Placeholder. The final privacy policy is being prepared to comply with GDPR, Schrems II, and DDG. Headline promises below reflect how we already operate.
What we collect
- Account: your email, hashed password (if you set one), name, company, and chosen plan.
- Tracking config: the domain, brand spellings, and prompts you choose to monitor.
- Scan data: prompts we send and answers we receive from the AI-search platforms we query on your behalf.
- Operational logs: login attempts, session IDs, IP address at login time—used for rate-limiting and fraud prevention only.
What we don’t collect
- Behavioral analytics or ad-tech trackers. No Google Analytics, no Meta Pixel, no Mixpanel.
- Third-party JS is avoided everywhere we can.
Where data lives
On a Hetzner server in Germany (Falkenstein). Emails are sent via Resend (EU region). Payments are processed by Stripe.
Who sees it
- You: always.
- Our AI vendors (OpenAI, Anthropic, Google, Perplexity, SerpAPI): only the prompts you’ve chosen to run—they don’t see your account data or other customers.
- Nobody else. No data selling, no sharing for marketing.
Your rights (GDPR)
You can request a full export or complete deletion of your data at any time—reply to any email from us or write to hey@joincited.ai.
Controller
Digital Domination LLC—see Contact for how to reach us.