Introduction

CitationIQ.com ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI platform answer visibility analytics and business intelligence. Your use of CitationIQ.com is also governed by our Terms of Service.

Who We Are

CitationIQ.com is operated by Nashi Holdings, LLC ("CitationIQ.com," "we," "our," or "us"). For users in the EEA, UK, or Switzerland, we act as the data controller for personal data processed under this policy.

Business address: Ste 105-164, 5021 Verdugo Way, Camarillo, CA 93012.

Privacy contact: admin@citationiq.com.

Information We Collect

We collect only the information necessary to provide our services:

• Account Information: Email address, company name, and website domain when you create an account. Agency accounts may also provide contact name and phone number.
• Usage Data: Queries and URLs you submit for analysis and reports generated for your account.
• Technical Data: Authentication tokens stored locally in your browser (cookie or local storage, depending on your browser and session) to maintain your login session.
• Service Logs: Basic log data such as IP address, device and browser type, timestamps, and usage events (for example, login attempts) to help secure the service, prevent abuse, and troubleshoot issues.
• Support Communications: Information you choose to provide if you contact us for support (for example, questions or troubleshooting details).
• Billing Information (if you subscribe to a paid plan): Payment details are processed by our payment processor, whether your plan is billed monthly or annually. We do not store full payment card numbers. Payment authorization and billing records are retained by our payment processor in accordance with their policies and applicable financial regulations.
• API Keys (agency accounts): Agency accounts provide their own API keys for third-party AI platforms. These keys are stored encrypted, used only to execute reports on your behalf, and can be deleted by you at any time.
• API Keys (direct client accounts): Direct client accounts have the option to provide their own API keys for third-party AI platforms. These keys are stored encrypted, used only to execute reports on your behalf, and can be deleted by you at any time.

How We Use Your Information

Your information is used exclusively to:

• Provide utility, and maintain reporting for you, within the CitationIQ.com platform
• Authenticate your access to your account
• Generate LLM platform visibility reports and information for your domain
• Communicate with you about your account or service updates

We may use anonymized, aggregated data that cannot identify any individual user for purposes such as product improvement, industry benchmarking, and research. This data is not personal information and is not subject to the restrictions in this policy.

Cookies and Local Storage

We use strictly necessary cookies and local storage only. No tracking cookies, advertising cookies, or third-party analytics cookies are used on CitationIQ.com.

Our authentication system uses browser local storage (and, where applicable, a session cookie) to maintain your login session. This is classified as "strictly necessary" under privacy regulations and does not require consent.

We do not use advertising pixels, cross-site tracking, session replay, or third-party analytics cookies.

Because we do not track users across websites or use behavioral advertising, our service operates the same way regardless of your browser's Do Not Track setting.

Data Retention

We retain personal data only as long as necessary to provide the service, meet legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type:

• Account information: Retained while your account is active. If you cancel your subscription, your account remains active through the end of your current billing period. After your account closes at the end of that period, personal data is deleted or anonymized within 30 days, unless retention is required by law. You may request a data export at any time while your account is active or during the 30-day post-closure period.
• Usage data and reports: Crawled content, analysis results, and report data are retained for up to 24 months from the date of creation to support longitudinal trend analysis and historical comparison. Data older than 24 months is automatically deleted.
• Security and service logs: Retained for up to 90 days for security monitoring, fraud prevention, and troubleshooting.
• Backups: Stored on a rolling basis and deleted within 7 days.
• Agency client data: When an agency removes a client from their account, that client's data is deleted within 30 days. If an agency cancels their account entirely, all associated client data is deleted within 30 days.

Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We use third-party APIs (for example, OpenAI, Anthropic, Google, and Perplexity) to analyze platform visibility, perform query fan-out requests, and test content from your site against LLM platforms for responses. When you use these features, we send the minimum necessary inputs (such as your query and relevant URLs or content excerpts) to those providers. Their handling of that data is governed by their terms and privacy policies. Where settings or contractual options are available, we use configurations intended to limit retention and prevent provider training on customer data.

Service Providers (Subprocessors)

We may share personal data with trusted service providers that help us operate and improve CitationIQ.com. These providers process data only on our instructions and for the purposes described in this policy. Categories may include:

• Cloud hosting and infrastructure providers
• Database and storage providers
• Email and communications providers (for example, account notices)
• Payment processing providers (if you subscribe to a paid plan)
• Security and error monitoring providers (to detect outages and abuse)
• LLM and search platform API providers used for analysis (for example, OpenAI, Anthropic, Google, and Perplexity)

A current list of subprocessors is available on request by emailing admin@citationiq.com.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encrypted data transmission (HTTPS), secure database storage, and access controls.

We also apply least-privilege access practices and monitor for suspicious activity. If we become aware of a data breach that affects your personal information, we will notify you and any applicable regulators as required by law.

Children's Privacy

CitationIQ.com is not intended for children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us at admin@citationiq.com and we will take steps to delete it.

Automated Decision-Making

CitationIQ.com provides analytics and diagnostic outputs about content visibility on AI platforms. We do not use automated decision-making or profiling to make legal or similarly significant decisions about you.

Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent (where applicable)
• Object to processing of your data (where we rely on legitimate interest as the legal basis)
• Request restriction of processing while a concern is being resolved

To exercise these rights, contact us at admin@citationiq.com.

To protect your privacy, we may ask you to verify your identity before fulfilling a request. We respond within the timeframes required by applicable law (typically within 30 days for GDPR requests and 45 days for CCPA requests). If you are a California resident, you may use an authorized agent to submit a request on your behalf; we will require verification of the agent's authority and your identity as required by law.

California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA").

We do not sell or share personal information (as those terms are defined under CCPA/CPRA), and we do not use personal information for cross-context behavioral advertising.

Categories of personal information we may collect are described in the "Information We Collect" section above. We collect this information directly from you and from your interaction with the service.

California residents may request disclosure of the categories of personal information collected and the purposes for which it is used by contacting us at the email address above.

We will not discriminate against you for exercising your privacy rights.

International Users (GDPR/UK GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal data under the following legal bases:

• Contract: Processing necessary to provide the services you requested
• Legitimate Interest: Processing necessary for our legitimate business interests, such as maintaining service security, preventing fraud, improving platform performance, and communicating service updates, where those interests are not overridden by your data protection rights.

International Transfers: Your personal data may be processed in the United States and other jurisdictions where we or our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect personal data transferred internationally.

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. If you have an account with us, we may also provide notice via email or within the product.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: admin@citationiq.com

Mail: Ste 105-164, 5021 Verdugo Way, Camarillo, CA 93012.