Privacy policy in plain words

In short

• We collect what we need to run your account and the service, and nothing to sell.
• We do not sell personal data, and we do not use advertising trackers.
• The questions we send to AI engines are your tracked prompts about your market, not your personal data.
• You can see, correct, get a copy of or delete your data by writing to support@citino.ai.

What we collect

• Account details: your name, work email and password, or your Google account's name, email and picture if you sign in with Google.
• Workspace data: the brands, websites, competitors, markets and prompts you set up, the answers we collect for them, and the fixes and reports made from them.
• Connected analytics: if you connect Google Analytics 4, read-only access to one property: visits, referrers, landing pages and the key events you defined. We do not write to your property.
• Billing details: your plan, invoices and billing contact. Card details are handled by our payment processor; we do not store card numbers.
• Usage and technical data: sign-ins, actions in the app, API requests, and the IP address and browser that made them, kept in logs to run and secure the service.
• Messages: what you send us by email or through the contact page.

How we use it

• To provide the service: run your prompts, compute your numbers and show your reports.
• To bill you, support you, and tell you about changes to your account or the service.
• To keep the service secure and working, and to improve it.
• To meet legal obligations.

Where the law asks for a legal basis, these are performing our contract with you, our legitimate interest in running and securing a business service, and meeting legal obligations. We send product news only to people who can opt out of it at any time.

AI engines and your prompts

To measure answers, we send your tracked prompts to the AI services you track: ChatGPT, Google AI Overviews and Perplexity on every plan, and any add-on engines you turn on. Those prompts are questions about your market, such as “best WMS for a 3PL”. Do not put personal data in a prompt. Each provider handles the request under its own terms.

Who we share it with

We share personal data only with service providers that help us run Citino, under contracts that limit their use of it:

• cloud hosting, database and email providers;
• our payment processor;
• the AI engine providers above, for prompts only;
• Vercel, which hosts this website, and Mintlify, which hosts our documentation.

We may also disclose data where the law requires it, or to a buyer if Citino is sold, in which case this policy keeps applying to your data. Some providers process data outside your country; where that happens we rely on the safeguards the law provides, such as standard contractual clauses.

Cookies

This website sets no advertising or analytics cookies. The Citino app uses cookies that are needed to keep you signed in and secure. Our hosting provider keeps standard server logs, such as IP addresses, to deliver and protect the site.

How long we keep it

We keep your data while your account is open. When it closes, we delete or anonymise your personal data and workspace data within 90 days, except what we must keep by law, such as invoices.

Your rights

Depending on where you live, you can ask to see the personal data we hold about you, correct it, delete it, get a copy of it, or object to or restrict how we use it. Write to support@citino.ai and we reply within 30 days. You can also complain to your data protection authority.

Security

Data is encrypted in transit, access is limited to the people who need it, and connected analytics use read-only access. No system is perfectly secure; if a breach affects your personal data, we tell you as the law requires.

Changes

We update this policy when what we collect or how we use it changes, and tell you by email or in the app before a material change takes effect. The date at the top shows the latest version.

Contact

Privacy questions and requests: support@citino.ai. Anything else: hello@citino.ai.