Privacy policy
Details in square brackets are provisional and must be completed before this page is published.
Data controller
Citable: [Company name], [Tax ID], [Postal address]. Contact: [Contact email].
What data we process
Your brand's domain, your competitors' domains, the market you chose, your email, the page language, the date and text of the consent you accepted, and a pseudonymized identifier of your IP address (a keyed hash, never the IP in clear text).
Purposes
To send you the confirmation email and the free audit report.
If you subscribe to monthly monitoring: to charge the subscription and send you a report every month.
To contact you by email or phone to discuss the results and our SEO and GEO services.
To prevent abuse: limiting requests per IP and per email, and running only one free audit per domain and per email.
If you subscribe to the Citable Index: to send you the rankings and Citable news every month. We keep your email, language, the text you accepted and the confirmation date until you unsubscribe.
Legal basis
Your consent, which you give by ticking the box on the form. You can withdraw it at any time by writing to [Contact email]. Abuse prevention is based on our legitimate interest.
Retention
We keep the data until you withdraw your consent and, after that, for the applicable legal periods. [Specific retention period].
Recipients and processors
OpenRouter (sends the audit questions to the AI engines; it only receives the domains and the market, never your email), Resend (email delivery), Cloudflare (Turnstile, bot protection), Stripe (payments and invoicing; we never see your card details), Vercel (website hosting and anonymous, aggregated visit statistics without cookies) and Neon (database). Some are located outside the European Economic Area and operate with appropriate safeguards. [Review each provider's safeguards].
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [Contact email]. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).