Privacy Policy
Last updated: May 17, 2026
1. Introduction
Cited ("we", "us", "our") operates the AI visibility tracking platform available at cited-app.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using Cited, you agree to the collection and use of information described in this policy.
2. Data We Collect
We collect the following categories of personal data:
- Account data: Email address, password (hashed), account creation date.
- Business data: Your business or domain name, tracked prompts, product description, industry.
- Usage data: Citation check results, citation scores, competitor data, AI engine responses, check frequency, feature usage.
- Payment data: Subscription tier and billing status. Payment card details are processed exclusively by Paddle and are never stored on our servers.
- Technical data: IP address, browser type, device information, and log data collected automatically when you use the service.
- Communications: Any emails or messages you send us.
3. How We Use Your Data
We use your data to:
- –Run citation checks by sending your tracked prompts to ChatGPT, Claude, Perplexity, and Gemini.
- –Calculate and display your AI citation score and trend history.
- –Send weekly digest emails, citation drop alerts, and service notifications.
- –Process your subscription payments via Paddle.
- –Improve and maintain the platform.
- –Respond to support requests.
- –Comply with legal obligations.
4. Third-Party Services
We share data with the following third parties to operate the service:
Database and authentication. Stores your account, business, and citation data. Data is stored in the EU (Ireland region).
Payment processing and subscription management. Receives payment and billing information. Paddle is our Merchant of Record.
Transactional email delivery. Receives your email address to deliver notifications.
Your tracked prompts are sent to the OpenAI API to perform citation checks.
Your tracked prompts are sent to the Anthropic API to perform citation checks.
Your tracked prompts are sent to the Google Gemini API to perform citation checks.
Your tracked prompts are sent to the Perplexity API to perform citation checks.
Hosting and infrastructure provider. Processes request data in the course of serving the application.
We do not sell your personal data to any third party.
5. Data Retention
We retain your personal data for as long as your account is active. Citation check history and scores are retained to provide trend analysis. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or fraud prevention).
6. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights:
- –Right of access — request a copy of the data we hold about you.
- –Right to rectification — request correction of inaccurate data.
- –Right to erasure — request deletion of your account and data.
- –Right to restriction — request that we limit processing of your data.
- –Right to data portability — request your data in a machine-readable format.
- –Right to object — object to processing of your data for direct marketing.
- –Right to withdraw consent — where processing is based on consent, you may withdraw at any time.
To exercise any of these rights, email us at [email protected]. You can also delete your account directly from your Settings page.
7. Cookies
We use essential cookies for authentication (session tokens) and preference storage. We do not use advertising or third-party tracking cookies. You can disable cookies in your browser settings, but this may prevent you from logging in.
8. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords, and access controls. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.
9. Children's Privacy
Cited is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the app. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.
11. Contact
For privacy-related questions or to exercise your rights, contact us at:
[email protected]