operate, support, and improve the Service. We also receive standard device and browser information and your IP address when you visit.
Analytics and advertising data. Our website uses Google Analytics and advertising tags from Google Ads, Meta (Facebook and Instagram), and LinkedIn. These tools use cookies and similar technologies to collect information about your visits, such as pages viewed, device and browser information, and IP address, and they may track your activity across other websites and over time. When you sign up or make a purchase, our servers also report that event to Google Analytics. When you make a purchase, we report it to Meta along with the purchase value, a hashed (scrambled) form of your email address, your IP address, and browser information, so that Meta can measure the results of our advertising.
We use your information to:
We never sell or share your crawl data, and we never use it for advertising. We do not sell your account information to data brokers. Our analytics and advertising tools do share information about your visits and purchases with Google, Meta, and LinkedIn as described above — see Cookies for how to limit this.
We may share your information only in the following circumstances:
We retain your account data for as long as your account is active. Crawl data is retained according to your plan limits. When you delete your account, we remove your personal data within 30 days and crawl data within 90 days. Some anonymized, aggregated data may be retained indefinitely for analytics.
We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. For more details, see our Security page.
We use essential cookies and similar storage to keep you signed in and remember your preferences. With your consent, we also use analytics cookies (Google Analytics) and advertising cookies from Google Ads, Meta, and LinkedIn, as described in Section 1.
Your choice. Our cookie banner lets you accept or decline analytics and advertising cookies. If you are in the European Economic Area, the United Kingdom, or Switzerland, these cookies stay off unless you click Accept. Elsewhere they are on by default, and clicking Decline turns them off. If your browser sends a Global Privacy Control signal, we treat it as a Decline. Your choice also applies to the purchase and sign-up events our servers report to Google and Meta. You can change your choice at any time with the Cookie settings link in the footer of every page.
To remember your choice, we set three strictly necessary cookies: iato_consent (your choice), iato_cid (a random identifier for your consent record), and iato_geo (whether the opt-in or opt-out rules apply to your region). We keep a record of each choice, with its date, banner version, and region, to show that consent was given or refused; we do not store your IP address with it.
You can also limit this tracking by blocking or deleting cookies in your browser settings, installing the Google Analytics opt-out browser add-on, and adjusting your ad settings with Google, Meta, and LinkedIn. Blocking essential cookies may prevent you from signing in.
You have the right to:
To exercise any of these rights, contact us at privacy@iato.ai. To opt out of analytics and advertising tracking, see Cookies.
IATO is operated by Indigo Design Company LLC from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US. By using the Service, you consent to this transfer.
We may update this policy from time to time. We will notify registered users of material changes via email. Your continued use of the Service after changes constitutes acceptance.
Questions about this policy? Contact our privacy team at privacy@iato.ai, through our contact page, or by mail at Indigo Design Company LLC, 680 North Lake Shore Drive, Suite 110-1665, Chicago, IL 60611.
This policy was last updated on October 18, 2026.