Privacy Policy

Effective date: October 25, 2026

1. Who we are

CitMark ("we", "us") operates citmark.com. For any privacy question or request: [email protected]. For security issues: [email protected].

2. What we collect

• Account data: your email, name (if you provide one), and workspace membership.
• Brand & measurement setup: the brands, domains, and questions you ask us to track.
• Measurement data: AI answers we collect when running checks, extracted citations, scores, and reports.
• Connection tokens (only if you connect Google or Shopify): stored encrypted — never in plain text, never in logs.
• Usage & security logs: logins, API calls, admin actions. Kept 90 days (security audit logs: 1 year).
• What we never collect: payment card details. Payments go through Creem, our merchant of record — card data never touches our systems.

Snapshot data sources

CitMark snapshots measure visibility from two kinds of sources only:

Public data (no authorization needed). Your site's public content (homepage, About and product pages, meta tags, structured data, sitemap and robots.txt — we respect robots.txt, rate-limit our requests, never bypass a login or paywall, store analysis summaries rather than full page text, and exclude personal profiles); your llms.txt file; AI mention and citation data from our own snapshot measurements; competitor sets identified from AI co-occurrence, public search and our public comparison pages; platform identification from public HTML markers; and your public pricing page.

Authorized data (only after you connect). Search Console search data (Google OAuth, read-only webmasters.readonly scope, used only for your own measurement); and Shopify store, product and order aggregates (merchant OAuth with minimum scopes, aggregates only — we never take customer personal details).

Retention. Attribute data is stored with your account and deleted when you delete your account. Search Console and Shopify credentials and connection records are deleted when you disconnect.

What we never collect. Data behind a login, end-customer personal information (names, emails, addresses, or personal parts of order details), data obtained by bypassing robots.txt, a login or a paywall, purchased data, WHOIS personal information, employee personal information, or recruitment-page signals. No new source is added without a separate decision.

Correction. Industry and category are inferred and can be wrong; you can correct them in one click on your report page. Willingness to pay is judged from proxy signals only; we do not invent a willingness score.

3. Why we use it, and the lawful basis

• To run the service: measurements, reports, and alerts — performance of the contract.
• To administer your account and billing — contract.
• To prevent fraud and abuse and keep the service secure — legitimate interest.
• To improve the product, using anonymized, aggregated data only — legitimate interest.

Where the GDPR applies, the lawful bases above refer to GDPR Art. 6.

4. How we protect it

Encryption in transit and at rest. OAuth tokens are encrypted before storage and never appear in logs. Every workspace is strictly isolated — your data is visible only inside your workspace. Employee access to personal data is logged and audited. We never sell your data, and we share it only with the service providers strictly necessary to run CitMark (hosting, email delivery), each bound by their own data-protection terms.

5. Where your data lives

Your data lives in Singapore. Your account, brand, measurement data, tokens, and logs are stored in our primary database in Singapore (Supabase) — no user data is stored in the United States. The website itself is served globally (GitHub Pages + Cloudflare edge network).

Our service providers handle specific tasks elsewhere, and only the data they need for that task:

• Email delivery — Resend (United States)
• Payment processing — Creem (United States)

Where the GDPR applies, transfers to these providers are protected by appropriate safeguards, including Standard Contractual Clauses. A full sub-processor list is published alongside our DPA.

6. How long we keep it

Account and workspace data: until you delete your account. Billing records: as long as tax law requires. Usage logs: 90 days; security audit logs: 1 year.

7. Your rights: export and deletion

• Export: download all your personal data as JSON from your account settings, anytime.
• Delete: delete your account and we remove your personal data from our live systems within 30 days. Encrypted backups rotate out within ~90 days, are never used for anything else, and pending deletions are re-applied if a backup is ever restored. Anonymized measurement data may be kept for category benchmarks.
• You may also access, correct, restrict, or object to processing, withdraw consent, and (in the EU/UK) lodge a complaint with your supervisory authority. Email [email protected] for any of these — we respond within 30 days.

8. "Your data is yours"

Four commitments, no fine print: workspaces are isolated. We never sell data. Every employee access is audited. Cancel means delete.

9. Children

CitMark isn't directed at children under 16, and we don't knowingly collect their data. If you believe a child provided us data, contact us and we'll delete it.

10. Changes

We'll post updates here with a new effective date. Material changes get an email notice before they take effect.