Privacy Policy

Overview

CitationOS ("CitationOS," "we," "us," or "our") operates the website at www.citationos.ai. This Privacy Policy explains what information we collect when you submit an audit request, how we use it, and your rights regarding that information.

By submitting information through our audit request form, you agree to the practices described in this policy. If you do not agree, please do not submit the form.

Information we collect

We collect only the information you voluntarily provide through our AI Visibility Audit request form. This includes:

• Full name
• Email address
• Law firm website URL
• Firm size (number of attorneys)
• Primary practice area
• Primary market (city and state)

We do not collect payment information, Social Security numbers, government-issued ID numbers, or any sensitive personal information beyond what is listed above.

We may also automatically collect standard server log data when you visit our website, including your IP address, browser type, referring URL, and pages visited. This data is used solely for security and site performance monitoring.

How we use your information

Information submitted through the audit request form is used exclusively to:

• Prepare and deliver your confidential AI Visibility Audit report
• Communicate with you about your audit, findings, and our services
• Respond to questions or follow-up inquiries you initiate
• Improve the quality and relevance of our audit methodology

Data sharing and disclosure

We do not share your personal information with third parties except in the following limited circumstances:

• Service providers who assist in delivering our services (such as email delivery or document hosting), bound by confidentiality obligations and prohibited from using your data for their own purposes
• When required by law, court order, or lawful government request
• To protect the rights, property, or safety of CitationOS, our clients, or the public
• In connection with a merger, acquisition, or sale of all or substantially all of our assets, in which case we will notify you before your information is transferred

Data retention

We retain your personal information for as long as necessary to deliver your audit, maintain our business records, and comply with applicable legal obligations. Audit request data is typically retained for 36 months following delivery of your report. You may request deletion at any time (see Your Rights below).

Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our website is served over HTTPS. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your rights — CCPA (California residents)

If you are a California resident, the California Consumer Privacy Act provides you the following rights:

To exercise your California rights, contact us using the information at the bottom of this page. We will respond within 45 days as required by law.

Your rights — Florida FIPA

CitationOS is headquartered in Florida and complies with the Florida Information Protection Act (FIPA), Fla. Stat. Section 501.171. In the event of a data breach involving your personal information, we will notify affected individuals and the Florida Department of Legal Affairs within the timeframes required by FIPA.

Your rights — GDPR (EEA and UK residents)

If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, including:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing

Our lawful basis for processing your data is your consent, given when you voluntarily submit the audit request form. You may withdraw consent at any time by contacting us. To exercise any GDPR right, contact us using the details below and we will respond within 30 days.

Cookies and tracking

Our website does not currently use third-party advertising cookies or behavioral tracking technologies. Standard server logs are maintained for security purposes. If this changes, this policy will be updated and you will be notified.

Children's privacy

Our services are directed exclusively to legal professionals and senior decision-makers at law firms. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a minor, we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or submission of information after any changes constitutes acceptance of the updated policy.