Privacy Policy (DRAFT, needs review before launch)

Last updated: [DATE]. Operator: [LEGAL NAME], [ADDRESS], Ontario, Canada. Contact: privacy@citedweekly.com

What we collect

Email address; website, brand, category and questions you enter; AI answers we retrieve for you; billing status from Stripe (we never see full card numbers); basic logs (IP address, browser) for security and rate limits.

Why

To run your checks and weekly reports, send your login links and reports, bill you, prevent abuse, and send product and marketing email you can unsubscribe from at any time.

Who processes it

Vercel (hosting), Supabase (database and login), Stripe (payments), Resend (email delivery), ActiveCampaign (email list), and the AI providers we query (ChatGPT and Gemini; we send them your questions, not your email). Some of these process data outside Canada, including in the United States.

Retention

Account data is kept while your account is active and deleted within 30 days of a deletion request. Free check results are kept for up to 12 months.

Your rights

You can request access, correction or deletion by emailing privacy@citedweekly.com. Canadian residents have rights under PIPEDA; EU/UK residents under the GDPR. Marketing email complies with CASL and CAN-SPAM, and every message has an unsubscribe link.

Cookies

One essential login cookie. No advertising cookies.