Privacy Policy
Last updated: 21 May 2026
Short version: We only collect what we need to run the audits you ask for. We don't sell your data. We use a small set of trusted services (OpenAI, Anthropic, Google, Perplexity) to query AI engines on your behalf. We're based in the UK and follow GDPR.
1. Who we are
ChatCite is operated by Samz Retail Ltd, a company registered in England and Wales. Our registered address is in Manchester, United Kingdom. You can contact us at hello@chatcite.com.
2. What data we collect
When you use ChatCite, we collect the minimum needed to provide the service:
- Brand and domain names you enter into our audit tools. We send these to AI engines as part of the queries.
- IP address — used to enforce the 1-audit-per-day rate limit on the free tier. Stored temporarily.
- Email address — only if you sign up for our waitlist or paid plans. Used for service communication.
- Standard server logs — request times, user agent, referrer. Kept for 30 days for security and debugging.
We do not use tracking cookies, fingerprinting, or third-party advertising scripts.
3. How we use your data
- To run the audits you request (querying AI engines with your brand name).
- To enforce free-tier limits and prevent abuse.
- To send you the report you asked for and, if relevant, your account communications.
- To improve the product (aggregate, anonymised usage patterns only).
4. Third-party services
When you run an audit, your brand name is sent to the following AI providers as part of standard API queries:
- OpenAI (ChatGPT queries) — privacy policy
- Anthropic (Claude queries) — privacy policy
- Google (Gemini queries) — privacy policy
- Perplexity (Perplexity queries) — privacy policy
- Vercel (hosting) — privacy policy
We do not share your data beyond what is necessary to deliver the service.
5. Your rights under GDPR
If you are in the UK or EU, you have the right to:
- Access the personal data we hold about you.
- Correct or delete that data.
- Object to processing or request restriction.
- Receive your data in a portable format.
- Withdraw consent at any time (where consent is the basis).
- Complain to the ICO if you believe we have misused your data.
To exercise any of these rights, email hello@chatcite.com. We respond within 30 days.
6. Data retention
We retain the minimum data needed:
- IP addresses for rate limiting: 24 hours.
- Server logs: 30 days.
- Account data: while your account is active, plus 12 months after closure.
- Anonymised usage analytics: indefinitely.
7. Security
We use HTTPS everywhere, store secrets in encrypted environment variables, and follow industry best practices. No system is perfectly secure, but we take security seriously and patch quickly when issues are found.
8. Cookies
ChatCite does not use tracking cookies, advertising cookies, or session cookies that identify you personally. We may set a small functional cookie for rate limiting; this contains no personal information.
9. Changes to this policy
If we change this policy in a way that affects you, we will update the "last updated" date at the top and, if changes are significant, notify you by email.
10. Contact
Questions, concerns, or requests? Email us: hello@chatcite.com