1. Introduction
Citeplex ("we", "our", or "us") operates the citeplex.io website and platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
2. Information We Collect
2.1 Information You Provide
- Account information: name, email address, password
- Domain and brand information you submit for tracking
- Payment information processed through our payment provider (Polar.sh)
- Communications you send to us
2.2 Automatically Collected Information
- Usage data: pages visited, features used, timestamps
- Device data: browser type, operating system, IP address
- Cookies and similar tracking technologies
3. How We Use Your Information
- To provide and maintain our AI search visibility tracking service
- To process your subscription and payments
- To send transactional emails (welcome, password reset, billing)
- To improve our platform and user experience
- To comply with legal obligations
4. Legal Basis for Processing (GDPR)
- Contractual necessity: To provide the service you signed up for
- Legitimate interest: To improve our service and prevent fraud
- Consent: For optional analytics and marketing cookies
- Legal obligation: To comply with applicable laws
5. Cookies
We use the following types of cookies:
5.1 Essential Cookies (Always Active)
These cookies are strictly necessary for the platform to function and cannot be disabled.
| Cookie | Purpose | Duration |
|---|
| sb-*-auth-token | Supabase authentication session | 1 year |
| citeplex_cookie_consent | Stores your cookie preference | Persistent |
5.2 Analytics
Google Analytics 4 loads only when you click "Accept All" on the cookie banner. Ahrefs Web Analytics is embedded in our pages for aggregate traffic and SEO insights; its script is served from Ahrefs and may set cookies or similar technologies per Ahrefs' policy.
| Cookie | Purpose | Duration |
|---|
| _ga, _ga_* | Google Analytics 4 | 2 years |
| Ahrefs (script) | Ahrefs Web Analytics (analytics.ahrefs.com) | Per Ahrefs policy |
5.3 Managing Cookies
You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the website footer, which will re-display the consent banner. You can also manage cookies through your browser settings.
6. Data Sharing
We do not sell your personal data. We may share data with:
- Supabase: Database and authentication hosting
- Polar.sh: Payment processing
- Resend: Transactional email delivery
- Vercel: Application hosting
- AI Providers: To perform visibility scans (no personal data is shared with AI engines)
7. International Data Transfers
Some of our third-party service providers (Supabase, Vercel, Polar.sh, Resend) are based in the United States. When your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission, which contractually obligate recipients to protect your data to EU standards
- Selecting providers that maintain SOC 2 compliance and equivalent security certifications
- Ensuring data processing agreements (DPAs) are in place with all sub-processors
8. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
9. Your Rights
Under GDPR and applicable laws, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise these rights, contact us at privacy@citeplex.io.
10. Children's Privacy
Citeplex is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@citeplex.io and we will promptly delete such information.
11. Security
We implement industry-standard security measures including encryption in transit (TLS), secure authentication via Supabase Auth, and regular security reviews to protect your data.
12. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or through a notice on our platform.
13. Contact Us
If you have questions about this Privacy Policy, contact us at: privacy@citeplex.io