Cited. Last updated 9 July 2026.
When you run a free scan we collect the product name you enter, your work email address, the trade you select, and your IP address. When you buy a Fix Plan or monitoring subscription, payment is processed by Stripe; we never see or store your card details. If you email us, we keep the correspondence.
Your email is used to deliver your scan results and, because the scan exists to surface gaps, to tell you how the paid Fix Plan addresses them. That is the full extent of it: no lists are sold, no third-party marketing, no advertising profiles. Your IP address is used for abuse prevention: a daily per-IP scan cap. To enforce that cap it is kept in our scan log alongside the submission; it is never used for marketing or profiling. Scan outputs about your product are kept so that re-scans can be compared against a baseline.
For scan delivery and follow-up about the service you requested: legitimate interest (B2B correspondence about a business tool you asked us to run). We have balanced this against your interests: you initiate the scan, the follow-up is limited to your own scan results and the directly related paid options, it goes to the work address you gave us, and every email carries a one-click stop that we honour immediately and permanently. For paid products: contract. You can object or unsubscribe at any time and we stop immediately.
So there are no surprises: submitting a scan means we run queries containing your product name against public AI answer engines, email you the results, and follow up about how the paid Fix Plan addresses any gaps the scan found. This is stated here and at the form itself.
Free-scan submissions and results: 12 months, then deleted. Customer records and paid reports: for the duration of the relationship plus the period UK law requires for business records. Unsubscribes are kept indefinitely so we never contact you again.
Processors only, under contract: Stripe (payments), our email delivery provider, and our hosting provider. Scan queries are run against public AI answer engines; your product NAME is included in queries (it has to be, to check whether you are named) but your email and identity are not.
Access, correction, deletion, portability, objection. Email privacy@citedscan.com and we will act within 30 days. You may also complain to the ICO (ico.org.uk).
Cited. Email: privacy@citedscan.com.