Legal

Privacy Policy

🗓️ Last Updated: July 2026 ✅ Effective: July 2026

CitedROI.com (“CitedROI,” “we,” “us,” or “our”) operates citedroi.com and the CitedROI application (together, the “Site” and “Services”). This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and your rights regarding your personal data. We are committed to handling your information with transparency, care, and respect.

Privacy Policy Terms of Service

1. Who This Policy Applies To

This Privacy Policy applies to all visitors to our website, everyone who creates a CitedROI account or subscribes to a paid plan, anyone who requests a demo or contacts our team, and all individuals who communicate with us via email, contact forms, or any other channel.

By using our Site or Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use our Site or Services.

2. Information We Collect

2.1 Information you provide directly

We collect information you provide when you interact with us, including:

  • Contact and identity information — your name, email address, phone number, and company name when you submit a contact form, request a demo, or otherwise reach out to us.
  • Account registration information — your name, email, password, and organization or workspace details when you create a CitedROI account. Authentication is handled through our identity provider; we do not store your password in plain text.
  • Payment and billing information — billing details when you subscribe to a paid plan. Note: we do not store full credit card numbers. Payment processing is handled by our third-party payment processor (such as Stripe), which maintains its own security standards and privacy policy.
  • Domain and website information — the domains, URLs, and website content you connect to CitedROI so we can monitor citations, analyze citability, and generate content rewrites on your behalf.
  • Communications — the content of emails, messages, support requests, or other correspondence you send to us.

2.2 Information we collect automatically

When you visit our Site or use our Services, we and our third-party service providers may automatically collect certain technical information, including:

  • Usage data — pages visited, features used, time spent, links clicked, and navigation patterns within the Site and Services.
  • Device and browser information — your IP address, browser type and version, operating system, device type, and screen resolution.
  • Referral information — the URL or platform that directed you to our Site.
  • Cookie data — see Section 5 (Cookies and Tracking) for full details.

2.3 Information we do not collect

We do not collect sensitive personal information such as government identification numbers, financial account credentials, medical information, or biometric data. We do not knowingly collect any information from children under the age of 13. If you believe a minor has provided us with personal information, please contact us immediately at sup@citedroi.com so we can delete it.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide our Services
To deliver AI citation monitoring, citability and GEO analysis, content rewriting, alerting, and related features you have subscribed to.
To communicate with you
To respond to inquiries, confirm sign-ups, send the alerts you configure, and deliver product and account-related communications.
To process payments
To charge for subscriptions and manage billing through our payment processor.
To improve our Services
To understand how users interact with the platform, identify areas for improvement, and optimize the product experience.
To send relevant communications
To share product updates, relevant content, or information about our Services — only with your consent where required by law.
To comply with legal obligations
To meet applicable legal, regulatory, or contractual requirements and to protect our legal rights.
To protect security
To detect, prevent, and respond to fraud, abuse, or security incidents affecting our Site or Services.

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data only when we have a valid legal basis. Depending on the processing activity, our legal basis may be:

  • Contract performance — processing necessary to provide your subscription and deliver the Services you have signed up for.
  • Legitimate interests — processing necessary for our legitimate business interests, such as improving our Services, communicating with prospective customers, and maintaining Site security, where those interests are not overridden by your rights.
  • Consent — where you have given clear, informed consent for a specific processing activity, such as receiving marketing communications.
  • Legal obligation — processing required to comply with applicable laws or regulations.

You may withdraw consent at any time where consent is the legal basis for processing. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

5. Cookies and Tracking Technologies

5.1 What we use

Our Site may use cookies, web beacons, and similar tracking technologies to operate the Site, understand user behavior, and improve our Services. Cookies are small text files stored on your device.

Essential cookies
Required for the Site to function. These cannot be disabled without affecting core functionality, including authentication, account features, and form submissions.
Analytics cookies
Used to understand how visitors interact with our Site — pages visited, time spent, traffic sources. We use this data in aggregate to improve the Site.
Preference cookies
Used to remember your settings or choices on the Site, such as language preferences.
Marketing cookies
Used to deliver relevant advertising or track the effectiveness of campaigns. These are only activated with your explicit consent.

5.2 Your cookie choices

You may control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, and be notified when new cookies are set. Note that disabling certain cookies may affect the functionality of our Site. Where required by law, we will ask for your consent before placing non-essential cookies on your device.

6. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:

6.1 Service providers

We work with trusted third-party service providers who assist us in operating our business. These may include:

  • Authentication and identity providers — to manage secure sign-in and account access.
  • Payment processors (such as Stripe) — to securely process subscription payments.
  • Cloud hosting, database, and infrastructure providers — to operate the Site and Services and store your data.
  • Email and communication platforms — to send and manage transactional and account correspondence.
  • Analytics and error-monitoring providers — to understand usage and maintain reliability.
  • AI and large language model providers — to perform citation checks and generate content rewrites as part of delivering the Services.

These service providers are contractually obligated to use your information only for the purpose of providing services to us and to maintain appropriate security standards.

6.2 Business transfers

In the event of a merger, acquisition, sale of assets, or other business transfer, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a materially different privacy policy.

6.3 Legal compliance

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of CitedROI.com, our customers, or the public.

6.4 With your consent

We may share your information for any other purpose with your explicit prior consent.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention practices are:

  • Prospective and account contact information — retained for up to 24 months from your last interaction, or until you request deletion.
  • Active subscriber and account data — retained for the duration of your subscription plus up to 24 months to comply with contractual and legal obligations.
  • Payment and billing records — retained for 7 years to meet tax and financial regulatory requirements.
  • Website and product analytics data — retained in aggregate, anonymized form for up to 36 months.
  • Email and support communications — retained for the duration of our relationship plus 3 years.

When information is no longer needed, we delete it securely or anonymize it so that it can no longer be associated with you.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Encrypted data transmission using industry-standard SSL/TLS protocols.
  • Access controls that limit who within our organization can access personal data.
  • Secure third-party platforms with their own security certifications and protocols.
  • Regular review of our security practices and service provider agreements.

No method of data transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

9. Your Rights

Depending on your location and applicable law, you may have some or all of the following rights regarding your personal information:

Right to access
You may request a copy of the personal information we hold about you.
Right to correction
You may request that we correct inaccurate or incomplete personal information.
Right to deletion
You may request that we delete your personal information, subject to certain legal exceptions.
Right to restrict processing
You may request that we limit how we use your personal information in certain circumstances.
Right to data portability
You may request that we provide your personal information in a structured, machine-readable format.
Right to object
You may object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent
Where we rely on consent, you may withdraw it at any time without affecting prior lawful processing.
Right to non-discrimination
We will not discriminate against you for exercising any of these rights (California residents — CCPA).

To exercise any of these rights, please contact us at sup@citedroi.com. We will respond within 30 days. We may ask you to verify your identity before processing your request. If you are located in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information. In the preceding 12 months, we have not sold personal information to third parties, nor have we shared personal information with third parties for cross-context behavioral advertising.

California residents may submit requests to know, delete, or correct their personal information by contacting us at sup@citedroi.com. We will not discriminate against you for exercising your California privacy rights.

Our Site may contain links to third-party websites, platforms, or services — including payment processors, authentication providers, and resource links. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of external sites.

12. International Data Transfers

If you are accessing our Site or Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and operations are based. Data protection laws in the United States may differ from those in your country. By using our Site or Services, you consent to the transfer of your information to the United States in accordance with this Privacy Policy. Where required, we implement appropriate safeguards for international transfers, such as standard contractual clauses.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or applicable law. When we make material changes, we will update the “Last Updated” date at the top of this policy and, where appropriate, provide additional notice such as a banner on our Site or an email to customers. Your continued use of our Site or Services after the effective date of any changes constitutes your acceptance of the updated policy.

14. Contact Us — Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Company
CitedROI.com
Email
sup@citedroi.com
Website
citedroi.com
Mailing address
3843 Barrington St. #240, San Antonio, Texas 78217
Response time
We aim to respond to all privacy inquiries within 30 business days.
By using our website or engaging our Services, you acknowledge that you have read and understood this Privacy Policy. This policy works together with our Terms of Service.