Privacy Policy

This policy explains how Cites X ("Cites X", "we", "us") handles personal information when you visit citesx.com, request access, or use the Cites X application (together, the "Service"). Using the Service means you agree to this policy.

Information we collect

• Details you give us: your work email, and optionally your name, company, role and plan interest when you request access or contact us.
• Workspace data: the clients, contacts, brand strategies, campaigns, pitches and content you create in the app, plus the activity needed to operate features.
• Connected mailbox: if you connect Gmail or Microsoft 365, we use that access only to send the pitches you send and to read replies to those pitches so we can match and classify them. We do not read your wider mailbox, and you can disconnect at any time.
• Technical data: IP address, browser type, pages viewed and similar server logs, for security and to improve the Service.
• Preferences: small cookies that remember your language and display currency.

How we use it

To operate and secure the Service, to send pitches and read their replies on your instruction, to tell you when access opens, to respond to your requests, to improve features and to meet legal obligations.

AI processing

Cites X uses AI models to draft and refine content you ask it to produce (angles, pitches, brand documents, articles). The text you submit for a given task may be sent to the AI provider serving that request (for example a free or paid model provider) solely to produce your result. We do not sell your content, and we do not permit providers to train their models on it beyond what their terms require. A free model tier runs by default; you are never charged per model call.

Legal bases (where GDPR or similar applies)

We process personal information to perform our contract with you, for our legitimate interests in running and improving the Service, with your consent where required (for example non-essential cookies, or a Hong Kong PDPO direct-marketing approach), and to comply with the law.

How we share it

We do not sell your personal information. We share it only with the service providers that help us run Cites X (hosting, email delivery through your own connected mailbox, AI model providers for the tasks above), under confidentiality obligations, and where required by law or to protect rights and safety. Each account's data is isolated from every other account.

Outreach and consent

When you send outreach through the Service, you are the sender and are responsible for having a lawful basis to contact each recipient. The Service helps you comply: it checks a do-not-contact (suppression) list before every send, honours unsubscribe requests, and applies a Hong Kong PDPO consent gate. A removal persists even if the contact is re-imported later.

Retention

We keep personal information only as long as needed for the purposes above, then delete or anonymise it. Access-request details are kept until launch or until you ask us to remove them.

Security

We use reasonable technical and organisational measures, including per-account isolation and keeping secrets, tokens and credentials off the public web. No method is perfectly secure, but we work to keep your information safe.

Your rights

Depending on where you live, you may have the right to access, correct, delete or port your data, to object to or restrict processing, and to withdraw consent. To exercise any of these, email ask@citesx.com and we will respond within a reasonable time.

International transfers

Cites X operates from Asia and may process data in other countries. Where required, we use appropriate safeguards for international transfers.

Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their data.

Changes

We may update this policy as the Service grows. We will post the new version here with a fresh date and note material changes.

Contact

Questions about privacy? Email ask@citesx.com. See also our Terms of Service.