Privacy Policy

CiteCraft (“we”, “us”) operates citecraft.ai, a service that monitors how AI assistants such as ChatGPT, Claude, Perplexity, Gemini, and Google AI mention and cite brands. This policy explains what information we collect, why, and the choices you have.

Account information. Your name, email address, and a hashed password when you create an account. We never store passwords in plain text.

Brand configuration. The brand names, domains, aliases, social links, competitors, and prompts you add so we can run scans for you.

Scan results. The answers AI platforms return to your prompts, and the analysis we derive from them (mentions, citations, sentiment). Raw answers are kept for 90 days; aggregated statistics are kept for as long as your account exists.

Billing information. Payments are processed by Stripe. We store your subscription status and plan, not your card details. Those go directly to Stripe under Stripe's privacy policy.

Technical logs. Standard server logs (IP address, request time, user agent) kept for security and troubleshooting.

To run the service you asked for: executing scans against AI platforms, analyzing results, showing you dashboards, processing subscriptions, and responding to support requests. We also use aggregate, non-identifying usage data to improve the product.

Your prompts are sent to the AI platforms we scan (OpenAI, Anthropic, Perplexity, Google, and DataForSEO for Google AI results). That is the core of the service. Payment data is handled by Stripe. Our servers are hosted with our infrastructure provider in a datacenter environment.

We do not sell your personal information. We do not share your brand configuration or scan results with other customers or advertisers.

We use browser local storage to keep you signed in (an authentication token and your selected brand). We do not run third-party advertising trackers.

Raw AI answers are deleted automatically after 90 days. Account and aggregate data are kept while your account is active. If you cancel, your data is retained so you can return; if you want it permanently deleted, email hello@citecraft.ai and we will erase your account and associated data within 30 days.

You can access and update your account details in the dashboard at any time. You may request a copy of your data, correction, or deletion by contacting us. If you are in the EU/UK, these rights are backed by the GDPR; we act as the data controller for your account data.

All traffic is encrypted with TLS. Passwords are hashed with bcrypt. Access to production systems is restricted and key-based. No method of transmission or storage is 100% secure, but we work to protect your data with industry-standard practices.

If we materially change this policy we will update the date above and, for significant changes, notify you by email. Questions? Contact hello@citecraft.ai.