Privacy
You can browse without an account. This page explains what we store when you use the directory.
Accounts and sign-in
We store your email address, account creation and last sign-in times, and hashed sign-in codes and session tokens. A secure session cookie keeps you signed in. Sign-in emails are delivered by Resend. Your email address is not published with your submission.
Company submissions
We store the company name, website, industry, description and optional service, language, location and price information you submit, linked to your account. An administrator can read pending submissions. Approved company details become public; your login email stays private. We keep review status, reasons and audit records to handle corrections and abuse.
Review assistance and notifications
We use Cloudflare Workers AI to prepare a private initial assessment of submitted business details and public reference links. We do not send your login email, private email-thread link or reviewer notes to the model. The assessment is based on supplied information and does not verify the company. A human administrator makes the publishing decision. Resend processes your email address and the relevant submission details to send receipts and review updates. We keep notification status and message identifiers to diagnose failures and prevent duplicate messages.
If you submitted by email, an administrator may add your application and its original email reference to the private review queue. This does not create a verified account; signing in with the same email lets you track your submission.
Abuse prevention
We limit sign-in requests using temporary counters linked to a hash of the requesting IP address, and limit submissions by account. Cloudflare processes network information to deliver and protect the service.
Browsing and analytics
The public production website uses Google Analytics to measure page views, referrals and broad device and location information. It may set analytics cookies and sends requests to Google. We disable advertising signals and do not load analytics on private dashboard or admin pages. Browser tracker blockers can block analytics without preventing directory access.
Some existing company logos load from the company's own servers. Those servers receive the image request, including your IP address. We do not send a referring-page URL with these requests.
Storage and requests
The website and operational database are hosted by Cloudflare. Account and submission records are kept while needed to operate the directory and handle disputes or abuse. To request access, a correction or deletion, email hello@vaindex.com. Company-listing removal and account deletion are separate requests.
Do not submit patient records, private staff information, identity documents or passwords. Company descriptions are public business information; sensitive information does not belong in the directory.