Security — CitMark

What we collect

Account data: email, name, workspace members. Needed to run your account.
Business data: brands you monitor, questions you track, reports. Visible only inside your workspace.
Authorization tokens: Google / Shopify / Search Console OAuth tokens. Encrypted, never stored in plain text, never in logs.
Measurement data: AI answers we collect, extracted citations, your scores. Anonymized before any aggregate use.
Logs: sign-ins, API calls, admin actions. Kept 90 days (audit logs 1 year).

What we never touch: payment card data. Billing is handled entirely by Creem (our Merchant of Record) — card numbers never reach our servers.

Tokens are encrypted with AES-256-GCM via a key management service before storage.
Every data query is scoped to your workspace. Cross-workspace access is denied by default and tested before every release.
All admin access to personal data is logged (who, when, what).
We request the minimum OAuth scopes needed, and each new scope is reviewed before it’s added.

Sell your data. Ever.
Use your brand’s measurement data to benefit a competitor.
Keep your personal data after you delete your account (30-day deletion; see below).

Export: download all your data as JSON, anytime, from Settings → Privacy.
Delete: delete your account and your personal data is removed within 30 days. Tokens are revoked immediately.
Complain: you have the right to lodge a complaint with your supervisory authority.
Our servers are hosted in the US. EU users are covered by a Data Processing Agreement and Standard Contractual Clauses.

If we discover a data breach, we will:

Contain it immediately (revoke tokens, block access).
Assess what was affected within 24 hours.
Notify affected users within 72 hours, and notify regulators as required by GDPR.
Publish a post-incident report within 7 days.

Security questions or reports: [email protected]