Privacy policy

Who we are

Citevana ("Citevana", "we", "us") operates the website https://citevana.com and the Citevana platform. Our affiliated company in India provides engineering and support services and may process data on our behalf. For any privacy question, email hello@citevana.com.

What data we collect

• Product-update sign-up: your email address, and optionally your role and website, plus your language, the referral code or campaign source that brought you, and whether you agreed to receive product-update emails.
• Free tools: the URLs you submit, the results we generate, and your IP address, which we use for rate limiting and abuse prevention.
• Consent records: a random identifier, your choices, the notice version and your language, so we can prove and respect your choice.
• Product analytics (only if you opt in): pages viewed, events such as which free tool you ran, basic device and browser information, and a recording of how you move, scroll and click on the page, in which text you type into forms is masked. We never send your email address to analytics.
• Account data: account details and the data you choose to connect, such as Google Search Console, Google Analytics 4 or Bing Webmaster Tools. Access tokens are encrypted at rest.

How we use data

• To send the optional product-update emails you asked for, and to credit the partner or referral link that brought you.
• To run the free tools and the platform features you use.
• To keep the service secure and prevent abuse.
• To send product news only if you opted in. You can unsubscribe at any time.
• To understand and improve the product using analytics, only if you opted in.

Google API data (Limited Use)

Citevana's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide and improve the user-facing features you see in Citevana.
• We never sell Google user data.
• We do not transfer Google user data to others except as needed to provide those features, to comply with the law, or with your consent.
• We never use Google user data for advertising.
• People at Citevana do not read Google user data unless you ask us to, it is needed for security, or the law requires it.
• We do not use Google user data to train general AI models.
• If we ever build anonymized, aggregated benchmarks or other data products from Google user data, we only include a site's data if you separately agreed to that. See "Aggregated data products" in our Terms of service.

AI features and AI training

Some features use AI models from third-party providers, which process your inputs only to return results to you. We do not use your content or connected data to train AI models unless you opt in. You can withdraw that choice at any time, and it applies from then on. We will not change this without telling you first.

Who we share data with

We share personal data only with service providers that help us run Citevana (such as hosting, databases, email delivery, analytics when you consent, and AI model providers), under contracts that limit their use of it; when the law requires it; or as part of a merger or acquisition, with notice to you.

If you join the product-update list, your email address and the campaign tags (UTM) of the link that brought you are stored with MailerLite, our email marketing provider, which sends those emails for us. Every email has an unsubscribe link.

If you opt in to analytics, these providers process that analytics data on our behalf. We never send your email address to any of them.

• PostHog — product analytics: pseudonymous usage events linked to a random identifier, for example which free tool you ran.
• Google LLC (Google Analytics) — traffic reporting: page views and basic device and browser information.
• Microsoft Corporation (Microsoft Clarity) — session recording and heatmaps: a recording of how you move, scroll and click on the page. Text you type into forms is masked.

Do Not Sell or Share My Personal Information (US)

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (CCPA/CPRA). California residents have the right to know, access, correct and delete their personal information, to opt out of sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for using these rights. To make a request, email hello@citevana.com.

Your rights in the EEA and UK (GDPR)

We rely on your consent for analytics, marketing emails and the product-update emails you signed up for, on our contract with you to run the service, and on our legitimate interests for security and abuse prevention. You have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent at any time. You can also complain to your local data protection authority. Where data is transferred outside the EEA or UK, we will use appropriate safeguards such as Standard Contractual Clauses.

Your rights in India (DPDP Act)

Under India's Digital Personal Data Protection Act, 2023, you can ask for information about how we process your data, ask us to correct, complete, update or erase it, withdraw your consent at any time, nominate another person to exercise your rights, and raise a grievance with us at hello@citevana.com. If we do not resolve your grievance, you may approach the Data Protection Board of India.

How long we keep data

We keep account data while your account is open, product-update sign-up data until you unsubscribe or ask us to delete it, and free tool logs only as long as needed for security and abuse prevention. Once data is no longer needed for the purpose it was collected for, we delete it. We do not publish a fixed period for every type of data; if you need the period that applies to a particular type, or you want your data deleted sooner, email hello@citevana.com.

Security

We encrypt data in transit, encrypt access tokens at rest, limit staff access, and log sensitive actions. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.

Children

Citevana is not directed at children under 18, and we do not knowingly collect their personal data.

Changes to this policy

If we make material changes, we will update this page and tell you before the changes take effect. We never change how we use your data silently.

Contact

Email hello@citevana.com for any privacy request or question.