Privacy Policy

This Privacy Policy explains how Cited Analytics ("Cited", "we", "us") collects, uses, and shares information in connection with our AI search-visibility analytics service and websites (the "Service"). We are based in California, USA. By using the Service, you agree to this Policy.

Information we collect

• Account information: name, email, organization name, and a hashed password when you create an account.
• Brand and tracking data: the brands, products, competitors, prompts, and settings you configure.
• Free-check submissions: the brand, category, website, and email you provide to our “Am I Ranked?” tool.
• Payment information: processed by our payment processor (Stripe). We receive limited details such as your plan, status, and the last four digits and brand of your card. We do not store full card numbers.
• Usage and device data: log data such as IP address, approximate location derived from it, browser and device type, pages viewed, and timestamps.
• Communications: messages you send us, such as support requests.

Sources of information

We collect information directly from you, automatically from your use of the Service, and from service providers such as our payment processor. We also collect publicly available AI and search outputs that reference the brands you track; those outputs are not personal information about you.

How we use information

• Provide, operate, secure, and improve the Service and generate your analytics and recommendations.
• Query third-party AI systems and search providers to collect and analyze how brands appear in AI answers.
• Authenticate you, process payments and subscriptions, and provide support.
• Prevent fraud and abuse (including rate-limiting the free check) and enforce our Terms.
• Send service, security, and, where permitted, marketing communications you can opt out of.
• Comply with legal obligations and protect our rights, users, and the public.

AI and third-party processing (subprocessors)

To operate the Service we share information with providers that process it on our behalf, under contracts that limit their use of it. These include, among others: AI providers (such as Anthropic) for analysis and recommendations; AI and search data sources (such as Perplexity and Google/DataForSEO for Google AI Overviews) and browser-automation providers used for collection; our hosting and database providers; Stripe for payments; email delivery providers; and source-control and CI providers. We do not sell or share your personal information for cross-context behavioral advertising.

How we disclose information

• Service providers that perform functions on our behalf, as described above.
• Legal and safety: when required by law or to protect the rights, safety, or property of $Cited, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your direction or consent.

Cookies

We use a strictly-necessary cookie to keep you signed in, and minimal analytics to understand usage. We do not use third-party advertising cookies. Where required, we honor recognized opt-out preference signals such as Global Privacy Control (GPC).

Data retention

We retain account and tracking data while your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. We retain free-check submissions for a limited period to operate and protect that tool. You may request deletion as described below.

Security

We use reasonable technical and organizational measures, including password hashing and encrypted transport, to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended, gives you the rights below regarding the personal information we hold about you.

Rights

• Know and access: the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
• Delete personal information we collected from you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of sale or sharing: we do not sell your personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of.
• Limit use of sensitive personal information: we do not collect sensitive personal information beyond account login credentials, and we do not use it to infer characteristics or for purposes that would trigger this right.
• Non-discrimination: we will not discriminate against you for exercising these rights.

Categories collected in the last 12 months

Identifiers (such as name, email, IP address); commercial information (subscription and transaction records); internet or network activity (usage and log data); and approximate geolocation derived from IP address. We collect these from the sources and for the purposes described above, and disclose them to the service providers listed above.

How to submit a request

Email privacy@citedanalytics.com with your request. We will verify your identity, typically using the email associated with your account, before responding, and we will respond within the time required by law (generally 45 days, extendable as permitted). You may use an authorized agent to submit a request on your behalf, subject to verification. California’s "Shine the Light" law (Civil Code 1798.83): we do not share personal information with third parties for their own direct-marketing purposes.

Other US state privacy rights

Residents of some other US states may have similar rights to access, correct, delete, or obtain a copy of their personal information. You may exercise them by contacting privacy@citedanalytics.com, and we will respond consistent with applicable law.

International users and transfers

We and our providers may process information in the United States and other countries whose laws may differ from yours. Where required, we use appropriate safeguards for such transfers. If you are in a region with data-protection laws such as the GDPR, you may have additional rights, including to object to or restrict certain processing; contact privacy@citedanalytics.com to exercise them.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact privacy@citedanalytics.com and we will delete it.

Changes

We may update this Policy from time to time. Material changes will be posted here with an updated date, and where appropriate we will provide additional notice.

Contact

Questions or privacy requests? Email privacy@citedanalytics.com.