Privacy Policy

Citera ("we", "us", "our") is a product of TS Technology and operates the Generative Engine Optimization (GEO) platform at citera.dev. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account Information

When you sign in via Google or GitHub OAuth, we receive your name, email address and profile picture from the identity provider. We do not receive or store your OAuth provider password.

Usage Data

Each analysis you run through Citera generates a log entry containing: the URL submitted, the project it belongs to, credits consumed, processing status and a timestamp. We also store the analysis output — GEO scores, findings, extracted page data and AI simulation results — so you can view your history in the dashboard.

IP Addresses

We collect your IP address when you access the platform. IP addresses may be used for abuse prevention, fraud detection and security logging.

Google Analytics Data (Optional Integration)

If you choose to connect your Google Analytics 4 (GA4) account to a project, you grant Citera read-only access via Google OAuth. Specifically, we request the https://www.googleapis.com/auth/analytics.readonly scope. We use this access solely to read aggregated traffic metrics for the GA4 property you select — primarily to identify how many visitors AI engines (such as ChatGPT, Perplexity and Gemini) refer to your website. We store an encrypted OAuth refresh token (encrypted at rest), the selected property identifier, and a cached copy of the aggregated report so we can display it without contacting Google on every page load. We never modify your Google Analytics data, and we do not access any other Google services. You can disconnect at any time from Settings → Google Analytics, which deletes the stored token and cached data.

Payment Information

Credit purchases are processed by LemonSqueezy. We do not receive or store your credit card number or full payment details. We receive webhook notifications from LemonSqueezy confirming successful payments and the corresponding credit amount to add to your account.

Cookies and Session Data

We use a session cookie (HttpOnly, Secure) to maintain your authenticated session. We do not use third-party advertising or tracking cookies. See our Cookie Policy for details.

2. How We Use Your Information

• To provide, operate and maintain the Citera platform.
• To process credit purchases and maintain your balance.
• To run the GEO analyses and AI simulations you request.
• To detect and prevent abuse, fraud and unauthorized access.
• To display your analysis history and usage in your dashboard.
• To communicate service-related updates (no marketing emails without consent).

3. Third-Party Services

• AI Engines - To score pages and run simulations, content from the URLs you submit is sent to AI model providers (such as OpenAI, Anthropic, Google and Perplexity) through an AI gateway. Refer to each provider's privacy policy for details.
• Crawling Provider - Public pages you submit are fetched by a managed crawling service to retrieve their content for analysis.
• LemonSqueezy - Payment processing. Refer to LemonSqueezy's Privacy Policy.
• Google - OAuth identity provider used for sign-in, and (optionally) Google Analytics for read-only AI-referral traffic data when you connect a GA4 property.

We do not sell, rent or share your personal data with third parties for marketing purposes.

4. Data Retention

• Account data - retained while your account is active and for 90 days after deletion.
• Request logs - retained for 12 months, then automatically purged.
• Payment records - retained for 7 years as required by financial regulations.

5. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at hello@citera.dev. Deletion requests are processed within 30 days. Note that deleting your account will forfeit any unused credits.

6. Security

Connections to the platform use TLS 1.2+. We apply industry-standard security practices, but no transmission over the internet is 100% secure.

7. Children

Citera is not directed to children under 13 years of age. If you become aware that a child has provided us with personal information, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by updating the "Last updated" date above. Continued use of the platform constitutes acceptance of the revised policy.

9. Google User Data & Limited Use

Citera's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google Analytics data to provide and improve the AI-traffic attribution feature that you explicitly request.
• We do not transfer or sell this data to third parties, except as necessary to provide or improve the feature, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users.
• We do not use this data for advertising purposes.
• We do not allow humans to read this data unless we have your affirmative consent, it is necessary for security purposes (e.g. investigating abuse), to comply with applicable law, or the data is aggregated and used for internal operations in line with applicable privacy requirements.
• Google Analytics access is read-only; Citera never creates, edits or deletes data in your Google Analytics account.

You can revoke Citera's access to your Google Analytics at any time from Settings → Google Analytics, or via your Google Account permissions page.

10. Contact

For privacy-related inquiries: hello@citera.dev