1. Introduction
Cited LLC ("Cited," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at cited.so, our application at app.cited.so, and our API services (collectively, the "Service").
By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.
Data Controller:
Cited LLC
30 N Gould St Ste N
Sheridan, WY 82801, USA
Email: support@cited.so
2. Information We Collect
We collect information in several ways to provide and improve our Service:
2.1 Account Information
When you create an account, we collect:
- Email address
- Full name
- Company name (optional)
- Password (stored securely hashed)
2.2 Business & Website Data
During onboarding and use of the Service, we collect:
- Website URL and business description
- Target audiences and market segments
- Competitor URLs and names
- Sitemap URL and blog address
- Top-performing articles on your website
- Language and country preferences
2.3 Content Preferences
To customize your content generation experience, we collect:
- Article style and formatting preferences
- Brand colors and visual preferences
- Image generation style preferences
- Custom instructions and guidelines for AI content generation
- Internal linking preferences
- Auto-publish settings
2.4 Usage Data
We automatically collect information about your use of the Service:
- Articles generated and published
- Keywords researched and selected
- API usage and costs incurred
- Content calendar scheduling data
- Integration connections and webhook deliveries
2.5 Technical Data
We collect technical information including:
- IP address
- Browser type and version
- Device type and operating system
- Access times and dates
- Pages viewed and features used
- Referring URLs
2.6 Payment Information
Payment processing is handled by Stripe. We do not store your full credit card numbers. We receive and store:
- Last four digits of your payment method
- Payment method type (e.g., card, bank account)
- Billing address
- Subscription status and history
- Invoice records
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Service Provision
- To create and manage your account
- To generate AI-powered content tailored to your business
- To conduct keyword research and SEO analysis
- To publish content to your connected platforms
- To process payments and manage subscriptions
3.2 Service Improvement
- To analyze usage patterns and optimize the Service
- To develop new features and functionality
- To improve AI content quality and relevance
- To conduct research and analytics
3.3 Communication
- To send service-related notifications and updates
- To respond to your inquiries and support requests
- To send marketing communications (with your consent)
- To notify you of changes to our policies
3.4 Security & Fraud Prevention
- To detect and prevent fraudulent activity
- To enforce our Terms of Use
- To protect the security and integrity of the Service
- To comply with legal obligations
5. Third-Party Integrations
Our Service allows you to connect with third-party platforms:
5.1 CMS & Publishing Platforms
When you connect WordPress, Webflow, Shopify, Notion, Wix, Framer, Ghost, or other platforms, we access only the permissions necessary to publish content on your behalf. We do not access or store credentials beyond what is required for integration.
5.2 Google Search Console
If you connect Google Search Console, we access your search performance data and keywords to improve our keyword research and content recommendations. You can disconnect this integration at any time.
5.3 Webhook Integrations
Custom webhook integrations send article data to endpoints you configure. We use HMAC-SHA256 signatures to secure webhook payloads. You are responsible for the security of your webhook endpoints.
6. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption: Data is encrypted in transit using TLS and at rest where applicable
- Authentication: Secure password hashing and session management via Supabase
- Access Control: Row-level security policies ensure users can only access their own data
- API Security: API keys are stored as hashes; webhook payloads are signed with HMAC-SHA256
- Audit Logging: Security events are logged for monitoring and forensic analysis
- Infrastructure: Hosted on enterprise-grade cloud infrastructure with regular security updates
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:
- Account Data: Retained while your account is active and for a reasonable period thereafter
- Generated Content: Retained as long as your account is active; you may delete articles at any time
- Usage Data: Retained for analytics and improvement purposes, typically for 24 months
- Payment Records: Retained as required by tax and accounting regulations
- Audit Logs: Retained for security and compliance purposes
Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to certain processing of your information
- Restriction: Request restriction of processing in certain circumstances
- Withdrawal of Consent: Where processing is based on consent, withdraw your consent at any time
To exercise these rights, please contact us at support@cited.so. We will respond to your request within 30 days.
For EU/EEA Users: If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.
10. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us at support@cited.so and we will take steps to delete such information.
11. International Users
Cited is based in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers are located.
By using the Service, you consent to the transfer of your information to the United States and other jurisdictions that may have different data protection laws than your country of residence.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated Privacy Policy on this page
- Updating the "Last Updated" date at the top of this page
- Sending you an email notification for significant changes
Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: