1. Who we are
Citably is operated by Vyda Labs LTD, a limited company registered in the United Kingdom. Vyda Labs LTD is the data controller for the personal information described in this policy.
For any privacy question or request, contact us at queries@citablyai.com. Our registered office is 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.
2. What we collect
We collect only what we need to run the service. We do not sell your personal data, and we do not use it for advertising.
- Account data. Your name, email address, and the authentication identifiers created when you sign up by email or through an OAuth provider such as Google, Apple, X, or Facebook.
- Brand and website information. The brand and website details you submit so we can scan them.
- Scan and citation data. The scan results, AI engine responses, and citation data the service generates for you.
- Payment and billing data. Billing details processed by Stripe. Citably never stores your full card number.
- Usage and technical data. Information such as IP address, browser type, device identifiers, and activity timestamps, used for security and diagnostics.
- Connected site credentials. The website credentials you connect for content deployment, stored encrypted.
3. Google user data
This section explains how we handle data from Google. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
If you connect Google Search Console or Google Analytics, Citably accesses read-only search performance and analytics data. We use it for one purpose only: to display your search visibility alongside your AI visibility inside your own dashboard.
- We do not sell this data.
- We do not transfer it to anyone, except as necessary to provide this feature.
- We do not use it for advertising.
- We do not use it to train AI models.
You can revoke our access at any time from your Google account settings, or by disconnecting the integration inside Citably. Revoking access stops all further access. We keep this data only while the integration is connected, and we delete it when you disconnect the integration or delete your account.
4. How we use data
- Scans and reports. To run scans and build the reports you see in your dashboard.
- Deployments. To create and publish the content you choose to deploy.
- Billing. To process subscriptions, top-ups, and refunds through Stripe.
- Service communication. To send account notices and important service updates.
- Improvement. To understand, in aggregate, how the service is used so we can improve it.
5. Legal bases under UK GDPR
Where UK GDPR applies, we rely on the performance of our contract with you to deliver the service, our legitimate interests in keeping the service secure and improving it, and your consent where consent is the appropriate basis, such as optional marketing. You can withdraw consent at any time without affecting processing already carried out.
6. Sharing and disclosure
We share personal data only with the service providers that help us run Citably, each bound by a data processing agreement. We do not sell personal data.
- Stripe for payment processing.
- Supabase for database and authentication.
- Vercel for hosting.
- AI engine providers queried during scans, being OpenAI, Google, and Perplexity.
- Email delivery providers for account and service messages.
We may also disclose information where the law requires it, or to protect the rights and safety of our users.
7. International transfers
Your data may be processed outside your country of residence. Where that happens, we put appropriate safeguards in place, such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
8. Data retention
We keep account data for as long as your account exists. When you close your account, we delete or anonymise your personal data within a defined window, except where we are legally required to keep certain records, such as billing records for tax purposes.
9. Your rights under UK GDPR
Depending on your location, you have the right to access, rectify, erase, port, object to, and restrict the processing of your personal data. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom. To exercise any right, email us at queries@citablyai.com.
10. Cookies
We use cookies that are essential for authentication and for keeping you signed in during a session. Where we use analytics cookies, they help us understand how the service is used. You can control non-essential cookies through your browser settings.
11. Children
Citably is a business tool and is not directed at anyone under 18. We do not knowingly collect personal data from under-18s. If we learn that we have, we delete it promptly.
12. Changes to this policy
We may update this policy as the service changes. When we make a material change, we update the effective date at the top of this page and, where appropriate, notify you by email or by an in-product notice.
13. Contact
For any question, request, or complaint about privacy, contact us at queries@citablyai.com. Our registered office is 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.