C CiteDo ← Back to Home

Privacy Policy

Last Updated: August 28, 2026 • Effective Immediately

1. Overview & Commitment to Privacy

CiteDo ("we", "our", or "us") provides AI search optimization (AEO/GEO), automated robots.txt management, and dynamic /llms.txt feed syndication for website and Shopify store owners. We operate under strict privacy-by-design and data minimization principles.

2. Information We Collect

When you install the CiteDo Shopify App or use our web platform, we only collect the minimum information required to provide our search optimization services:

  • Store Metadata: Your Shopify domain name (e.g. brand.myshopify.com) and primary public store email.
  • Public Catalog Information: Public product titles, descriptions, prices, handles, and availability for the purpose of generating your store's /apps/citedo/llms.txt feed.
  • Theme & Robots Configuration: Information on your store's robots.txt rules to ensure AI search bots (GPTBot, ClaudeBot, PerplexityBot) are not blocked.
  • Notification Preferences: Contact email addresses you explicitly provide to receive Weekly Defense Digest reports and critical crawler alerts.
Zero Sensitive Data Access: CiteDo does NOT collect, store, or process any customer personal data, customer orders, payment card details, or store financial records.

3. How We Use Information

Collected information is strictly used to:

  • Run deterministic technical crawlability checks and multi-LLM visibility audits across ChatGPT, Perplexity, and Gemini.
  • Generate and serve your store's dynamic /apps/citedo/llms.txt structured file.
  • Send scheduled Weekly Defense Digests and critical crawler downtime alerts.

4. Data Retention & Deletion

You may uninstall CiteDo at any time from your Shopify Admin. Upon app uninstallation, all store webhook configurations and cached notification preferences are automatically purged from our edge database within 48 hours.

5. Third-Party Services

To deliver diagnostic reports and email alerts, we partner with industry-standard, GDPR-compliant infrastructure providers:

  • Cloudflare Inc.: Global Edge Network, Workers, and KV storage.
  • Resend: Transactional email delivery for Weekly Defense Digests.

6. Contact Us

If you have any questions or data requests regarding this Privacy Policy, please contact our security team at [email protected].