Privacy Policy

1. Information we collect

• Account information: your email address and a password, which we store only as a one-way hash.
• Brand information you enter: brand names, website addresses, categories and competitor names.
• Scan results: the questions we ask AI engines for you, their answers, the sources they cite, and the scores we calculate.
• Billing information: handled by Stripe. We receive your subscription status and a Stripe customer ID. We never see or store your full card number.
• Technical information: your IP address, which we use to limit free scans and prevent abuse, and standard server logs.

2. How we use it

• To run scans, show your reports and re-check your brands on your plan's schedule.
• To send service emails: password resets and scan reports. We do not send marketing email without your consent.
• To bill your subscription through Stripe.
• To prevent abuse, keep the service secure and fix problems.

We do not sell your personal information, and we do not use it for advertising.

3. Service providers we share data with

We share only what each provider needs to do its job:

• AI providers (Anthropic, Google, OpenAI and Perplexity, depending on which engines a scan uses): we send them the buyer questions and, to detect competitors, the AI answers. These requests contain your brand's category and may contain brand and competitor names. They do not contain your email address.
• Stripe: payments, subscriptions and, where it acts as merchant of record, sales tax.
• Railway: hosting for the application and its database.
• Resend: delivery of service emails.

Each provider processes data under its own terms and privacy policy. We may also disclose information if the law requires it, or to protect our rights or the safety of others.

4. Websites we check

To score site readiness, we request public pages of the website you enter: its homepage, robots.txt and llms.txt. We read only what any visitor can see.

5. Cookies

We use one essential cookie to keep you logged in. We do not use advertising or analytics cookies. Stripe sets its own cookies on its checkout pages.

6. How long we keep data

We keep your account and scan history while your account is open so you can see trends over time. If you ask us to delete your account, we delete your account, brands and scans within 30 days, except billing records we must keep for tax and accounting. Free scans run without an account are kept so their report links keep working; contact us to have one removed.

7. Your rights

You can ask us to access, correct, export or delete your personal information by emailing support@citefinder.xyz. Depending on where you live (for example California or the European Union), you may have further rights under local law, and we will honor them. We will not treat you differently for exercising them.

8. Security

Passwords are hashed, connections use HTTPS, and access to production systems is restricted. No system is perfectly secure, so we cannot guarantee absolute security.

9. Children

CiteFinder is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

10. Changes and contact

If we make material changes to this policy, we will update the effective date above and, for significant changes, notify account holders by email. Questions: support@citefinder.xyz.