DRAFT — OWNER TO REVIEW · Not legal advice

Privacy notice

Information you submit

We store the email, public store address, language selection, consent and audit needed to provide your private workspace. Paid orders also store provider identifiers, payment status, confirmed onboarding facts and generated kit files. Card and wallet details are handled by the payment provider and are not collected by CitedCart.

Public information the audit fetches

The audit requests the home page, a public catalog feed where available, a sampled product page, robots.txt, llms.txt and the UCP discovery URL. It retains selected product descriptions, structured data, response statuses, source links and timestamps. It does not log into stores or read customer accounts.

Providers and AI explanations

Cloudflare hosts application data and renders private report PDFs. Creem handles the primary hosted checkout; the secondary PayPal integration is sandbox only. Resend sends account messages when configured. Public audit evidence and catalog samples may be sent to Ollama Cloud to write report explanations; email, private onboarding details and credentials are excluded from those model prompts.

Cookies and analytics

Necessary HttpOnly cookies keep your workspace and order-specific delivery private. Checkout creates the browser session before payment. A signed private purchase link can reopen that one purchase for thirty days; it is not full account access. Email sign-in is a recovery option, not a required delivery step. PostHog, if configured, uses memory-only persistence with no analytics cookies, autocapture, person profiles or session recordings. Funnel events contain only approved categories, such as product package and score range. We exclude emails and store URLs, strip browser URL properties, overwrite IP event properties and disable GeoIP enrichment. The owner must also configure PostHog to discard client IP data before enabling the project key. Anonymous identifiers are generated independently of customer and order identifiers. An optional Cloudflare Web Analytics slot is restricted to public pages without query strings.

Retention and requests

Audit, order, report and kit records remain until the operator deletes them. Expired access tokens and sessions are cleaned during scheduled maintenance. A broader retention schedule is not yet implemented. Request access or deletion using the contact page; the owner must review legal retention obligations and finish the operator’s identity and jurisdiction before launch.