Privacy
Privacy policy
Last updated 16 October 2026
Citeahead is a small agency based in India. We help businesses get named and cited in AI answers. This page explains what we collect, why, who handles it for us, and how to have it deleted. Questions go to hello@citeahead.com.
What we collect
- Mini-audit requests: your name, work email, website and the competitor you name. We use them to run your audit and email you a link to the report.
- Client accounts: your email, a scrambled (hashed) version of your password, and the audit reports we save to your account. We never see or store your password in readable form.
- The free site checker: we read the public pages of the address you enter and show the result. We don't store the address or the result.
- Business contact details for outreach: we may email businesses whose AI visibility we have checked. We use publicly listed work emails, found on company websites or through contact-finding services such as Hunter.io. Every email offers a way to opt out, and we keep a do-not-contact list so you don't hear from us again.
Cookies
We set one cookie, and only when you log in to your client portal, to keep you logged in. We don't use analytics, advertising or tracking cookies.
Who processes data for us
- Vercel hosts the website.
- Upstash stores client accounts, saved reports and audit requests.
- OpenAI, Anthropic, Google and Perplexity: to measure AI visibility, we send their AI assistants buyer questions plus the business and competitor names being checked. We don't send your email or any other personal details.
- Hunter.io helps us find and verify public business email addresses for outreach.
These services may process data in the United States and other countries.
How long we keep it
We keep requests, accounts and reports while we work together, or for up to 24 months after your last contact with us. After that we delete them. We keep only the minimum needed for the do-not-contact list, so we never email you again.
Your choices and rights
Email hello@citeahead.com to see, correct or delete what we hold about you, or to stop any emails from us. We reply within 30 days. If you are in the EU or UK, we rely on your request (for mini-audits and accounts) and on our legitimate interest in contacting businesses about a service relevant to them (for outreach). You can also complain to your local data protection authority. If you are in California, we don't sell or share personal information for advertising.
Client content
Anything we publish for a client, such as pages, answers or listings, is approved by the client before it goes live. We don't make medical, legal or financial claims on a client's behalf.
Changes
If this policy changes, we'll update the date at the top of this page.