Privacy Policy
Last updated: June 1, 2026
1. Who We Are
CiteHarbor ("we," "us," or "our") operates the website at citeharbor.com and provides AI citation management services. We are committed to protecting your privacy and handling your data transparently.
For privacy questions, contact us at: [email protected]
2. Information We Collect
Information you provide directly
- Name, email address, and phone number (when you request a free audit or sign up)
- Business name, website, and industry (to run your visibility audit)
- Payment information (processed securely through Stripe; we do not store card numbers)
- Messages and communications you send us
Information collected automatically
- IP address, browser type, and operating system
- Pages visited, time spent on site, and referring URLs
- Device type and screen resolution
- Cookies and similar tracking technologies (see our Cookie Policy)
3. How We Use Your Information
We use the information we collect to:
- Run your AI visibility audit and deliver your report
- Provide and improve our citation management services
- Communicate with you about your account, results, and service updates
- Process payments and prevent fraud
- Analyze site usage to improve performance and user experience
- Send marketing communications (only with your consent; unsubscribe anytime)
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
If you are in the European Economic Area, we process your personal data under the following legal bases:
- Contract: Processing necessary to provide services you have requested
- Legitimate interests: Analytics, fraud prevention, and improving our services
- Consent: Marketing communications and non-essential cookies
- Legal obligation: Compliance with applicable laws
5. How We Share Your Information
We do not sell your personal information. We share data only with:
- Service providers: Stripe (payments), Google Analytics (site analytics), and our hosting providers — all under data processing agreements
- Business transfers: If CiteHarbor is acquired or merges, your data may transfer to the new entity
- Legal requirements: When required by law or to protect rights and safety
6. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Specifically:
- Account data: Retained for the duration of your subscription plus 2 years
- Audit and report data: Retained for 3 years for reference and dispute resolution
- Communications: Retained for 2 years
- Analytics data: Aggregated/anonymized after 14 months (Google Analytics default)
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing
- Data portability (receive your data in a structured format)
- Withdraw consent at any time (where processing is based on consent)
To exercise these rights, email us at [email protected]. We will respond within 30 days.
8. Cookies
We use cookies to make our site work and understand how it is used. For full details on the cookies we set and how to control them, see our Cookie Policy.
9. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data in transit, encrypted storage, access controls, and regular security reviews. However, no internet transmission is 100% secure.
10. Third-Party Links
Our site contains links to third-party websites (such as research studies cited in our content). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
11. Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it promptly.
12. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and, where required, notify you by email or prominent notice on our site.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your data:
CiteHarbor
Email: [email protected]
If you are in the EU and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority.