Privacy Policy

The short version

We collect the domain you give us, your email, and what is needed to bill you.
The agent reads public pages and AI engine answers about your market. It does not read your visitors, your customers or your analytics.
This website sets no tracking cookies. Visits are counted without identifying you.
We never sell your data. We share it only with the providers that run the service.
Email hello@citedtoday.com and we delete your account data within 30 days.

1. What we collect about you

Your domain, the one you type to start the agent.
Your email address, to send your first list and the daily task.
Billing details when you pay: name, company, country, VAT number where relevant. Card numbers go straight to our payment processor; we never see or store them.
Account activity: the tasks delivered, the pages you mark as published, the pages the engines open, and when you log in.
Your messages when you write to us.
Technical data on the account: IP address, browser and timestamps in server logs, kept for security.

2. What the agent reads about your market

To do its job, the agent collects information about businesses, not about people:

The answers that ChatGPT, Perplexity, Gemini and Google AI Overviews give to your buying questions, and the brands they cite.
The public pages those engines open before answering, including competitor pages, and what those pages contain.
Your own public pages, to compare them with the competitor's.

Competitor pages can name authors. We extract facts about the page, such as whether it has a named author, not profiles of the authors themselves.

3. How we use it

Run your agent every morning and send you the task, the brief and the check four weeks after publishing.
Draft articles, when your plan includes it.
Bill you and send receipts.
Answer your questions and fix problems.
Improve the service, using aggregated numbers that do not identify you.
Send you product news. You can unsubscribe from these with one click; the daily task and billing emails are part of the service.
Meet legal obligations, such as keeping accounting records.

Under the GDPR, our legal bases are the contract with you (running the service, billing), our legitimate interest (security, improving the product, product news to customers), your consent where we ask for it, and legal obligations.

We share data only with providers that help us run the service, under contracts that bind them to protect it:

Hosting: Vercel, for this website and the service.
Email delivery: email provider, to confirm, to send your daily task.
Payments: payment processor, to confirm, which handles your card under its own privacy policy.
AI engines: we send them your buying questions, as any user would. We never send them your email, your billing details or your account data.
Your CMS or code repository, only if you connect one so the agent can deliver drafts there.

We disclose data when the law requires it, and in the case of a merger or sale, to the party taking over the service under the same commitments. We do not sell personal data and we do not use it for advertising.

5. This website

citedtoday.com sets no tracking cookies. We measure page views and the clicks on the start button with Vercel Web Analytics, which counts visits without cookies and without identifying you. The domain and email you type in the form on the home page are sent to our server only when you submit them, to start your agent and send your first list.

The pages load fonts from Google Fonts, company icons from Google's favicon service and AI engine logos from Wikimedia Commons. Your browser sends your IP address to those services when it fetches these files, as it does for any image or font on the web.

6. How long we keep it

Account data: while your account is open, then 12 months, in case you come back.
Briefs and articles: they are yours. You can export them at any time; we delete our copies with the account.
Billing records: as long as tax and accounting law requires, which is 10 years in Portugal.
Server logs: 90 days.
Market data (engine answers, competitor pages): kept as long as it is useful to measure your progress; it does not identify you.

7. Your rights

You can ask us at any time to access, correct, export or delete your personal data, to restrict or object to its processing, and to withdraw consent where we rely on it. Write to hello@citedtoday.com; we answer within 30 days and may ask you to confirm your identity.

If you are in the European Economic Area, you can complain to your data protection authority. In Portugal this is the CNPD, Comissão Nacional de Proteção de Dados.

8. Security and international transfers

Data travels encrypted, access is limited to the people who need it to run the service, and credentials to your CMS or repository are stored encrypted and used only for delivery.

Some providers are based in the United States. Where data leaves the European Economic Area, it is covered by the European Commission's standard contractual clauses or by the EU-US Data Privacy Framework.

The service is for businesses and is not intended for anyone under 16.

9. Changes and contact

When this policy changes, we post the new version here with a new effective date and email you if the change matters. The controller of your data is legal entity name, to confirm, Lisbon, Portugal. Contact: hello@citedtoday.com.