Privacy Policy

Last updated: May 16, 2026

1. Introduction

Citeli ("we," "us," or "our") operates the Citeli AI Visibility & Marketing platform at citeli.io. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

By using Citeli, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information: When you sign up, we collect your name, email address, company name, website URL, industry, and deployment preferences.

Usage Data: We automatically collect data about how you use the platform — page views, feature interactions, scan history, and visibility scores.

AI Scan Data: When you run an AI visibility scan, we send your brand name and prompts to third-party AI providers (OpenAI, Google, Anthropic, Perplexity). We log the results and API usage for billing and analytics purposes.

Payment Information: We use LemonSqueezy to process payments. We do not store credit card numbers — all payment data is handled by LemonSqueezy under their privacy policy.

Cookies: We use essential cookies for authentication (via Supabase) and analytics cookies to understand platform usage. You can disable non-essential cookies in your browser.

3. How We Use Your Information

We use your information to:

  • Provide and improve our AI visibility monitoring service
  • Run AI brand mention scans across ChatGPT, Gemini, Perplexity, Claude, and other models
  • Send weekly visibility reports and trial expiry notifications via email
  • Process subscription payments and manage billing through LemonSqueezy
  • Provide customer support and respond to your inquiries
  • Analyze platform usage to improve features and performance
  • Comply with legal obligations

4. AI API Data Sharing

To provide AI visibility scanning, we send your brand name, website description, and generated prompts to the following third-party AI providers:

  • OpenAI — ChatGPT (gpt-4o-mini, gpt-4o)
  • Google — Gemini (gemini-1.5-flash)
  • Anthropic — Claude (claude-3-5-haiku)
  • Perplexity AI — Sonar models

These providers process your data under their own privacy policies. We recommend reviewing each provider's policy. We do not share personally identifiable information (PII) with AI models — only brand names, URLs, and business descriptions you provide.

5. Data Retention

We retain your account data for as long as your account is active. Scan results and visibility scores are retained for 12 months. API usage logs are retained for 90 days for billing and debugging purposes.

If you delete your account, all your data is permanently removed from our systems within 30 days, except where required by law for tax or compliance records.

6. Data Security

We implement industry-standard security measures to protect your data:

  • All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
  • Authentication is managed by Supabase with row-level security
  • Database access is restricted to server-side only — never exposed to the browser
  • API keys are stored securely and never logged

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions to protect your information.

7. Your GDPR Rights (EEA/UK Users)

If you are in the European Economic Area or United Kingdom, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Portability: Receive your data in a portable format
  • Right to Object: Object to processing of your data for marketing purposes
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at hello@citeli.io. We will respond within 30 days.

8. Third-Party Services

Our platform uses the following third-party services. We encourage you to review their privacy policies:

  • Supabase — Authentication and database hosting
  • LemonSqueezy — Payment processing and subscription management
  • Resend — Transactional email delivery
  • Vercel — Platform hosting and edge infrastructure
  • Upstash — Background job queue (Redis)

9. Children's Privacy

Citeli is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the platform. Your continued use of Citeli after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: hello@citeli.io

Company: Citeli

Website: https://citeli.io