Legal
Privacy Policy
Last updated September 7, 2026.
What we collect
- Account data: email address, company name, plan, login timestamps.
- Usage data: brands, domains, prompts, competitors, results returned by AI engines, run history, API calls.
- Free checker: the domain you enter, your IP address (for rate limiting, kept 30 days) and an optional email.
- Free site scan: the domain you enter, your IP address (for rate limiting, kept 30 days) and the result of the technical checks. We fetch only publicly available URLs of that domain and do not store the page content.
- Payments: handled by Stripe. We store your Stripe customer id and subscription status, never card numbers.
- Technical logs: IP, user agent and request paths for security, kept 30 days.
Why
To provide the Service (contract), to secure it and prevent abuse (legitimate interest), to bill you (contract, legal obligation) and to send service emails such as login codes and run summaries (contract). Marketing emails only with your consent; every one has an unsubscribe link.
Processors
OpenRouter (routing to OpenAI, Google, Perplexity, Anthropic, xAI) for prompts; Stripe for payments; our hosting provider in the EU; an email delivery provider for transactional mail. Prompts you submit are sent to those AI providers under their API terms; do not include personal data in prompts.
Retention
Account and usage data for as long as the account exists plus 30 days. Free-checker reports for 90 days. Invoices for the period required by tax law.
Your rights
Access, rectification, erasure, portability, restriction and objection under the GDPR. Email promptowy@gmail.com. You can complain to your local data protection authority.
Cookies
One session cookie after login. No advertising or third-party analytics cookies.
Controller
The operator of CiteViz, contact promptowy@gmail.com. Full legal identity is shown on invoices.