Effective October 2, 2026
This Privacy Policy explains what SmartCited ("we", "us") collects when you use smartcited.com and the SmartCited service, and what we do with it.
What we collect
- Account data. Your email address, name (if provided), and — when you sign in with Google or GitHub — the basic profile information those providers share. Passwords are handled by our authentication provider and never stored in plain text.
- Scan data. The website URLs you submit, the business profile and questions derived from them, and the answers and citation URLs returned by the AI engines we query on your behalf.
- Connected-system credentials. Connecting a CMS (such as WordPress or Ghost) is currently unavailable, so we do not collect or store website login credentials. If we bring the feature back, we will update this policy before it launches.
- Billing data. Payments are processed by Stripe. We receive subscription status and billing metadata; we never see or store your full card number.
- Technical data. Standard server logs (IP address, timestamps, request paths) used for security, rate limiting, and debugging.
What we do not do
We do not sell your personal data. We do not run third-party advertising or ad-tracking scripts. We use only the cookies required to keep you signed in (an httpOnly session/refresh token).
Third-party processors
To provide the Service, your data is processed by: Supabase (database and authentication), Vercel (application hosting), Fly.io (scan compute), Stripe (payments), OpenAI, Google (Gemini), and — depending on scan configuration — You.com, OpenRouter, Nebius, and Tavily (AI engines, model inference, and website content extraction), and Zoho Mail (support email). Website URLs and derived questions are sent to the AI engines to run your scan; your account identity is not.
Data retention and deletion
Scan results are retained so you can revisit reports and track trends. You can request deletion of your account and associated data at any time by emailing contact@smartcited.com; we will delete your account data within 30 days, except records we must keep for legal or billing-compliance reasons.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email contact@smartcited.com.
Children
The Service is for businesses and is not directed at children under 16; we do not knowingly collect their data.
Changes
We may update this policy as the product evolves. Material changes will be announced on the site or by email, with the effective date updated above.
Contact
Privacy questions: contact@smartcited.com