Skip to content

Privacy Policy

Last updated: July 2026

This policy explains what CiteSight ("we") collects when you use https://citesight.pages.dev, buy a CiteSight kit, or use the CiteSight platform, and what we do with it. The short version: we collect the minimum needed to sell and operate the product, we never sell your data, and analytics run only with your consent.

1. What we collect

  • Purchase data: name, email and transaction details, processed by our payment providers (Gumroad, Stripe, PayPal). We never see or store your full card number.
  • Account data (platform users): your name, email, a salted password hash (we can never read your password), and session cookies needed to keep you signed in.
  • Workspace data (platform users): the domains you add, competitor names, generated prompts, and audit results for those domains. Audits fetch only publicly accessible pages of the domains you submit.
  • Newsletter data: your email address, only if you subscribe.
  • Support data: the contents of emails you send us.
  • Analytics data: privacy-friendly, aggregate page-view statistics — loaded only if you accept cookies. No advertising trackers are used on this site.

2. What we use it for

  • Delivering your files and purchase confirmations
  • Operating your platform account: authentication, running the audits you request, storing your results
  • Sending product updates you're entitled to (12 months of free updates)
  • Sending the newsletter you subscribed to (every email has a working unsubscribe link)
  • Answering support requests and processing refunds
  • Improving the site (aggregate, consented analytics only)
  • Meeting legal, tax and accounting obligations

3. Who processes your data

Payment processing: Gumroad, Stripe, PayPal (each under their own privacy policy and PCI-DSS compliance). Email delivery: our email service provider. Analytics: Plausible or Google Analytics 4 (anonymized IP), loaded only after consent. We do not sell, rent or trade your personal data to anyone.

4. Cookies

We use one essential cookie/local-storage entry to remember your cookie choice, and — for signed-in platform users — one essential, HttpOnly session cookie that keeps you logged in (strictly necessary; not used for tracking). Analytics cookies load only after you press "Accept" on the consent banner. You can withdraw consent anytime by clearing site data in your browser — the banner will return.

5. Your rights

Where GDPR/CCPA or similar laws apply, you may request access, correction, export or deletion of your personal data, and object to processing. Email support@citesight.com with the subject "Privacy request" — we respond within 30 days.

6. Data retention & security

Purchase records are retained as required for tax purposes (typically 7 years). Newsletter data is kept until you unsubscribe. We use TLS everywhere and restrict access to personal data to what is strictly necessary.

7. Changes

If we change this policy materially, we'll note it here with a new date and, for significant changes, email active customers.

Contact

CiteSight — support@citesight.com