Privacy Policy

We collect the domain you ask us to audit, the email address you give us, and what the answer engines said. We take payment through Stripe and never see your card. We do not sell your data, and we do not share it with anyone except the services listed below that are needed to actually run the product. Write to hello@getcitedmore.com and we will delete it.

The domain you enter. We fetch its publicly available homepage to infer your category, brand name and likely competitors.

Your email address, when you give it — at the free-scan gate or at checkout. We use it to send your report and to tell you if your visibility changes materially. It is not sold or rented.

Audit data.The frozen prompt set, each engine's raw response, the brands and citations extracted from those responses, and the resulting scores.

Payment records.Stripe's session and payment identifiers, the amount, and the email used. Card numbers go to Stripe directly and never touch our servers.

Usage analytics. Aggregate page views and funnel steps through Google Analytics. We deliberately do not attach your domain, email or report token to those events.

To perform the contract you entered into when you requested a scan or bought an audit; for our legitimate interest in operating, securing and improving the service; and, for non-essential analytics cookies, on your consent. Where GDPR applies, the operator of Get Cited More is the controller for this data.

These are the only third parties involved, and each one is here because the product cannot run without it:

OpenAI, Anthropic, Google

Answer engines we query. They receive the generated questions and your brand/domain name — not your email.

OpenRouter

Routes our Perplexity queries. Same data as above.

Supabase

Database. Stores scans, prompts, engine responses, scores, orders.

Vercel

Hosting. Processes request logs, including IP addresses, in the normal course of serving the site.

Stripe

Payments. Stripe collects your card details directly — we never see or store them.

Resend

Transactional email. Receives your address and the message we send you.

Google Analytics 4

Aggregate traffic and funnel measurement. See the cookie notice.

Some of these are outside your country, including in the United States. We would also disclose data if legally compelled, or transfer it as part of a sale of the business — in which case this policy travels with it.

There are no accounts and no passwords. A report is reachable by a long random token in its URL, those pages are marked as not-indexable and excluded in robots.txt, and they are never cached by shared caches. Anyone who has the link can read the report, so do not post it publicly. Ask us and we will invalidate a link and issue a new one.

Audit data is kept indefinitely by default, because a re-scan is only meaningful against the original frozen prompt set. Payment records are kept as long as tax and accounting law requires. Ask for deletion and we will remove your scans, reports and email address, keeping only what the law requires us to retain.

Depending on where you live, you can ask for a copy of your data, its correction or deletion, restriction of processing, or portability, and you can object to processing based on legitimate interest. Under the CCPA: we do not sell or share personal information as those terms are defined, and we will not discriminate against you for exercising any right.

One email to hello@getcitedmore.com is enough for any of these. If you are in the EU or UK and think we have handled this badly, you may also complain to your data protection authority.

This is a business tool and is not directed at anyone under 16. We do not knowingly collect their data; tell us if you believe we have and we will delete it.

Covered separately in the cookie notice.