Privacy Policy
Last updated: [26 May 2026]
This Privacy Policy explains how [CiteAgentic Pty Ltd, ABN 54238243639] ("CiteAgentic", "we", "us", "our") handles personal information. We are an Australian business and we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs"). Where we collect personal information about individuals in the EU/UK, we also apply equivalent protections.
By using CiteAgentic, you agree to the handling of your information as described here.
What this policy covers
This policy applies to personal information we collect through:
- The CiteAgentic website and marketing pages
- Sign-up, onboarding and your authenticated use of the product
- Communications you have with us (email, support, scheduling)
- Payments you make as a paying customer
It does not cover third-party websites we link to, or the practices of the AI engines and other providers described below, which have their own privacy policies.
Information we collect
| Category | Examples |
|---|---|
| Account data | Name, email, password hash, and OAuth tokens (encrypted) for services you connect, such as Google Search Console |
| Brand & input data | Brand names, domains, prompts, competitors, ICPs and products you submit for tracking and auditing |
| Generated data | Scan results, scores, recommendations and citation data produced when we query AI engines on your behalf |
| Usage data | Pages and dashboards you visit, features you use, and diagnostic/error logs |
| Payment data | Billing details processed by our payment provider (we do not store full card numbers) |
| Support data | The content of messages you send us |
We do not collect: your own AI-engine API keys (we run engines on our infrastructure with our keys), or your source code.
How we collect it
We collect information directly from you (when you sign up, configure tracking, pay or contact us), automatically (through cookies, analytics and server logs), and from third parties you authorise (for example, Google when you connect Search Console).
Why we use it
We use personal information to:
- Provide, operate and improve the audits, monitoring and recommendations you signed up for
- Authenticate you and secure your account
- Process payments and manage your subscription
- Send transactional messages (digests you opted into, password resets, service notices)
- Compute aggregated, de-identified cohort benchmarks (minimum-N gated so they cannot be re-identified to an individual brand)
- Provide support and respond to your enquiries
- Meet our legal and record-keeping obligations
Disclosure to third parties (subprocessors)
We disclose personal information to the service providers below so we can run CiteAgentic. We do not sell or rent personal information. Please confirm/adjust this list to match your live stack:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payments and billing | USA / Australia |
| Resend | Transactional email | USA |
| Render | Application hosting | USA |
| Supabase (Postgres) | Database hosting | [REGION] |
| PostHog | Product analytics (when enabled) | EU / USA |
| Google Analytics | Website analytics | USA |
| Google (Search Console, Maps, OAuth) | Connected-account data you authorise | USA |
| DataForSEO | Search-results and AI-overview data | USA / EU |
| AI engines - OpenAI, Anthropic, Google, Perplexity, Brave, xAI, Microsoft | We send your prompts to these engines and receive their responses; we do not send them your account details | USA / global |
Overseas disclosure (APP 8)
Several of our providers are located outside Australia, primarily in the United States and the European Union. Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the APPs, including through contractual data-protection terms. By using CiteAgentic you acknowledge these overseas disclosures.
A note on AI engines
To monitor your AI search visibility, the prompts you configure are sent to third-party AI engines. Do not include personal or confidential information in prompts that you do not want transmitted to those engines.
Cookies and analytics
We use a session cookie for authentication, a CSRF cookie for security, and analytics cookies (Google Analytics, and PostHog when configured) to understand product usage. See our Cookie Policy for the breakdown.
Data security
We protect personal information with measures including encryption of OAuth tokens, encrypted transport (HTTPS), access controls and reputable hosting providers. No system is perfectly secure, but we take reasonable steps to protect your information and to respond to any data breach in line with the Notifiable Data Breaches scheme.
Retention
We keep account data for as long as your account is active. When you delete your account there is a 30-day grace period, after which your data is erased from our databases and backups, except where we are required to retain certain records (for example, tax and transaction records) under Australian law.
Accessing and correcting your information (APP 12 & 13)
You can access and correct most of your information directly in Settings. You may also:
- Export your data - our REST API exposes it, and we will email a JSON copy on request
- Correct inaccurate information
- Delete your account and data
- Object to or opt out of direct marketing at any time
To make a request, email [support@citeagentic.com]. We will respond within a reasonable period (usually within 30 days) and may need to verify your identity first.
Direct marketing (APP 7)
We only send marketing communications you have opted into, and every such message includes an unsubscribe option.
Children
CiteAgentic is a business tool not directed to anyone under 16, and we do not knowingly collect their personal information.
Complaints
If you have a privacy concern, contact us first at [support@citeagentic.com] and we will investigate. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Changes to this policy
We may update this policy from time to time. We will post the updated version here and, for material changes, notify you by email.
Contact
[CiteAgentic Ltd] [Gold Coast, QLD, Australia] Email: getlaunchy@gmail.com