UPDATED 6 OCTOBER 2026

Your privacy at Citequay.

Citequay is operated by Synapsek Labs PTY LTD. Contact support@citequay.com for privacy questions, access, correction, deletion or complaints.

What we collect and why

When you request a check, we fetch public website pages and store the URL, extracted business facts, findings and requested AI observations to prepare your report. Do not submit confidential, regulated or login-only data. URL queries and fragments are removed before crawling.

When you sign in, Supabase verifies your email code. We store your account identifier, email, saved businesses, reports, task notes, activity and usage allowances to operate your workspace. Essential session cookies maintain sign-in. Rate limits use temporary hashed IP/email identifiers to limit abuse. Hosting providers may retain security and request logs separately.

AI research and connected services

Buyer-question research sends your confirmed business category and market to the provider named in the check. The target name is used for matching after the response, not included in buyer prompts. A business review sends the saved public website extracts and findings. OpenRouter may route requests to the named model provider; the relevant providers’ data policies apply.

Vercel hosts the application; Supabase provides authentication and database storage; Microsoft 365 delivers support and sign-in email; Stripe processes subscriptions and payment details. Citequay stores billing references and status, not card numbers. Shopify access tokens are encrypted on the server. Approved product SEO edits and their originals are stored for the connection session. Google receives a request only when you open Maps or load an optional map.

These service providers operate internationally. Processing and retention can depend on hosting regions and the selected AI route. Contact us for current provider and location information before submitting data subject to special residency requirements. We do not sell your report or contact details.

Analytics

Vercel Web Analytics counts visits and named steps such as starting a check, viewing results and completing the sign-in flow. Custom events do not contain submitted URLs, emails, report IDs, answers or task notes. Page query strings and fragments are removed. Shared-card pages are excluded. Browser blockers may prevent analytics. We use no advertising trackers.

Retention and sharing

• Public report sessions last approximately one hour. Saving a report moves a copy into your account.
• Workspace reports and notes persist until you request deletion. Account-linked import and sharing references are retained to recover retries and manage access.
• Published scorecards expose only the fields you explicitly choose, plus the check date and measurement explanation. Links expire after 30 days and can be revoked sooner. Revocation cannot remove copies recipients downloaded.
• Sign-in sessions last at most seven days. Shopify connections and undo records last at most one hour.
• Early-access enquiries retain your contact details, consent, chosen plan and any attached audit context for up to 90 days on the hosted service.
• Provider logs, backups and legally required billing records may have separate retention periods. Downloaded files remain on your device.

Your choices and requests

Use Account & data to export your workspace. Edit business details and task notes in the dashboard. To request access, correction or deletion, email support@citequay.com from your account address and describe what you want changed. We may verify your identity. Canceling a subscription does not delete your account; deleting an account does not by itself confirm subscription cancellation. Ask us to handle both when needed. We will explain any records that must be retained and respond to your request.

Privacy concerns

Email support@citequay.com with the details of your concern. We will investigate and respond, aiming to do so within 30 days. If unresolved, you may contact the privacy authority applicable to your circumstances. Australian privacy complaint guidance is available from the OAIC.

Updates

We will update the date on this notice when our practices change. Contact support if you need an explanation of a change affecting your account.