Privacy Policy

CitePilot ("CitePilot," "we") respects your privacy. This Privacy Policy explains what we collect, how we use it, and your choices when you use https://getcitepilot.com and our dashboard.

Depending on how you use CitePilot, we may collect:

• Account data — email and authentication identifiers (via Neon Auth)
• Workspace data — domain, business description, competitors, buyer prompts, preferences
• Audit and usage data — prompts analyzed, scores, gaps, generated content, publish actions
• Billing data — subscription status and Stripe customer IDs (payment cards are handled by Stripe, not stored by us)
• Technical data — IP address, browser type, and logs for security and debugging
• Communications — support emails and waitlist sign-ups

We use data to:

• Provide audits, dashboards, content generation, and CMS publishing you request
• Authenticate users and secure accounts
• Process subscriptions and send billing-related messages
• Improve the product and fix errors
• Respond to support requests and legal obligations

Audits and article generation use third-party AI providers (e.g. OpenAI). Content you submit may be sent to those providers to produce results. Do not submit secrets or highly sensitive personal data.

You are responsible for reviewing AI-generated content before publishing.

We do not sell your personal information. We share data with service providers that help us operate CitePilot, such as:

We may disclose information if required by law or to protect rights, safety, and integrity of the service.

• Neon (database and authentication)
• Stripe (payments)
• OpenAI and other AI/search APIs (product features you use)
• Webflow or other CMS platforms when you publish
• Hosting and infrastructure providers

We retain data while your account is active and as needed for legal, billing, and security purposes.

You can delete a workspace from Settings. To delete your account or request removal of personal data, contact us at the email below.

We use essential cookies for authentication and session management. If we add analytics cookies later, we will update this policy and provide appropriate controls where required.

We use industry-standard measures including encrypted connections and access controls. No method of transmission or storage is 100% secure.

If you access CitePilot from outside the United States, your data may be processed in the US or where our providers operate.

CitePilot is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect data from children.

Depending on your location, you may have rights to access, correct, delete, or export personal data, or object to certain processing. Contact us to exercise these rights.

We may update this Privacy Policy. The "Last updated" date at the top reflects the latest version.

Privacy questions or requests: hello@getcitepilot.com.