Privacy Policy

Citeda ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our AI visibility analytics service (the "Service").

By using the Service, you consent to the practices described in this policy.

Information You Provide

• Account Data: Email address, name or display name, profile picture (via Google OAuth).
• Project Data: Brand names, website URLs, analysis queries, and keywords you submit for analysis.
• Payment Data: Billing information processed by Lemon Squeezy. We do not store full payment card numbers.
• Communications: Emails, support requests, and feedback you send us.

Information Collected Automatically

• Usage Data: Features used, analysis runs performed, pages visited, clicks, and interactions.
• Device Data: Browser type, operating system, device type, screen resolution.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies: Session cookies for authentication and functional cookies for preferences.

• Provide, maintain, and improve the Service.
• Process your AI visibility analysis queries through AI platforms.
• Process transactions and send billing notifications.
• Authenticate your identity and manage your account.
• Send service-related communications (e.g., updates, security alerts).
• Analyze usage patterns to improve the Service.
• Detect, prevent, and address fraud, abuse, or security issues.
• Comply with legal obligations.
• Create aggregated, de-identified analytics for internal use.

We do not sell your personal information. We may share your information with:

Service Providers

Other Circumstances

• Legal Requirements: When required by law, court order, or government request.
• Safety: To protect the rights, property, or safety of Citeda, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you).
• With Your Consent: Any other sharing requires your explicit consent.

• Essential Cookies: Required for authentication, security, and core functionality.
• Functional Cookies: Remember your preferences and settings.
• Analytics Cookies: Help us understand how the Service is used.

You can manage cookies through your browser settings. Disabling essential cookies may affect functionality.

We honor Global Privacy Control (GPC) browser signals.

• Account Data: Retained until you delete your account, plus 30 days for data export.
• Analysis Results: Retained until account deletion.
• Payment Records: 7 years as required for tax and legal compliance.
• Server Logs: 90 days.
• De-identified Data: May be retained indefinitely for analytics.

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.

All Users

• Access your personal data.
• Correct inaccurate data.
• Delete your account and associated data.
• Export your data in a portable format.
• Opt out of marketing communications.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights:

• Right to Know: Request the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your rights, email privacy@citeda.com. We will respond within 45 days.

Other US State Residents

If you reside in Virginia, Colorado, Connecticut, or another US state with a comprehensive privacy law, you may have similar rights to access, correct, delete, and port your data, as well as to opt out of targeted advertising. Contact us at privacy@citeda.com to exercise these rights.

Citeda does not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes. If you have concerns, contact us at privacy@citeda.com.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will promptly delete it. If you believe a child has provided us with personal information, please contact us.

Your data is processed and stored in the United States via our hosting providers (Vercel and Supabase). By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your jurisdiction.

Citeda uses third-party AI platforms to generate analysis results. Your analysis queries are sent to these platforms for processing. The results are simulation-based estimates and are not used to make automated decisions with legal or similarly significant effects on you.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Effective" date at the top indicates when the policy was last revised.

For privacy-related questions or to exercise your rights:

• Email: privacy@citeda.com