Legal

Privacy Policy

Cite Me is built to improve how AI search engines cite your store — using only your own store content. It never reads your orders or customers.

Last updated: July 2, 2026

PCD LEVEL 0

Summary

Cite Me is a Shopify app that predicts and improves your store's citability in AI search (ChatGPT, Perplexity, Google AI Overviews) and helps you generate and optimize on-page content. It operates at Protected Customer Data Level 0: it does not request or read orders, customers, or checkouts. Measurement, when enabled, is a consent-gated first-party Web Pixel that records commercial signals only — never personal information.

Data we collect

Store content

Product titles & descriptions, pages, blog articles, policies, collections and publication status — read via the Shopify Admin API to score citability and ground generated drafts. Also public storefront resources (robots.txt, llms.txt, sitemap.xml, rendered page HTML) read like any visitor.

Measurement signals (Web Pixel)

If you enable measurement, a first-party, consent-gated Shopify Web Pixel records only: purchase value and currency, the page path, the traffic channel, and a hashed dedupe key. Nothing more.

Shop & account data

Your shop domain, app settings, billing/subscription status, generated content drafts, and encrypted Shopify access tokens — the operational data needed to run the app.

Optional Google connect

If you connect Google Search Console / Analytics (GA4), we read your ownaggregate search & traffic metrics via read-only OAuth. This is optional and revocable at any time.

What we never collect

Names, emails, addresses, phone numbers, or any order / line-item data. Cite Me does not request read_orders or read_customers and is structurally unable to read them. The Web Pixel is engineered to capture value + currency + page path + channel + a hashed dedupe key only — it carries no personally identifiable information.

How we use your data

  • Score and improve your store's predicted AI citability.
  • Generate on-page content, FAQs and blog drafts for you to review before publishing.
  • Apply optimizations you approve to product / collection / page content, the theme app embed, and blog articles — all reversible.
  • Report proof-of-value from the first-party pixel (revenue by channel) and, if connected, your own Google metrics.
  • Operate billing, support, and the app itself.

Content changes & reversibility

Optimizations write only to your product / collection / page content, the theme app-embed block, and blog articles — never to orders or customers. Generated content is always a draft you approve before anything is published, and every change is reversible.

Third parties

  • Shopify — the platform that hosts your store and authorizes the app's Admin API access.
  • Anthropic and Google (Gemini / Imagen) — used to generate text and images from your store content only. No orders, customers, or personal data are ever sent to them.
  • Google (Search Console / Analytics) — only if you explicitly connect it, to read your own aggregate metrics.

We do not sell your data or share it for advertising.

Retention & security

  • Encrypted at rest: Shopify access tokens are stored with AES-256-GCM encryption.
  • Zero-retention AI: the content sent to generation models and the responses are not logged or retained; only coarse, non-content metadata (token counts, latency) is recorded.
  • Deleted on uninstall: on app uninstall and on a Shopify shop-redaction request, your data is removed. We honor the mandatory GDPR data-request / data-erasure webhooks.

Your rights (GDPR / CCPA)

Depending on where you operate, you may have the right to access, correct, export, or delete the data we hold, and to withdraw consent for measurement at any time (disabling the Web Pixel stops all signal collection). Because Cite Me holds no customer personal data, most data-subject requests concern only your merchant account data. To exercise any right, contact us at carcucatalin@gmail.com. We also respond to Shopify's customers/data_request, customers/redact and shop/redact compliance webhooks.

Honesty

All citability scores are predicted (heuristic) — not measured AI citations, guaranteed rankings, or rich-result guarantees. We describe likely outcomes, not promises.

Contact & support

Questions about this policy or your data? Email us at carcucatalin@gmail.com. We aim to respond within a few business days.