Privacy Policy

Last updated October 1, 2026

Template notice: this policy describes the data handling of the demo codebase. Have qualified counsel review and adapt it to your actual practices and jurisdictions before launch.

Citeroot Labs, Inc. ("Citeroot", "we") respects your privacy. This policy explains what we collect, why, and the choices you have.

#What we collect

Account data. Name, email address, company (optional), a salted and hashed password, plan and timestamps.

Workspace data. Projects, domains, brand and competitor names, prompts and the results of audits you run.

Form submissions. Messages you send via the contact, demo, partner and careers forms, including the details you enter. Careers applications may include links to your work.

Newsletter. Your email address if you subscribe.

Technical data. IP address and request metadata are processed to operate and secure the Service (for example rate limiting and abuse prevention). Server logs may record requests for a limited period.

Free tools. URLs and domains you enter into the free tools are fetched once to produce a result and are not stored.

We do not run third-party advertising or analytics trackers on this site.

#How we use it

  • To provide, secure and improve the Service
  • To respond to enquiries and applications
  • To send service emails (for example password resets) and, if you opt in, the newsletter
  • To comply with legal obligations

Contract (providing the Service), legitimate interests (security, improving the Service), consent (newsletter), and legal obligation.

#Sharing

We use service providers to host the Service, send email and process payments (see Subprocessors). We do not sell personal data. We may disclose information if required by law or to protect rights and safety.

#Retention

Account data is kept while your account is active and deleted on request or when you delete your account, subject to legal obligations. Form submissions are kept for as long as needed to respond and for reasonable record-keeping. Newsletter addresses are kept until you unsubscribe.

#Security

We use encryption in transit, hashed passwords, access controls and logging. No system is perfectly secure; see our security page.

#Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing and to withdraw consent. Email privacy@citeroot.app. You can delete your account in Settings. You may also complain to your data protection authority.

#International transfers

Where data is transferred internationally we use appropriate safeguards such as standard contractual clauses.

#Children

The Service isn't directed to children under 16 and we don't knowingly collect their data.

#Cookies

See the Cookie Policy.

#Changes

We'll post updates here and, for material changes, notify account holders.

#Contact

Citeroot Labs, Inc., [Your street address] · privacy@citeroot.app