Privacy Policy

• Account details: your email, name (optional), and a password stored only as a salted hash. If you sign in with Google we receive your name and verified email.
• What you enter: your brand name, website, category, competitors, and the questions you track.
• Results: the answers and cited sources AI engines return for those questions.
• Free checks: the brand details you type, plus a one-way hash of your IP address that we use only to limit abuse. If you ask for the report by email we also keep that address.
• Billing: handled by Razorpay. We store your plan, status, and subscription ID, never your card number.
• Basic technical data: standard server logs (such as time and page) for security and debugging.

To run your scans and show your reports, to email what you asked for (reports, weekly digests, password resets, receipts), to prevent abuse, to provide support, and to improve the product. We don't sell your data and we don't run ad trackers.

The follow-up emails after a free report include an unsubscribe link, and you can turn off the weekly digest in settings.

We use a small set of providers to deliver Citeably:

• AI providers (such as Anthropic, Google, OpenAI, Perplexity) receive the questions we ask about your category. Those questions are written about the market, not about you. Don't put personal information in prompts.
• Razorpay processes payments.
• Google handles sign-in if you choose “Continue with Google”.
• Resend sends our emails.
• Turso hosts our database, and our app runs on a cloud hosting platform.

These providers process data on our behalf under their own terms and privacy policies.

A free-check report is unlisted: it isn't indexed by search engines, but anyone who has the link can open it. Share it only with people you're happy to see it. Reports inside your account are visible only to you.

We keep your account data while your account is active. You can delete a brand and its history in the app at any time. To delete your whole account, or the email tied to a free report, write to us and we'll do it. Some billing records may be kept longer where the law requires.

We use one essential cookie to keep you signed in, and a short-lived one during Google sign-in. We don't use advertising or cross-site tracking cookies.

You can ask us to show you, correct, export, or delete the personal data we hold about you, or to stop emailing you. Email hello@citeably.app from the address on your account and we'll respond promptly. Depending on where you live you may have additional rights, and we'll honour them.

Passwords are hashed, sessions use secure cookies, reset links are single-use and expire in an hour, and traffic is encrypted. No system is perfectly secure, so if you think your account was accessed without permission, tell us right away.

Citeably is for businesses and isn't meant for people under 18. We don't knowingly collect data from children.

If we change this policy in a way that matters, we'll tell you by email or in the app. Questions: hello@citeably.app. See also our Terms of Service.