Privacy policy

Who we are

CiteLead is a product of StartPro Corp., a company in Canada. StartPro Corp. is responsible for the personal information described on this page. Questions about your information, and requests about it, go to StartPro Corp.'s privacy officer at hello@getcitelead.com. We give the officer's name on request.

What we collect, and why

When you run the free audit

We collect the website address you enter and the report we build from that site's public pages. We do not ask for your name or email address to run an audit, and the report does not record who asked for it.

A report is kept for 24 hours, so the same site is not crawled again in that time. During those 24 hours anyone who opens the report's address can see it; search engines are told not to index it. Then it is deleted automatically.

When you create an account

To run your account we keep your email address, a hash of your password, the sites you add, the audits you run from your account and a record of each signed-in session. The hash is made with a one-way function, so we cannot turn it back into your password and never see the password itself. You can add up to 5 sites, and we keep the last 50 audits of each; an older one is deleted when a newer one is saved. Audits you run from your account are not published at a public report address.

When you sign in, your browser keeps one cookie, __Host-cl_session. It holds a random code that keeps you signed in and nothing else. We store only a hash of that code, with the time the session started and ends. A session ends 30 days after you sign in, or when you sign out; signing out deletes its record and the cookie.

We send no email yet: no confirmation and no password reset. If you forget your password, write to hello@getcitelead.com from the address you signed up with.

When you set up Instagram

To set up Instagram for a site, we keep the business details you confirm: business name, category, city or service area, phone, WhatsApp, public email, time zone, your main goal and where people book. We visit the booking link you give to check that it works.

You connect Instagram through your own Zernio account. You paste your Zernio API key; we keep it encrypted, show only its last four characters, and use it only to connect and run that site's Instagram. We also keep the IDs of the Zernio profile and Instagram account we use, the Instagram username, and the Zernio user ID the key belongs to. We add one notification address to your Zernio account so it can tell us when Instagram connects or disconnects, and keep the ID of each notice for 30 days so none is applied twice. Zernio handles your Instagram connection under its own privacy policy. We never see your Instagram or Zernio password.

Your voice

If you choose to narrate your posts in your own voice, you first agree to a short statement and read it aloud at the start of your first recording. We keep that statement, its version and the time you agreed, as a record of your consent. Your recordings are stored with our hosting provider, Cloudflare. ElevenLabs makes a copy of your voice from them (a voice clone), which we use only to read the scripts of your own Instagram posts. Our ElevenLabs account is set so that ElevenLabs does not use your voice to train its models. If you use your own ElevenLabs key, the clone is made in your ElevenLabs account, under ElevenLabs' terms and your settings there. You can delete your voice at any time: that deletes the clone at ElevenLabs and your recordings. ElevenLabs may keep some of this data for a time under its own privacy policy.

Your posts

To write your posts we send your business details and style answers to Claude, an AI model made by Anthropic, which writes the text under Anthropic's terms. We do not send your password, your keys or anyone else's personal information. The images, videos and narration we make for your posts are stored with Cloudflare and sent to Zernio when a post you approved is scheduled.

The early-access waitlist

The waitlist is closed today, so this site does not keep email addresses for it. When it opens, and only if you tick its consent box, we will keep your email address, the website you enter (optional), and the date and wording of the consent you gave. We will use them only to contact you about early access to CiteLead, and we will never visit or check the website you enter; we will only store it.

When you write to us

If you email hello@getcitelead.com, for example to hear when paid plans open, we use your address and your message only to answer you and to do what you asked.

To stop abuse

To limit how many audits, sign-ins and sign-ups can come from one place, we count requests per IP address (for IPv6, per network block). To slow down password guessing, we also count sign-in attempts per email address, using a hash of the address. These counters reset after about a minute. Your IP address is not stored with a report, an account.

The bot check (Cloudflare Turnstile)

The audit form, the sign-up and sign-in forms use Cloudflare Turnstile to check that a person, not a bot, sent them. It runs in your browser and sends information about your browser and connection to Cloudflare, which handles it under its own privacy policy. We receive only the result of the check.

Technical logs

Like any website, CiteLead keeps technical logs to run and secure the service. They record the website that was audited and whether the audit worked and, like any web server's logs, can include your IP address and browser type. They never contain your email address or your password. Cloudflare keeps them for 7 days, then deletes them.

What we do not do

• We do not sell, rent or trade personal information.
• We use no advertising or tracking pixels, no third-party analytics and no advertising cookies. Our site sets one cookie of its own, the sign-in cookie described above, and only when you sign in.
• We send no newsletters or marketing email. When early access opens, we will write to the people who asked to hear about it. Every email we send will name StartPro Corp., give our contact details and let you unsubscribe in one step.
• We do not give your email address to anyone else, except the service providers that host CiteLead and our email for us (see below).

How long we keep it

• Audit reports: 24 hours, then deleted automatically.
• Your account, its sites and saved audits: until you delete the account. "Delete my account" removes all of it at once.
• Sign-in sessions: 30 days at most, and deleted when you sign out or delete your account.
• Instagram setup for a site (business details, the encrypted Zernio key, account IDs): until you remove the key, remove the site or delete your account. Removing them also removes our notification address from your Zernio account; your own Zernio profiles and accounts stay yours.
• Zernio notice IDs: 30 days.
• Your voice recordings and clone: until you delete your voice or your account. The consent record: as long as your account exists, then deleted with it.
• Posts we make for you, with their images, videos and narration: until you delete your account.
• Narration usage counts: per month, deleted with your account.
• Waitlist entries, once the waitlist opens: until 12 months after we send the invitation to early access, then deleted. We delete yours sooner if you ask.
• Emails you send us: only as long as we need them to answer you and do what you asked. We delete yours sooner if you ask.
• Abuse counters: about a minute.
• Technical logs: 7 days.

Where your information is processed

CiteLead runs on the network of Cloudflare, Inc. Your information may be stored and processed outside Canada, including in the United States, where courts and authorities may be able to access it under the laws there.

Your rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) you may ask what personal information we hold about you, ask us to correct it, and withdraw your consent at any time. Withdrawing your consent for the waitlist means we delete your entry. You can delete your account and everything in it yourself, with "Delete my account" on your account page, or ask us to. Write to hello@getcitelead.com; we answer within 30 days.

If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada.

Changes to this policy

If we change this policy, we update this page and the date at the top. We will not use your email address for a new purpose without asking you first.

Contact

StartPro Corp., Canada. Email hello@getcitelead.com.