1. Who we are
Citegram is operated by Citegram SAS, 198 avenue de France, 75013 Paris, France (“Citegram”, “we”, “us”). We are the controller of the account data described below. For the answers you collect for your own project, you are the controller and we act as your processor under our Data Protection Agreement.
2. What we collect
Account data
Your name, work email, company and workspace settings, provided when you sign up or connect the extension.
Collected answers
When you run a collection, the extension sends your project only:
- the text of each AI answer to the questions you configured;
- the links cited in that answer, in order;
- the web searches the assistant ran, where the assistant exposes them;
- the conversation URL, the assistant name and the response time.
What we never collect
- Passwords, cookies or session tokens for any assistant. These never leave your browser.
- Your other conversations, browsing history or the content of tabs you use yourself.
- Payment card details. Payments are handled by our payment provider.
Usage data
Basic technical logs (IP address, browser version, errors) to keep the service secure and working.
3. How the extension works
The extension opens its own background tabs on the assistants you choose and types your questions as you would. Questions are asked as you: they count toward your plan with each assistant and appear in your history there. Bot checks and cookie banners are shown to you and never bypassed.
4. Why we use your data
| Purpose | Legal basis |
|---|---|
| Providing the service and your reports | Performance of our contract with you |
| Security, fraud prevention and debugging | Our legitimate interests |
| Product emails you can opt out of | Consent or legitimate interests |
| Accounting and legal obligations | Legal obligation |
5. Who we share it with
We use the processors below, each bound by data protection terms. We do not sell your data or share it for advertising. Questions about them: privacy@citegram.com.
| Service | Purpose | Entity and location |
|---|---|---|
| Vercel | Hosting of the website and web app | Vercel Inc., United States |
| Fly.io | Hosting of the API and database | Fly.io, Inc., United States |
| Stripe | Payments and billing | Stripe Payments Europe, Ltd., Ireland (EU) |
| Brevo | Transactional email | Sendinblue SAS (Brevo), France (EU) |
| PostHog | Website analytics; session replay with your consent | PostHog Inc. (EU Cloud), EU hosting (Germany) |
| Sentry | Error monitoring | Functional Software, Inc., United States |
| Sign in with Google | Google Ireland Limited, Ireland (EU) |
6. Website analytics and cookies
On this website we measure visits with PostHog (EU cloud). By default this is anonymous and uses no cookies or local storage: we count page views, clicks on our buttons and technical errors, without building a profile of you.
If you click “Accept” on the cookie banner, we also record how the site is used (session replay, with every input masked) and keep an identifier in your browser so visits across pages are linked. You can change your choice at any time with “Cookie settings” in the footer; your choice is kept for 6 months. The banner itself only stores that choice.
7. How long we keep it
Collected answers are kept for as long as your workspace exists, so you can follow trends over time. You can delete a run or your whole workspace at any time. Account data is deleted within 30 days of closing your account, except where the law requires us to keep it longer.
8. Security
Data is encrypted in transit and at rest. Each browser connects with its own revocable token; disconnecting the extension or signing out removes local data and any answers not yet sent.
9. International transfers
Where data leaves the European Economic Area, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses.
10. Your rights
You can access, correct, export or delete your data, object to or restrict its processing, and withdraw consent at any time. Write to privacy@citegram.com. You can also complain to your local data protection authority.
11. Changes
We will post any change here and update the date above. Material changes will be announced by email or in the product before they take effect.