Legal

Privacy Policy

What we collect, and where it comes from

To identify candidate businesses, we use Google Places to find a business's location and public website — nothing more. We deliberately never store a business's name, phone number, or address from Google Places; those fields are excluded at the code level, not just by policy.

For prospect enrichment, contact information we store (business name, email address, phone number, street address) is taken only from a business's own public website — never purchased, scraped from a third-party directory, or sourced from Places. Location coordinates used to find nearby businesses are deleted automatically 30 days after collection.

If you request an audit, we also collect the business website, business name, service-area city, state and trade that you submit. No email address or account is required. We provide a private status link; anyone you share that link with can view the request status. Submission does not automatically start a paid scan or enroll the business in cold outreach. Request throttling uses an IP address temporarily in application memory; the request record does not store it. Customers may also provide corrected business details directly.

How we use it

We use this information to run an AI visibility audit for a business and, where relevant, to contact that business about the audit and our services by email. We do not sell, rent, or share this information with third parties for their own marketing purposes.

What an audit contains

An audit records the real, dated responses of AI answer engines to real search queries, along with publicly available signals about a business (its Google Business Profile completeness, on-site structured data, review counts, and content freshness). Every figure shown on an audit traces to a specific recorded response — nothing is estimated or asserted without a stored record behind it.

Email and opt-out

If you receive an email from us and reply asking to stop, unsubscribe, or be removed — in any wording — we honor that immediately, permanently, and across every list, no exceptions and no further contact. Every email we send also includes a one-click unsubscribe link that does the same thing instantly.

Customer data, if you become a customer

If you engage Citeworks as a paying customer, we may be given temporary access to accounts (e.g. Google Business Profile) to perform the agreed work. We use that access only for that purpose. Calls to your tracking phone number that are answered are recorded; callers hear a notice that the call may be recorded before being connected. We use these recordings internally to verify the number is working and to resolve disputes — we do not generate transcripts, and we do not share the recordings themselves with you. What you see in your portal and monthly report is call activity: the date, duration, and the caller's number masked to its last four digits.

Cookies and tracking

This website does not use tracking cookies or third-party analytics. On our audit and offer pages, we may count page visits and checkout starts to understand how people use our service. These records contain a business reference, the type of activity, and its time; they do not contain your IP address or a visitor identifier.

Your rights

You can ask us what information we hold about your business, ask us to correct it, or ask us to delete it, at any time — see Contact.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.