Legal

Privacy Policy

Last updated: June 20, 2026
Starter draft. This is a template for review — not legal advice. Have counsel confirm it reflects your actual data practices and the laws that apply to you (e.g. GDPR, CCPA) before launch.

This Privacy Policy explains how CiteForged Ltd ("CiteForged", "we", "us") collects, uses, and shares information when you use our Answer Engine Optimization (AEO) platform (the "Service"). CiteForged Ltd is the data controller for personal data processed through the Service.

Information we collect

  • Account information — name, email, and billing details you provide when you sign up or join the waitlist.
  • Sites and inputs you submit — the URLs, domains, and catalog data you ask us to analyze, and the prompts/questions tracked for your project.
  • Usage data — logs, scan history, and product analytics that help us operate and improve the Service.
  • Cookies — a small number of cookies/local-storage entries for sign-in and preferences (such as light/dark theme).

How we use information

  • To provide the Service: run scans, analyze competitors, and generate draft content for your review.
  • To bill you, support you, and send service communications.
  • To secure, debug, and improve the Service.

AI answer engines and third-party processors

To measure citations and generate content, we send your tracked prompts, target URLs, and related inputs to third-party AI and search providers — including OpenAI, Perplexity, Google, xAI, Anthropic, and SerpAPI — and to infrastructure providers for hosting, email, and payments. These providers process data under their own terms; we share only what is needed to perform the requested analysis or generation. Card payments are processed by Stripe, which handles your card details directly — we never receive or store your full card number. We do not sell your personal information.

Legal basis for processing (EEA / UK)

Where the GDPR or UK GDPR applies, we process personal data on these bases: to perform our contract with you (providing the Service and billing); our legitimate interests in operating, securing, and improving the Service; your consent where we ask for it; and to meet legal obligations. You may withdraw consent at any time.

International data transfers

We and our processors operate in or use infrastructure in the United States and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. Contact us for details.

Data retention

We retain account and project data for as long as your account is active and as needed to provide the Service, then delete or anonymize it within a reasonable period, subject to legal and accounting requirements.

Security

We use technical and organizational measures to protect your data, including encryption in transit and isolation between client workspaces. See our Security page for details.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. To exercise them, email hello@citeforged.com.

Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their data.

Changes

We may update this policy; material changes will be posted here with a revised "last updated" date.

Contact

Privacy questions? Email hello@citeforged.com.