Last updated: July 27, 2026
Indexos, LLC respects your privacy and is committed to responsibly handling information entrusted to us. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you: • Visit indexos.com or another website operated by Indexos; • Create or use a Indexos Account, dashboard, portal, application, or integration; • Apply for or use a card, payment, wallet, commercial credit, or related financial product made available through Indexos; • Communicate with our sales, support, compliance, or other teams; • Participate in a demonstration, promotion, survey, event, or referral program; or • Otherwise interact with Indexos. This Privacy Policy applies to information about individuals, including business owners, beneficial owners, officers, employees, contractors, Authorized Users, applicants, representatives, vendors, referral partners, and website visitors. It does not apply to information that does not identify and cannot reasonably be linked to an individual, including properly aggregated or deidentified information.
“Account” means a business account or user profile used to access the Services. “Authorized User” means a person whom a Business permits to access an Account or use a Financial Product. “Business” means the legal entity, sole proprietorship, or other commercial organization on whose behalf the Services are accessed or used. “Financial Product” means a card, commercial credit product, wallet, payment service, bank-account connection, ACH service, vendor-payment service, funds-transfer service, or related product. “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an individual or household. “Program Partner” means an issuing bank, lender, creditor, financial institution, program manager, processor, card network, payment provider, bank-data provider, identity-verification provider, compliance provider, servicer, or other party involved in providing or supporting a Financial Product. “Indexos,” “we,” “us,” or “our” means Indexos, LLC and, where appropriate, its affiliates, successors, and assigns. “Services” means the Indexos website, dashboard, portal, applications, software, card-management tools, job-costing tools, payment tools, integrations, analytics, communications, and related services.
Indexos is a financial technology company. Indexos is not a bank. Certain Financial Products are issued, funded, held, processed, serviced, or otherwise provided by Program Partners. Program Partners may collect Personal Information directly from you, receive information from Indexos, or provide information to Indexos. A Program Partner’s collection and use of Personal Information may be governed by its own privacy notice or privacy policy. This Privacy Policy does not replace any privacy notice that an issuing bank, lender, creditor, financial institution, or other Program Partner is legally required to provide. We generally identify service providers and Program Partners by category rather than listing each provider by name. We may specifically identify a provider where required by law, where the provider enters into a direct agreement with you, or where identification is necessary to accurately describe a Financial Product.
The Services are intended for Businesses and individuals acting in a business capacity. A Business may provide Indexos with information about its owners, officers, employees, contractors, cardholders, and other Authorized Users. Businesses are responsible for providing any required notices and obtaining any rights or consents necessary before providing that information to Indexos. A Business administrator may be able to access information concerning users associated with that Business, including: • Profile information; • Cards; • Spending; • Receipts; • Transactions; • Job assignments; • Permissions; and • Account activity.
The information we collect depends on your relationship with Indexos and the Services you use. A. Identifiers and Contact Information We may collect: • Name; • Business name; • Business and personal email addresses; • Telephone number; • Mailing, residential, and business addresses; • Date of birth; • Username or Account identifier; • Internet Protocol address; • Device identifiers; • Signature; and • Similar identifiers. B. Business and Professional Information We may collect: • Job title and role; • Employer or affiliated Business; • Ownership percentage; • Status as an officer, director, manager, beneficial owner, or controlling person; • Business formation information; • Business licenses; • Industry and business activities; • Number of employees; • Revenue, receivables, project volume, and other business information; • Ecommerce, marketplace, and store information; • Referral source; and • Information concerning your authority to act for a Business. C. Identity, Verification, and Compliance Information We or our Program Partners may collect: • Social Security number; • Employer identification number or taxpayer identification number; • Driver’s license, passport, or other government identification; • Images or copies of identification documents; • Beneficial ownership and control information; • Business formation and organizational documents; • Sanctions-screening results; • Identity-verification results; • Fraud-risk information; • Device, network, and behavioral security signals; • Information from public records, government databases, and commercial databases; and • Other information required for business verification, identity verification, anti-money-laundering compliance, sanctions screening, fraud prevention, or legal compliance. Some of this information may constitute sensitive Personal Information under applicable law. D. Financial and Bank-Account Information We may collect: • Bank name; • Account and routing information; • Account ownership information; • Account balances; • Transaction history; • Cash-flow information; • Revenue and expense information; • Credit limits and available credit; • Repayment and payment history; • Returns, reversals, disputes, and chargebacks; • Financial statements; • Tax documents; • Accounts receivable and accounts payable information; • Information obtained through a bank-data connection; • Commercial credit information; and • Other financial information provided by you or a Program Partner. Acceptance of Indexos’s agreements does not, by itself, authorize Indexos or a Program Partner to obtain a consumer credit report. If a Program Partner proposes to obtain a consumer report, any required disclosure and separate authorization must be provided before the report is obtained. E. Card, Payment, and Transaction Information We may collect: • Physical and virtual card information; • Card status and controls; • Merchant name and location; • Merchant category; • Transaction date and amount; • Authorization and settlement information; • Declines, reversals, refunds, returns, and disputes; • Vendor and payee information; • ACH and other payment instructions; • Wallet or ledger activity; • Payment purpose and memo information; • Receipts, invoices, purchase orders, and supporting documents; • Employee, team, project, property, customer, or job assignments; • Transaction classifications and accounting categories; and • Information concerning suspected unauthorized or fraudulent activity. F. Project, Job, and Expense Information We may collect information used to associate expenses with a: • Project; • Order or fulfillment activity; • Customer; • Property; • Insurance claim; • Team; • Employee; • Vehicle; • Vendor; • Deployment; • Event; or • Other business activity. This information may include addresses, customer names, job or claim numbers, descriptions of work, receipts, invoices, photographs, notes, and other documents. You should not upload medical information or other highly sensitive information that is not reasonably necessary to use the Services. G. Internet, Device, and Usage Information We may automatically collect: • Internet Protocol address; • Browser type; • Operating system; • Device type and identifiers; • Mobile carrier; • Language and time-zone settings; • Pages viewed; • Features used; • Links clicked; • Referring and exit pages; • Login and access times; • Session activity; • Crash and diagnostic information; • Approximate location derived from an Internet Protocol address; • Cookie and similar-technology identifiers; and • Security and fraud-detection information. H. Communications and Support Information We may collect information contained in: • Emails; • Telephone calls; • Text messages; • Chat and support requests; • Surveys; • Demonstration requests; • Complaints; • Transaction disputes; • Social-media communications; • Recorded calls, after appropriate notice where required; and • Other communications with Indexos or a Program Partner. I. Marketing and Preference Information We may collect: • Communication preferences; • Marketing selections; • Cookie preferences; • Products or services of interest; • Referral and campaign information; • Responses to advertisements; • Event participation; and • Information concerning how you learned about Indexos. J. Inferences and Derived Information We may derive classifications, estimates, risk indicators, business-health indicators, fraud indicators, eligibility indicators, spending patterns, cash-flow projections, and other insights from information we collect. Automated outputs may be incomplete or inaccurate and do not constitute professional advice.
We may collect Personal Information from: • You directly; • The Business you represent; • Business owners, administrators, and Authorized Users; • Program Partners; • Linked banks, accounting systems, ecommerce and inventory-management systems, and other connected platforms; • Merchants, vendors, payees, card networks, processors, and financial institutions; • Identity-verification, fraud-prevention, sanctions-screening, and compliance providers; • Commercial credit and business-information providers; • Public records and government databases; • Referral and marketing partners; • Analytics, advertising, and cookie providers; • Social-media and communications platforms; • Service providers acting for us; and • Information generated through your use of the Services.
We may use Personal Information for the following purposes. A. Providing the Services We may use information to: • Create and administer Accounts; • Authenticate users; • Provide dashboards, Cards, spending controls, job-costing tools, wallets, payment services, integrations, and support; • Process or facilitate transactions; • Connect bank accounts and business systems; • Display transactions and Account information; • Associate expenses with jobs, employees, projects, or vendors; • Provide reporting, exports, and reconciliation tools; and • Communicate about Account and transaction activity. B. Facilitating Financial Products We may use and disclose information to: • Transmit applications to Program Partners; • Determine preliminary eligibility; • Support underwriting or commercial risk review; • Facilitate Card issuance; • Establish or manage limits; • Facilitate payments, repayment, settlement, or collections; • Provide statements and transaction information; • Resolve Card or payment disputes; • Administer rewards or incentives; and • Comply with applicable Product Agreements. Final underwriting, credit, issuance, and Account decisions may be made by a Program Partner. C. Verification and Legal Compliance We may use information to: • Verify identities, Businesses, ownership, and authority; • Conduct know-your-business and know-your-customer reviews; • Screen sanctions and government lists; • Prevent money laundering, fraud, bribery, and unlawful conduct; • Investigate suspicious or prohibited activity; • Respond to legal process and regulatory inquiries; • Maintain required records; and • Enforce agreements. D. Security and Fraud Prevention We may use information to: • Secure Accounts; • Detect compromised credentials; • Monitor suspicious transactions; • Prevent unauthorized access; • Protect Indexos, users, Program Partners, and others; • Debug and repair the Services; • Investigate security incidents; and • Improve security controls. E. Support and Communications We may use information to: • Respond to questions; • Resolve support requests; • Provide onboarding assistance; • Send service, transaction, security, and compliance notices; • Request missing information; • Communicate about changes to the Services or agreements; and • Provide legally required records. F. Improvement and Development We may use information to: • Analyze product performance; • Understand use of the Services; • Develop new features; • Improve existing features; • Test and troubleshoot systems; • Conduct research and analytics; • Create aggregated or deidentified information; and • Improve classifications, forecasts, and recommendations. G. Marketing Subject to applicable law and your choices, we may use contact information and website activity to: • Provide information about Indexos products; • Invite you to demonstrations or events; • Measure marketing performance; • Customize website content; • Provide or measure advertisements; and • Administer referral and promotional programs. Consent to receive marketing communications is not a condition of receiving a Financial Product. H. Corporate Transactions We may use and disclose information in connection with a financing, investment, reorganization, merger, acquisition, sale of assets, bankruptcy, due diligence process, or other corporate transaction.
We may disclose Personal Information to the following categories of recipients. A. Program Partners We may disclose information to financial institutions and service providers that help us provide Cards, commercial credit products, wallets, payments, bank connectivity, identity verification, fraud prevention, compliance, underwriting support, servicing, transaction processing, settlement, disputes, repayment, collections, and related services. These recipients may include: • Issuing banks; • Lenders and creditors; • Financial institutions; • Program managers; • Processors; • Card networks; • Payment providers; • Bank-data providers; • Identity-verification providers; • Fraud-prevention providers; • Compliance providers; • Servicers; • Custodians; and • Technology providers. Program Partners may communicate with you directly regarding onboarding, verification, underwriting, servicing, support, payments, repayment, disputes, compliance, or Financial Products. B. Service Providers We may disclose information to vendors that provide: • Hosting and cloud infrastructure; • Cybersecurity; • Identity verification; • Fraud prevention; • Compliance and sanctions screening; • Customer support; • Email, telephone, and messaging; • Document storage and electronic signatures; • Analytics; • Accounting; • Professional services; • Marketing; • Data processing; and • Other services supporting Indexos. C. The Business and Its Administrators If your Account is associated with a Business, we may disclose your information and activity to that Business and its administrators. An administrator may be able to: • View your Account information; • Issue or cancel Cards; • Establish or change permissions; • Establish spending controls; • Review transactions; • Request receipts; • Assign expenses; • Monitor activity; • Restrict or terminate access; and • Export or retain information concerning your activity. D. Connected Platforms At the direction of the Business, we may provide information to connected accounting, ecommerce, inventory-management, payroll, banking, expense-management, or other systems. E. Transaction Participants We may disclose information to merchants, vendors, payees, banks, card networks, processors, and other persons involved in processing or resolving a transaction. F. Professional Advisers We may disclose information to attorneys, accountants, auditors, consultants, insurers, and other professional advisers. G. Legal and Regulatory Recipients We may disclose information to courts, regulators, law enforcement, government agencies, card networks, financial institutions, or other authorized persons when we reasonably believe disclosure is required or permitted to: • Comply with law or legal process; • Respond to a subpoena, warrant, court order, levy, or garnishment; • Investigate fraud or unlawful activity; • Protect rights, property, or safety; • Enforce an agreement; • Address a security incident; or • Meet regulatory or Program Partner obligations. H. Corporate Transaction Participants We may disclose information to actual or prospective investors, lenders, buyers, sellers, advisers, or counterparties in connection with a corporate transaction, subject to appropriate confidentiality protections where reasonably practicable. I. With Your Direction or Consent We may disclose Personal Information when you direct us to do so or provide consent.
We and our providers may use cookies, software development kits, pixels, tags, local storage, and similar technologies to: • Keep you signed in; • Remember settings; • Secure the Services; • Detect fraud; • Understand website and feature usage; • Diagnose technical problems; • Measure marketing performance; and • Provide or measure advertising. Where available, you may manage nonessential cookies through our cookie-preference tool. You may also control cookies through your browser settings. Blocking cookies may cause certain features not to function properly.
Indexos does not sell Personal Information in exchange for money. We may use analytics or advertising technologies on our public website that disclose identifiers, cookie identifiers, device information, or Internet activity to analytics or advertising providers. Certain state laws may define some of these activities as a “sale,” “sharing,” or use for “targeted advertising,” even when no money is exchanged. Where applicable, you may opt out by: • Using our cookie-preference tool; • Contacting us at [email protected]; or • Using a legally recognized opt-out preference signal, such as Global Privacy Control. We do not use or disclose Social Security numbers, government identification, bank-account credentials, Account balances, Card transaction information, or other sensitive financial information for cross-context behavioral advertising. We do not knowingly sell or share the Personal Information of anyone under 18.
Information collected in connection with a Financial Product may also be subject to federal financial privacy laws and a separate privacy notice provided by an issuing bank, lender, creditor, or other financial institution. Where information is governed by the Gramm-Leach-Bliley Act or another financial privacy law, certain state privacy rights may not apply to that information. A Program Partner’s financial privacy notice controls regarding that Program Partner’s handling of nonpublic personal information.
We retain Personal Information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy and satisfy legal, regulatory, contractual, accounting, tax, fraud-prevention, security, and dispute-resolution obligations. Retention depends on the nature of the information: • Account and profile information: Generally retained for the duration of the Account and for a reasonable period after closure. • Verification and compliance information: Retained for periods required by law, Program Partner requirements, fraud-prevention needs, and legal obligations. • Financial, transaction, Card, and payment information: Retained for the relationship and the period needed to address reporting, audits, disputes, taxes, collections, and legal obligations. • Contracts and consents: Retained for the relationship and the applicable limitation or recordkeeping period. • Support and communications records: Retained as reasonably necessary to resolve matters and document the relationship. • Security and fraud information: Retained as reasonably necessary to detect, investigate, and prevent fraud and security incidents. • Website and cookie information: Retained according to the applicable cookie duration, analytics setting, or operational need. • Marketing information: Retained until you opt out or the information is no longer reasonably needed, subject to maintaining suppression records. • Aggregated and deidentified information: May be retained for longer periods where it cannot reasonably be linked to an individual. We may retain information after Account closure where reasonably necessary to collect amounts due, resolve disputes, comply with law, protect against fraud, or establish, exercise, or defend legal claims.
We maintain administrative, technical, and physical safeguards designed to protect Personal Information from unauthorized access, loss, misuse, alteration, or disclosure. Safeguards may include access controls, encryption, authentication, monitoring, employee controls, vendor oversight, incident-response procedures, and other measures appropriate to the nature of the information. No system is completely secure. We cannot guarantee that Personal Information will never be accessed, disclosed, altered, or destroyed without authorization. You are responsible for protecting login credentials, devices, physical Cards, and authentication methods and for promptly reporting suspicious activity.
A. Account Information You may update certain information through your Account. Other information may require assistance from Indexos or a Program Partner. B. Marketing Emails You may unsubscribe from marketing emails using the link included in the communication. Even after opting out, you may continue to receive service, security, transaction, legal, and Account communications. C. Text Messages You may opt out of marketing text messages by replying STOP. Stopping marketing messages may not stop security codes, transaction alerts, fraud alerts, or other messages necessary to provide requested Services. D. Cookies You may manage nonessential cookies through our cookie-preference tool or browser settings. E. Connected Accounts You may disconnect certain integrations through your Account or through the connected provider. Disconnecting an integration does not require deletion of information previously received when retention is permitted or required.
Depending on where you live, the law applicable to Indexos, and the information involved, you may have the right to: • Confirm whether we process your Personal Information; • Request access to Personal Information; • Request a copy of Personal Information; • Request correction of inaccurate information; • Request deletion of Personal Information; • Request data portability; • Opt out of the sale of Personal Information; • Opt out of sharing for cross-context behavioral advertising; • Opt out of targeted advertising; • Opt out of certain profiling or automated decision-making; • Limit certain uses or disclosures of sensitive Personal Information; • Withdraw consent where processing is based on consent; • Appeal a denial of a privacy request; and • Receive service without unlawful discrimination for exercising privacy rights. These rights are subject to exceptions. For example, we may retain or use information to: • Complete transactions; • Comply with law; • Prevent fraud; • Collect amounts due; • Maintain security; • Exercise legal rights; or • Meet Program Partner requirements. Rights may not apply to information governed by the Gramm-Leach-Bliley Act or another statutory exemption. Submitting a Request You may submit a request by emailing: [email protected] Use the subject line “Privacy Request.” Please identify: • Your name; • Your email address; • The Business with which you are associated; • The right you wish to exercise; and • Your state of residence. We may request information reasonably necessary to verify your identity and authority. Authorized Agents Where permitted, an authorized agent may submit a request for you. We may require proof of the agent’s authority and may ask you to verify your identity directly. Appeals Where applicable, you may appeal a denial by replying to our decision or emailing [email protected] with the subject line “Privacy Appeal.”
This section applies to the extent Indexos is subject to the California Consumer Privacy Act. During the preceding 12 months, Indexos may have collected the following categories of Personal Information: • Identifiers; • Customer-record information; • Protected classifications, when voluntarily provided or incidentally collected; • Commercial information; • Internet or electronic-network activity; • Geolocation information; • Audio, electronic, visual, or similar information; • Professional or employment-related information; • Sensitive Personal Information, including government identifiers, Account credentials, and financial information; • Inferences; and • Other Personal Information described in this Privacy Policy. We collect, use, retain, and disclose these categories for the purposes and to the recipients described in this Privacy Policy. We do not sell Personal Information for money. Certain website analytics or advertising disclosures may constitute sale or sharing under California law. California residents may opt out using the methods described in Section 9. We do not use sensitive Personal Information to infer characteristics about individuals or for purposes outside those permitted by applicable law without providing any legally required right to limit the use. We will not unlawfully discriminate against a person for exercising a California privacy right.
Where required by applicable law, Indexos will process a legally recognized browser-based opt-out preference signal as a request to opt out of sale, sharing, or targeted advertising for the browser or device sending the signal. A preference signal may not apply to information associated with your Account unless you are logged in or otherwise provide enough information to connect the signal to the Account.
The Services are not directed to children under 18. Indexos does not knowingly permit children under 18 to create Accounts or use Financial Products. If you believe a child has provided Personal Information to Indexos, contact us at [email protected].
The Services are intended for use in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your location.
The Services may link to or integrate with third-party websites and services. Indexos is not responsible for the privacy, security, content, or practices of third parties. You should review the third party’s privacy policy before providing information.
We may update this Privacy Policy from time to time. We will post the updated policy with a revised “Last Updated” date. If a change is material, we may provide additional notice by email, through the dashboard, or by another reasonable method. Where required, we will obtain consent before applying a material change to previously collected information.
Questions, privacy requests, or concerns may be submitted to: Indexos, LLC Attn: Privacy 6100 Hollywood Blvd., Suite 520 Hollywood, FL 33024 Email: [email protected]
Other documents
Questions about this document?
Contact us →