Legal
Privacy Policy
Last updated: March 28, 2026
DeepCited (“we,” “us,” or “our”) is an AI visibility platform. We take your privacy seriously. This policy explains what information we collect, how we use it, who we share it with, and what rights you have. We’ve written this to be readable — not a wall of legalese.
1. Information we collect
Account information. When you sign up, we collect your email address and a password (hashed — we never store it in plain text). If you connect Google OAuth, we receive your name and email from Google.
Payment information. Billing is handled entirely by Stripe. We never see or store your credit card number. We receive confirmation of payment, your billing plan, and a Stripe customer ID.
Website data you submit. When you enter a URL — for a free scan or monitoring setup — we fetch and analyze publicly available content from that domain. We store the results (visibility scores, AI responses, gap analysis) in your account.
AI engine query data. As part of the monitoring service, we submit queries to ChatGPT, Perplexity, Claude, Gemini, and Google AI Overviews on your behalf and store the responses. These are the same queries your customers might ask.
Usage data. We collect standard server logs — IP address, browser type, pages visited, and timestamps. This helps us debug issues and understand how the product is used.
Cookies. We use cookies to keep you logged in (session cookie) and to understand usage patterns (analytics). We do not use advertising cookies or sell your data to ad networks.
2. How we use your information
We use the information we collect to:
- Provide and operate the DeepCited platform
- Run AI engine scans and deliver visibility reports
- Process billing and manage your subscription
- Send transactional emails (scan results, billing receipts, account alerts)
- Improve the product based on aggregated, anonymized usage patterns
- Respond to support requests
- Comply with legal obligations
We do not use your data to train AI models, sell to third parties, or send marketing emails without your explicit consent.
3. Third-party services
DeepCited relies on the following third-party providers to operate. Each handles your data according to their own privacy policies, which we link below.
| Provider | Purpose |
|---|---|
| Stripe | Payment processing and subscription management |
| Resend | Transactional email (scan reports, receipts) |
| Neon | Database hosting (your account data, scan results) |
| Firecrawl | Website scraping to analyze publicly available content |
| Sentry | Error monitoring — captures anonymized crash reports |
| Vercel | Hosting and infrastructure (US-based servers) |
4. Data retention
We keep your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we’re legally required to retain it (for example, billing records, which we keep for 7 years per standard accounting requirements).
Free scan results (submitted without an account) are retained for 30 days, then purged. Scan data linked to an account follows the account retention policy above.
5. Your rights (GDPR and similar laws)
If you’re in the EU, UK, or a jurisdiction with similar data protection laws, you have the following rights:
- Access. Request a copy of the personal data we hold about you.
- Correction. Ask us to fix inaccurate data.
- Deletion.Ask us to delete your data (“right to be forgotten”).
- Portability. Request your data in a machine-readable format.
- Objection. Object to certain types of processing.
To exercise any of these rights, email us at privacy@deepcited.com. We will respond within 30 days.
6. Security
All data is transmitted over HTTPS. Passwords are hashed before storage. We use environment-separated databases (dev and production never share data). We follow standard security practices and conduct internal reviews when adding new data integrations. No system is perfectly secure — if you suspect a breach, please contact us immediately at security@deepcited.com.
7. Changes to this policy
If we make material changes, we’ll notify you by email or with a notice in the app before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.
8. Contact
Questions about this policy? Email us at privacy@deepcited.com. We’re a small team and we respond to every message.