Your AI understands your users.Your data stays yours.

Four commitments backed by service-level guarantees, contractual obligation, or both.

C1

Data subject rights (GDPR aligned)

Citaria honors data subject rights per GDPR Article 15-21: deletion within 30 days of a verified request, data export within 30 days of a verified request, and breach notification within 72 hours to affected customers and regulators.

C2

Encryption

All customer data is encrypted at rest with AES-256 and in transit with TLS 1.3 across every storage layer — database, object storage, and backups. Encryption keys are managed by our cloud providers; Citaria never holds raw encryption material.

C3

Access control & auditability

Workspaces are isolated by row-level security in our database, enforced at every read path. No Citaria employee accesses customer content during normal operation. Direct content access for incident response requires your prior consent and is logged.

C4

Sub-processor transparency

We publish the full list of sub-processors with whom your data may be shared (see Section 3 below). Any material change — adding, removing, or changing the role of a sub-processor — is announced to customers under a Data Processing Agreement at least 30 days before taking effect.

The services we use to deliver Citaria. Each is bound by a Data Processing Agreement and acts only on our processing instructions.

How we tell you about changes: Any addition, removal, or change in role of a sub-processor is announced to customers under a Data Processing Agreement at least 30 days before the change takes effect.

Can other Citaria customers see my data?

No. Row-level security ensures full isolation between workspaces. Every read path in our service includes the customer’s workspace identifier as part of the database query, enforced at the database layer.

Who at Citaria can access my data?

No Citaria employee accesses customer content in normal operation. Engineering access is limited to operational metadata (logs, performance metrics) without content. Direct content access for incident response requires your prior consent.

Do you use my data to train AI models?

No. Anthropic, OpenAI, Google, and AssemblyAI all operate under zero / no-training policies for our account (see Sub-processors above). Citaria itself does not train any model — we use these third-party providers under their public API terms, which prohibit training on customer data.

Do you sell or share my data with third parties?

No. We never sell customer data. Sub-processors (listed above) are used solely to provide the service. They are bound by Data Processing Agreements and processing instructions that prohibit any other use of your data.

Where is my data stored?

All data resides in North America — see the Sub-processors table above for per-vendor location. EU residency is not available in our current generation; please contact us if this is a requirement.

Is my data encrypted?

Yes. TLS 1.3 in transit; AES-256 at rest across all storage layers (database, object storage, backups).

How long do you keep my data after I delete it?

When you delete data: (1) immediately, removed from your view in the product (soft delete); (2) 31 days later, hard purge from the active database and object storage cleanup; (3) +7 days, daily backup snapshots containing the data expire. Total physical retention is approximately 38 days from the moment you initiate deletion. The 30-day GDPR deletion SLA (Commitment 1 above) is measured from your verified deletion request to the completion of step 2.

What if there’s a security breach?

We notify affected customers within 72 hours of discovering an incident, per GDPR Article 33. Notifications include what data was affected, the nature of the incident, and the steps we are taking to remediate and prevent recurrence.

Can I export my data?

Yes. Submit a data portability request to privacy@citaria.com; we fulfill within 30 days per GDPR Article 20.