Skip to content

AI answers are simulated until you add engine API keys.

Citerra
Log in
Menu
How it worksPricingFree check

Privacy

Privacy policy

Template last updated 1 November 2026. Replace the controller details before you launch. This is not legal advice.

Who is responsible

The controller is the company operating Citerra (“we”). Put the legal name, address, and a privacy contact such as privacy@citerra.io here. If you appoint an EU representative or a data protection officer, name them here.

What we collect

  • Account email, and the magic-link token used to sign you in.
  • Product name, URL, category, and up to three competitors.
  • The buyer questions you save, the raw engine answers, brands we extract, and cited URLs.
  • Billing identifiers from Stripe: customer id, subscription id, plan, and status. We do not store full card numbers.
  • A salted hash of the IP address for rate limits on the free check and sign-in emails.
  • The email address entered to unlock a public score, and the score itself once it is unlocked.

Why we use it

We process account, product, and billing data to perform the contract: running checks and sending the weekly report. Rate-limit hashes and security logs are a legitimate interest in keeping the service from being abused. We do not send marketing mail. The weekly report is part of the product.

Processors

Depending on which keys you configure, data is processed by Supabase (database and authentication), Stripe (payments), Resend (email), OpenAI, Perplexity, Google (Gemini), and Anthropic. Buyer questions are sent to the engines you enable. Their terms and transfer safeguards apply. List the regions you actually use before launch.

Retention

Account data stays until you delete the account. Public checks are deleted after 90 days. Rate-limit rows expire with their window. Engine answers stay with the account so the trend chart has a history. Download a JSON export from Billing before you delete anything.

Your rights

If the GDPR applies, you can ask for access, correction, erasure, restriction, and a portable copy, and you can object to processing based on legitimate interests. Use the export and delete controls in Billing, or email the privacy contact. You can also complain to your local supervisory authority.

Cookies

We use a first-party session cookie after you sign in. Supabase may set its own authentication cookies when that mode is enabled. We do not use advertising cookies.

Children

Citerra is for people setting up a business. It is not directed at children.