Privacy policy — what we collect and why
We keep very little, and we say what.
What we collect
- Account: your email, a password hash (or your Google account identifier if you sign in with Google), and when you signed up.
- Projects: the domains you add, the category, competitors and questions you set, and the scan results we produce for them.
- Billing: handled by Stripe. We store your Stripe customer ID, plan and subscription status — never card numbers.
- Usage: privacy-friendly page analytics (Vercel Analytics, no cookies, no cross-site tracking) and server logs with IP addresses kept for abuse prevention and rate limiting.
- Email you send us: kept as long as needed to answer you.
What we do with it
Run your scans, show you results, bill you, email you about your account and — if you opt in — digests when your numbers move. We don’t sell data, rent lists, or show ads. We don’t use your project data to train models.
Who else sees it
Processors we rely on: Supabase (database and auth, EU/US), Vercel (hosting and analytics), Stripe (payments), OpenRouter and the AI engines behind it (the buyer questions are sent to them; your domain appears in the questions), Resend (transactional email), Cloudflare Turnstile (bot checks). Each only receives what it needs for its job.
Public pages
Leaderboards and any report you choose to share are public by design. They contain only information derived from public web pages and engine answers — product names, domains, cited URLs and rates. Anyone can ask for a report to be removed: info@citegraph.app.
Cookies
Only the session cookie that keeps you signed in. No advertising or tracking cookies, which is why there’s no cookie banner.
Retention and deletion
Account and project data stays until you delete it or your account. Delete a project from its settings; to delete your account, email us and it’s gone within 7 days, Stripe records excepted where tax law requires retention. Server logs rotate within 30 days.
Your rights
Wherever you are, you can ask what we hold about you, get a copy, correct it, or have it deleted. Email info@citegraph.app — no forms, no hoops. If you’re in the EU/UK you can also complain to your local data authority.
Contact
Privacy questions: info@citegraph.app.