Draft: pending legal review
This is a draft template that has not yet been reviewed by legal counsel. It may change before launch.
Privacy policy
We collect only what we need to run Citevana, we do not sell personal information, and analytics runs only if you opt in.
Last updated: September 16, 2026
Who we are
Citevana ("Citevana", "we", "us") operates the website https://citevana.com and the Citevana platform. Our affiliated company in India provides engineering and support services and may process data on our behalf. For any privacy question, email hello@citevana.com.
What data we collect
- Waitlist: your email address, and optionally your role and website, plus your language, referral code, the campaign source that brought you, and whether you agreed to marketing emails.
- Free tools: the URLs you submit, the results we generate, and your IP address, which we use for rate limiting and abuse prevention.
- Consent records: a random identifier, your choices, the notice version and your language, so we can prove and respect your choice.
- Product analytics (only if you opt in): pages viewed, events such as which free tool you ran, and basic device and browser information. We never send your email address to analytics.
- Account data (after launch): account details and the data you choose to connect, such as Google Search Console, Google Analytics 4 or Bing Webmaster Tools. Access tokens are encrypted at rest.
How we use data
- To manage the waitlist and invite you to early access.
- To run the free tools and, after launch, the features you use.
- To keep the service secure and prevent abuse.
- To send product news only if you opted in. You can unsubscribe at any time.
- To understand and improve the product using analytics, only if you opted in.
Google API data (Limited Use)
Citevana's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We use Google user data only to provide and improve the user-facing features you see in Citevana.
- We never sell Google user data.
- We do not transfer Google user data to others except as needed to provide those features, to comply with the law, or with your consent.
- We never use Google user data for advertising.
- People at Citevana do not read Google user data unless you ask us to, it is needed for security, or the law requires it.
- We do not use Google user data to train general AI models.
AI features and AI training
Some features use AI models from third-party providers, which process your inputs only to return results to you. We do not use your content or connected data to train AI models unless you opt in. You can withdraw that choice at any time, and it applies from then on. We will not change this without telling you first.
Who we share data with
We share personal data only with service providers that help us run Citevana (such as hosting, databases, email delivery, analytics when you consent, and AI model providers), under contracts that limit their use of it; when the law requires it; or as part of a merger or acquisition, with notice to you.
Do Not Sell or Share My Personal Information (US)
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (CCPA/CPRA). California residents have the right to know, access, correct and delete their personal information, to opt out of sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for using these rights. To make a request, email hello@citevana.com.
Your rights in the EEA and UK (GDPR)
We rely on your consent for analytics and marketing emails, on our contract with you to run the waitlist and the service, and on our legitimate interests for security and abuse prevention. You have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent at any time. You can also complain to your local data protection authority. Where data is transferred outside the EEA or UK, we will use appropriate safeguards such as Standard Contractual Clauses.
Your rights in India (DPDP Act)
Under India's Digital Personal Data Protection Act, 2023, you can ask for information about how we process your data, ask us to correct, complete, update or erase it, withdraw your consent at any time, nominate another person to exercise your rights, and raise a grievance with us at hello@citevana.com. If we do not resolve your grievance, you may approach the Data Protection Board of India.
How long we keep data
We keep waitlist data until you ask us to delete it or the waitlist ends, and free tool logs only as long as needed for security and abuse prevention. [Specific retention periods to be confirmed.]
Security
We encrypt data in transit, encrypt access tokens at rest, limit staff access, and log sensitive actions. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.
Children
Citevana is not directed at children under 18, and we do not knowingly collect their personal data.
Changes to this policy
If we make material changes, we will update this page and tell you before the changes take effect. We never change how we use your data silently.
Contact
Email hello@citevana.com for any privacy request or question.