Privacy Policy

1. Who we are

citelity (“citelity”, “we”, “us”) is an online service operated by a sole proprietor established in Argentina. For any question about this policy or your data, contact us at hello@citelity.com. We are the controller of the personal information described here, except where a provider named in section 8 acts as an independent controller (for example, our payment provider).

2. The short version

• You sign in with Google. With your permission we read your Google Search Console and Google Analytics 4 data in read-only mode to show you where your site ranks, where it is cited by AI answer engines, and what to fix.
• We use that data only to provide citelity to you. We do not sell it, we do not use it for advertising, and we do not use it to train AI models.
• Your Google access tokens are stored encrypted.
• You can delete your account and all of its data from Settings at any time, and revoke our access from your Google account.

3. Information we collect

Account information. When you sign in with Google we receive your name, email address and a Google account identifier. We use the identifier as your account ID.

Google Search Console data (scope: webmasters.readonly). For the sites you connect: the search queries your pages appear for, the pages that rank for them, and their clicks, impressions, click-through rate and average position; and, for pages you create or update with citelity, their indexing status from the URL Inspection API.

Google Analytics 4 data (scope: analytics.readonly). For the property you choose: aggregated traffic figures by source and page — sessions, engagement and key-event counts. We do not receive data that identifies individual visitors to your site.

Information you enter. Site domain, brand name and spelling variants, site description, Analytics property ID, author profile (name, credentials, LinkedIn and X profile links), the prompts you choose to track, keywords you type, and email preferences.

Content you create with citelity. Articles, page analyses and suggested edits, internal-link suggestions, and X threads generated at your request. When you ask us to analyse a page, we fetch the publicly available content of that URL.

AI visibility scans. The prompts that were run, the answers AI engines returned, which sources they cited, and whether your site or brand was mentioned.

Billing information. Payments are processed by our payment provider (section 8). We receive your subscription status, plan, billing period and a customer reference. We never receive or store your card details.

Usage records. How many articles, updates and scans your plan has used, for metering and support.

Product usage events. Which features you use and when — for example that a site was added, a scan finished or a fix was generated — without the content itself (never your prompts, keywords, pages or articles). We use them to support you and improve citelity, and send them to Google Analytics 4 under a pseudonymous identifier, never your email address.

Technical information. Server logs (including IP address, request path and time) kept by our hosting provider for security and troubleshooting.

Free tools (no account needed). The URL or text you submit, and — for the emailed site report — the email address you enter. To enforce daily limits we store a keyed, one-way hash of your IP address or email, not the address itself. A security check provided by Cloudflare Turnstile may run to block automated abuse.

4. How we use Google user data

This section applies to all information we receive through Google APIs.

• We request read-only access to Search Console and Analytics. citelity cannot change anything in your Google accounts.
• We use Google user data only to provide and improve the user-facing features of citelity that you see in your dashboard and emails: keyword and ranking reports, page analyses, AI-visibility tracking, recommendations, before-and-after measurements, and your weekly digest.
• We do not sell Google user data, do not use it for advertising, and do not use it to train, develop or improve generalised AI or machine-learning models.
• We transfer Google user data only to the service providers listed in section 8, only as needed to provide those features, and only under terms that bind them to confidentiality. For example, search queries from your Search Console may be sent to an AI provider to produce your analysis, or used as prompts in an AI-visibility scan.
• No person at citelity reads your Google data unless you ask us to for support, it is needed for security or to comply with the law, or the data has been aggregated and anonymised for internal operations.

citelity’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we use information

We use the information above to:

• provide the service: reports, analyses, content generation, scans, alerts and digests;
• keep your account secure, prevent abuse of paid and free features, and enforce plan limits;
• process subscriptions and answer billing questions;
• send service emails (security, billing, account changes) and the product emails you can switch off in Settings;
• understand, in aggregate, how the service is used and where it fails, so we can fix it;
• comply with legal obligations.

Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you (providing the service you signed up for), legitimate interests (security, abuse prevention, improving the service), consent (marketing emails, which you can withdraw at any time), and legal obligation.

We send marketing emails only to people who have explicitly confirmed they want them. Requesting a free report does not subscribe you to anything.

6. AI processing

citelity uses third-party AI models to analyse data and generate text. When you use a feature that relies on them, the relevant inputs — for example your keywords, the content of the page being analysed, research results, and the author details you provided — are sent to the AI provider to produce the result. We use these providers only through their business APIs under terms under which your inputs are not used to train their models.

AI output can be wrong. Everything citelity generates is a draft for you to review before you publish or rely on it (see our Terms of Service).

7. Cookies

We use only the cookies needed to run the service: a session cookie that keeps you signed in, and security cookies set during sign-in. The free tools may use Cloudflare Turnstile, which can set a cookie to tell people from bots. We do not use advertising or cross-site tracking cookies.

8. Who we share information with

We do not sell or rent personal information. We share it only with the service providers that run citelity on our behalf, each for the purpose listed:

Dodo Payments is the Merchant of Record for purchases: it sells the subscription to you, handles payment, tax and invoicing, and processes your payment information under its own privacy policy.

We may also disclose information if required by law or a valid legal request, to protect the rights, safety or property of citelity or others, or as part of a merger, acquisition or sale of the service — in which case this policy continues to apply to your information, and we will tell you before it becomes subject to a different policy.

9. How long we keep information

When you delete your account, your account and everything under it are deleted immediately and our access to your Google account is revoked. We keep a minimal record that an account was deleted, with its internal identifier and no other data, for security and audit. Invoices and payment records held by Dodo Payments are kept by it as required by law.

10. Security

Data is encrypted in transit. Google access and refresh tokens are encrypted at rest with a key stored separately from the database. Access to production systems is restricted. No system is perfectly secure; if a breach affects your personal information, we will notify you and the relevant authorities as required by law.

11. International transfers

We operate from Argentina, and our providers process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the providers’ standard contractual clauses.

12. Your rights and choices

• Delete your account at any time: Settings → Delete account. This removes your data as described in section 9.
• Revoke Google access at any time from your Google Account’s third-party access settings. citelity stops working for your sites until you reconnect.
• Email preferences: switch the weekly digest and citation alerts off in Settings or with the link in each email.
• Access, correction, portability, objection and restriction: email hello@citelity.com. We will respond within 30 days, and may need to verify your identity first.

Argentina. Under Law No. 25,326 you may access your personal data free of charge at intervals of no less than six months, unless you have a legitimate interest in doing so sooner, and you may request its correction or deletion. The Agency for Access to Public Information (AAIP), as the supervisory authority under Law No. 25,326, handles complaints and claims about breaches of personal data protection rules.

EU, EEA and UK. You may also lodge a complaint with your local data protection authority.

California. We do not sell personal information and do not share it for cross-context behavioural advertising.

13. Children

citelity is a business service and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

14. Changes to this policy

We may update this policy as the service changes. For material changes we will notify account holders by email before the change takes effect. The effective date at the top shows when it was last updated.

15. Contact

hello@citelity.com