Privacy Policy

1. Data Controller

Citly.ai is the data controller for personal data processed via the service. Contact: contact@citly.ai.

2. What information we collect

• Account information (name, email, company)
• Activity in the app (reports, runs, settings)
• Technical information (IP address, browser, device type)
• Payment data is processed by Stripe — we never store card details.

3. Purpose

We process data to deliver and improve the service, invoice, provide support, and fulfill legal requirements.

4. Legal basis

Processing is based on contract (GDPR art. 6(1)(b)), legitimate interest (art. 6(1)(f)) and consent where relevant.

5. Your rights

You have the right to access, rectify, erase, port your data, and withdraw consent. Send requests to contact@citly.ai.

6. Retention

Data is retained while you have an account with us, and deleted within 90 days of cancellation, unless law requires longer retention.

7. Sub-processors

We use Supabase (databases), Stripe (payments), Resend (email) and OpenAI/Google (AI models). All have a data processing agreement.

8. Right to complain

You can complain to the Norwegian Data Protection Authority (datatilsynet.no) if you believe we process data in breach of privacy law.