Privacy Policy

1. Who We Are

TrueCite is an Answer Engine Optimization (AEO) platform operated by AI Collective Labs Inc., incorporated in Canada. Our registered address is AI Collective Labs Inc., Calgary, Alberta, Canada. For privacy inquiries, contact us at hello@truecite.ai.

2. Information We Collect

Account information: When you sign up, we collect your email address, name, and authentication credentials via Clerk (our auth provider).

Business information: Business name, website, industry, target location, and description you provide during onboarding.

Usage data: Scan history, MentionShare scores, fix blocks generated, and feature usage within the platform.

Payment information: Billing is handled by Stripe. We never store your card details — only your Stripe customer ID and subscription status.

Technical data: IP address, browser type, and usage analytics via standard web logging.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following lawful bases:

• Contract performance: Processing your account data and running scans to deliver the service you signed up for
• Legitimate interests: Improving our platform, preventing fraud, and ensuring security
• Consent: Sending marketing emails (you may opt out at any time)
• Legal obligation: Retaining billing records as required by law

4. How We Use Your Information

• To provide and improve the TrueCite platform
• To run AI visibility scans on your behalf
• To generate fix content using Claude (Anthropic API)
• To send transactional emails (scan results, billing receipts)
• To send Slack notifications if you configure a webhook
• To process payments via Stripe
• To provide customer support
• To comply with legal obligations

5. Third-Party Services

We use the following third-party services to deliver TrueCite:

• Clerk — Authentication and user management
• Supabase — Database and storage (hosted on AWS us-east-1, North Virginia)
• Stripe — Payment processing
• Anthropic — AI content generation (Claude API)
• Vercel — Hosting and edge network
• Resend — Transactional email delivery

Each provider processes data under their own privacy policies and data processing agreements. Your data is stored on servers located in the United States. If you are located in the EEA or UK, this constitutes an international data transfer. We rely on standard contractual clauses and adequacy decisions as the legal mechanism for such transfers.

6. Data Retention

We retain your account data for as long as your account is active. Scan data is retained according to your plan (90 days Lite/Starter, 1 year Pro/Enterprise). You may request deletion of your data at any time by contacting privacy@truecite.ai.

7. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data (“right to be forgotten”)
• Portability: Export your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request we restrict processing of your data
• Opt-out of sale (CCPA): We do not sell your personal data

To exercise any of these rights, email privacy@truecite.ai. We will respond within 30 days. EEA users have the right to lodge a complaint with their local supervisory authority.

8. Cookies

We use essential cookies for authentication and session management, and optional analytics cookies (Vercel Analytics — anonymous only). We do not use advertising or tracking cookies. See our Cookie Policy for full details.

9. Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), AES-256 encryption at rest, row-level security in our database, and regular security audits. However, no system is 100% secure — please use a strong, unique password.

10. Children's Privacy

TrueCite is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at privacy@truecite.ai and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. We'll notify you of significant changes by email or via an in-app notification. The “last updated” date at the top of this page indicates when it was last revised.

12. Contact Us

For privacy-related questions or requests, contact us at privacy@truecite.ai or write to AI Collective Labs Inc., Canada.