Privacy policy
Controller: Citeqly Ops Ltd (CRO 788421, Ireland) · Last updated 15 January 2026
Controller
Citeqly Ops Ltd, CRO 788421, registered office: The Academy, 42 Pearse Street, Dublin 2, D02 YA89, Ireland. Privacy contact: privacy@citeqly.com. Lawful bases: contract performance for pilots/workspaces; legitimate interests for product improvement that does not train on customer content.
What we collect
Pilot intake: name, work email, company, notes. Workspace: work email for approval attribution; policies, questionnaires, drafts, approvals, audit events you create.
How we use it
To run Citeqly (cited DDQ drafts, approve/export, pilot reports) and schedule pilots. We do not sell personal data. Customer content is not used to train foundation models.
Hosting, processors & retention
Production pilot workspaces are hosted in the EU (Ireland region). Primary processors: Vercel (EU app hosting), managed Postgres in EU (Supabase EU), OpenAI API for drafting only on retrieved policy chunks (standard contractual clauses for any US processing). DPA and subprocessor register are published before paid pilot kickoff. Retention: pilot workspaces deleted within 30 days of engagement end unless you request a longer export retention window.
Your rights
Access, rectification, erasure, restriction, portability, and objection under GDPR. Contact privacy@citeqly.com. Supervisory authority: Irish DPC (or your local EU SA).