1. Introduction
Citeplex ("we", "our", or "us") runs the citeplex.io website. This page explains what data we collect, how we use it, and how we keep it safe.
We follow the GDPR, CCPA, and other data protection laws to protect your personal data.
2. Information We Collect
2.1 Information You Provide
- Account information: name, email address, password
- Domain and brand information you submit for tracking
- Payment information processed through our payment provider (Polar.sh)
- Communications you send to us
2.2 Automatically Collected Information
- Usage data: pages visited, features used, timestamps
- Device data: browser type, operating system, IP address
- Cookies and similar tracking technologies
3. How We Use Your Information
- To run our AI visibility tracking service
- To handle your payments
- To send you emails (welcome, password reset, billing)
- To make our platform better
- To follow the law
4. Legal Basis (GDPR)
- Contract: We need your data to give you the service you signed up for
- Our interest: We use data to improve our product and stop fraud
- Your consent: We ask before using analytics or marketing cookies
- Law: Sometimes the law requires us to keep certain data
5. Cookies
We use the following types of cookies:
5.1 Essential Cookies (Always Active)
These cookies are strictly necessary for the platform to function and cannot be disabled.
| Cookie | Purpose | Duration |
|---|
| sb-*-auth-token | Supabase authentication session | 1 year |
| citeplex_cookie_consent | Stores your cookie preference | Persistent |
5.2 Analytics
Google Analytics 4 only loads if you click "Accept All" on the cookie banner. Ahrefs Web Analytics runs on our pages for traffic data. It may set cookies as described in Ahrefs' policy.
| Cookie | Purpose | Duration |
|---|
| _ga, _ga_* | Google Analytics 4 | 2 years |
| Ahrefs (script) | Ahrefs Web Analytics (analytics.ahrefs.com) | Per Ahrefs policy |
5.3 Managing Cookies
You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the website footer, which will re-display the consent banner. You can also manage cookies through your browser settings.
6. Data Sharing
We do not sell your personal data. We may share data with:
- Supabase: Database and authentication hosting
- Polar.sh: Payment processing
- Resend: Transactional email delivery
- Vercel: Application hosting
- AI Providers: To perform visibility scans (no personal data is shared with AI engines)
7. Data Transfers
Some of our tools (Supabase, Vercel, Polar.sh, Resend) are based in the US. When data leaves the EU, we protect it with:
- Standard Contractual Clauses (SCCs) approved by the EU
- Providers with SOC 2 security certifications
- Data processing agreements with all our partners
8. Data Retention
We keep your data while your account is active. If you delete your account, we remove your data within 30 days, unless the law says we must keep it.
9. Your Rights
Under GDPR and applicable laws, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise these rights, contact us at privacy@citeplex.io.
10. Children's Privacy
Citeplex is not for anyone under 16. We do not collect data from children. If you think a child shared data with us, please contact us at privacy@citeplex.io and we will delete it right away.
11. Security
We use encryption (TLS), secure login via Supabase Auth, and regular security checks to keep your data safe.
12. Changes to This Policy
We may update this page. If we make big changes, we will let you know by email or a notice on our site.
13. Contact Us
If you have questions about this Privacy Policy, contact us at: privacy@citeplex.io