Legal
Privacy Policy
Last updated: October 2026 · Operated by Brightbay LLC
1. Who We Are
Cited is a trading name of Brightbay LLC, registered in the United States. Our website is getaicited.co. We provide Generative Engine Optimisation (GEO) services to B2B insurtech and fintech. For privacy-related queries, contact us at [email protected].
2. Information We Collect
We collect information you provide directly: name, email address, company name, and any details submitted via our contact or audit request forms. We also collect standard website analytics data including pages visited, time on site, referral source, and device type. We do not collect sensitive personal data.
3. How We Use Your Information
Information you submit is used to: deliver the requested GEO audit or service, communicate about your engagement, send service-related updates, and improve our service quality. We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with trusted service providers (payment processors, email platforms) strictly to deliver our services.
4. Legal Basis for Processing
We process your data on the basis of: contractual necessity (to deliver services you have purchased), legitimate interest (to respond to enquiries and improve our service), and consent (for marketing communications, which you may withdraw at any time).
5. Cookies and Analytics
Our website uses cookies to understand how visitors interact with our content. We use analytics tools to measure traffic and engagement. You may disable cookies in your browser settings. Some site features may function differently with cookies disabled. We do not use advertising or tracking cookies.
5a. Browser Extension (Cited: AI Visibility Checker)
The Cited browser extension reads the address of the tab you are on only when you click its icon (Chrome's activeTab permission), and sends that address to getaicited.co to look up a published AI visibility snapshot for the website. It does not read page content, track your browsing, run in the background, or record the addresses it looks up against you. It stores one setting in your browser: an optional partner code. If you request an audit from the extension, we receive the email address you enter and the website you were on, and use them only to deliver that audit; when a partner code is set, that request goes to the agency that gave you the code, which then handles it under its own privacy policy. We do not sell this data or use it for advertising. The extension's use of information follows the Chrome Web Store User Data Policy, including its Limited Use requirements.
5b. AI Assistant Connector (MCP)
If you connect an AI assistant such as Claude or ChatGPT to Cited, you sign in with your Cited email link and approve the connection. The assistant then receives read-only access to the same measurements your dashboard shows. We store hashed access tokens, the app's name and when it was last used, and nothing about your conversations with the assistant: the questions you ask and the answers it gives are handled by that assistant's provider under its own privacy policy. You can disconnect an app at any time from your dashboard, which stops its access immediately.
5c. Google Analytics Connection
If you connect a Google Analytics 4 property, you give Cited's service account read-only Viewer access in Google Analytics yourself. Cited then reads aggregated reports for that property: visit counts by traffic source, landing pages, engaged visits and key events, limited to visits from AI assistants plus the total visit count. We do not read data about individual visitors, store it beyond the cached aggregate report, or use it for any other purpose. You can disconnect in your dashboard and remove Cited's access in Google Analytics at any time; disconnecting deletes the stored report.
5d. AI-Readiness Checker
When you check a website with our free AI-readiness checker, we fetch the same public pages any web crawler can see (robots.txt, the homepage, the sitemap and llms.txt), identifying ourselves as CitedReadinessChecker. We keep the result in server memory for 15 minutes so a repeat check is instant, and we don't store the website you checked or your IP address beyond short-lived rate limiting. If you ask for a free audit from the results, we receive the email address you enter and the website, and use them only to deliver that audit.
6. Data Retention
We retain client data for the duration of an engagement and for seven years thereafter for legal and accounting purposes. Enquiry data from non-clients is deleted after 24 months of inactivity. You may request deletion of your data at any time by emailing [email protected].
7. Your Rights
Depending on your jurisdiction, you may have rights to: access the personal data we hold about you, correct inaccurate data, request deletion of your data, object to processing, and data portability. To exercise these rights, contact [email protected]. We will respond within 30 days.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our systems are hosted on Railway, a SOC 2-compliant cloud infrastructure provider.
9. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated to active clients by email. Continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or to exercise your rights, contact: [email protected] · Brightbay LLC · 15442 Ventura Blvd Suite 201-1406 · Sherman Oaks, CA 91403 · +1 213 460 5908