Privacy policy

What we collect

When you use Citation we collect:

• Business lookup data: the business name and location you search for, and the Google Places profile we retrieve to build your report.
• Audit results: the AI engine answers, computed score, grade, and gap analysis generated for your report. These are stored as an immutable snapshot so the report URL renders correctly for anyone you share it with.
• Email address: only if you choose to unlock the full playbook. We ask for a work email; providing it is optional.
• Basic usage analytics: standard server logs (IP address, browser type, pages visited, timestamps). We may also use a lightweight analytics tool to understand how the product is used in aggregate.

Why we collect it

• To generate and serve your AI Visibility report card.
• To send your report access link if you provide an email address.
• To understand how Citation is used so we can improve it. All analytics are in aggregate and not sold.
• To enforce rate limits and prevent abuse.

How it is stored

All data is stored in Convex, a cloud database hosted on AWS infrastructure in the United States. Audit snapshots are retained indefinitely so shared report URLs continue to work. Email addresses are retained until you request deletion.

Data retention

• Completed report snapshots: retained indefinitely so shared report URLs continue to work for anyone you have sent them to.
• Incomplete or failed audits: automatically deleted after 30 days. These are audit runs that were interrupted or errored before a report was generated.
• Rate-limit counters: the per-IP and global daily usage counters used to prevent abuse are automatically deleted after 60 days.
• Email address: retained until you request deletion (see Your rights below).

What we do not do

• We do not sell your data to any third party.
• We do not share your email with advertisers.
• We do not use your business data to train AI models or sell it to data brokers.

Cookies

We use minimal cookies: session state and security tokens only. We do not use third-party tracking cookies or advertising cookies.

Your rights

You can request deletion of your email address or any personal data we hold at any time. Email hello@citation.so with “Data deletion request” in the subject line and we will process it within 30 days.

Changes to this policy

We will update the “last updated” date at the top when we make material changes. Continued use of Citation after changes constitutes acceptance of the updated policy.