1. Introduction

Welcome to Citable ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website getcitable.com and use our services.

By using our service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register for an account, we may collect:

Name and email address
Company name and website URL
Payment information (processed securely through Stripe)
Account credentials (passwords are encrypted)

2.2 Google Sign-In Data

If you choose to sign in or register using Google Sign-In ("Continue with Google"), we receive the following information from your Google account:

Name - Your display name from your Google profile
Email address - Your primary Google email address
Google account identifier - A unique ID used to link your Google account to your Citable account

We only request the minimum scopes necessary (profile and email). We do not access your Google contacts, calendar, drive, or any other Google services through this sign-in. Your Google account password is never shared with or stored by Citable. Google Sign-In data is used solely for account authentication and creating your Citable account.

2.3 Usage Data

We automatically collect certain information when you visit our service:

IP address and browser type
Pages visited and time spent on pages
Operating system and device information
Referral source and exit pages

2.4 Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service. We use:

Essential cookies for authentication and security
Analytics cookies via Google Analytics to understand usage patterns
Preference cookies to remember your settings

3. How We Use Your Information

We use the collected information for various purposes:

To provide and maintain our service
To process your transactions and manage your account
To send you notifications about your account and service updates
To provide customer support
To analyze usage and improve our service
To detect, prevent, and address technical issues
To send marketing communications (you can opt-out anytime)

3.1 Use of Company Logos and Brand Assets

By using our platform, you grant Citable permission to display your company name and logo on our website, marketing materials, case studies, and promotional content to showcase our client relationships and demonstrate our service offerings. This includes but is not limited to:

Displaying your company logo on our website's client showcase or customer page
Mentioning your company name as a client or user of our service
Using your logo in marketing materials, presentations, and promotional content
Featuring your company in case studies or success stories (with your approval for detailed information)

If you do not wish for your company logo or name to be used in this manner, please contact us at [email protected] to opt out. We will remove your branding from public-facing materials within 30 days of your request.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

4.1 Service Providers

Stripe - Payment processing
Google Analytics - Usage analytics
Neon Database - Data storage
OpenAI, Anthropic, Google - AI analysis services

4.2 Google API Services - Limited Use Disclosure

Citable's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only use Google user data (name, email, account ID) to provide and improve user-facing features within Citable, specifically account authentication and identification.
We do not transfer Google user data to third parties except as necessary to provide our service, for security purposes, or to comply with applicable laws.
We do not use Google user data for serving advertisements, retargeting, or interest-based advertising.
We do not allow humans to read Google user data unless the user has given affirmative consent, it is necessary for security purposes, or required by law.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court order or government agency).

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

Data encryption in transit (HTTPS/TLS)
Encrypted password storage (bcrypt)
Secure authentication with JWT tokens
Regular security audits and updates
Access controls and monitoring

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Your Data Rights

You have the following rights regarding your personal data:

Access - Request copies of your personal data
Rectification - Request correction of inaccurate data
Erasure - Request deletion of your personal data
Data Portability - Request transfer of your data
Withdraw Consent - Opt-out of marketing communications

To exercise these rights, please contact us at [email protected]

7. Data Retention

We retain your personal information only for as long as necessary to provide our services and comply with legal obligations. When you close your account, we will delete or anonymize your personal information within 90 days, unless we are required to retain it for legal purposes.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Children's Privacy

Our service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to say no to the sale of personal information
Right to access your personal information
Right to equal service and price

11. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), we process your personal data under the following lawful bases:

Contract performance - to provide our services
Legitimate interests - to improve and secure our service
Consent - for marketing communications
Legal obligations - to comply with laws

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: [email protected]

Website: https://getcitable.com