Privacy policy

This policy covers the public website, owner dashboard, APIs we operate, and emails we send. It does not cover third-party sites linked from listings (for example Google Business Profile or Yelp).

Account data: name, email address, password (stored as a hash), locale preference, and email verification status.

Business profile data: NAP (name, address, phone), descriptions, services, Q&A, hours, credentials, media/photos, website URLs, and claim/verification records for listings you own or claim.

Usage data: pages viewed, search queries, snapshot runs, approximate IP address, browser type, and diagnostic logs needed to operate and secure the Service.

Billing data: handled by our payment processor (e.g. Stripe). We receive subscription status, customer IDs, and limited payment metadata — not full card numbers.

AI-referral / website snippet (Grow): if you install our optional website integration, we may receive referral events (such as referrer host and landing path) you configure for analytics.

• Operate the directory and owner tools
• Authenticate users, verify claims, and prevent abuse
• Run AI-visibility snapshots/scans you request or that your plan includes
• Process subscriptions and send transactional email (verification, resets, reports)
• Improve reliability, security, and product quality
• Comply with law and enforce our Terms of use

We do not sell your personal information. Public listing fields you publish are intentionally visible to visitors and may be consumed by search engines and AI assistants.

We may share information with:

• Service providers (hosting, email, payments, analytics) under contracts that limit use to providing services to us
• Syndication targets you enable (for example Google, Bing, Apple, Yelp) to update external listings
• Legal / safety recipients when required by law or to protect rights, users, or the Service

We retain account and listing data while your account is active and as needed for backups, dispute resolution, security, and legal obligations. You may request deletion of your account; some public or already-syndicated information may persist elsewhere until those copies are updated or removed.

We use industry-standard measures such as hashed passwords, HTTPS where configured, and access controls. No method of transmission or storage is 100% secure.

Depending on where you live (including California and certain other jurisdictions), you may have rights to access, correct, delete, or export personal information, or to opt out of certain processing. Contact us to exercise these rights. You can update many profile fields in the owner dashboard and unsubscribe from non-essential emails via message links where provided.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

We operate primarily from the United States and may process data in the US and other countries where our providers run. If you use the Service from Mexico or elsewhere, you understand your information may be transferred to those locations.

We may update this policy and will revise the “Last updated” date above. Material changes may also be communicated by email or in-product notice when appropriate.

Privacy requests: privacy@cita-me.app.