/ LEGAL
Privacy Policy
Updated: October 21, 2026
Website beta signup
When you join the free beta list, we collect your email address, signup time, and the email-consent wording shown when you submit. We use this information to follow up about beta access and next steps.
If you sign up through one of our campaign links, we also save the campaign labels supplied by that link, such as the LinkedIn post you came from, to understand which invitations lead to registrations. We do not store the full page address or other query parameters with your signup, and this attribution does not use cookies or track you across websites.
The website is hosted by Cloudflare. Signup records are stored in Microsoft Azure in Sweden, with encrypted connections and restricted access. We do not publish or sell the signup list. This form does not collect your desktop files, screenshots, or captured activity.
To unsubscribe or request access, correction, or deletion of your signup information, email mohammaleryani@citesilo.com. We keep signup information while needed to manage beta access and may retain a minimal opt-out record to respect your email preferences.
Website analytics: Microsoft Clarity
We use Microsoft Clarity in cookie-free mode to understand how visitors use this website. Clarity can collect interaction and technical data, including page views, clicks, scrolling, and browser and device information, to help us improve the website.
We tell Clarity that consent for analytics and advertising cookies is denied. This limits features that depend on cookies or visitor consent. If you declined the earlier Clarity prompt, we continue to respect that saved choice and do not load Clarity. The website also uses Google Analytics and Cloudflare Web Analytics.
Microsoft processes Clarity data as described in its Privacy Statement. Clarity concerns website visits, not the files or screen history captured by the CiteSilo desktop app. Contact mohammaleryani@citesilo.com with privacy questions.
1. Who we are
The sections below cover the earlier enterprise workspace product. For the current desktop app, see local storage and capture controls. The website beta signup notice above applies to the current signup form.
CiteSilo ("we", "us") provides a company knowledge platform that connects your team's tools and answers questions about your own data with citations. This policy explains what we collect, why, and the controls you have. Questions: mohammaleryani@citesilo.com.2. Data we collect
- Account data, name, email address, and authentication identifiers when you sign up or are invited to a workspace.
- Connected source content, when a workspace member connects a source (Google Gmail, Google Drive, Slack, or a custom API), we ingest the content that source exposes (e.g. email text, document text, channel messages) so it can be searched and used to answer your team's questions.
- Usage and audit data, actions taken in the product (syncs, queries, configuration changes) are recorded in workspace audit logs, along with technical logs needed to operate the service.
3. How we use data
4. Google user data
When you connect a Google account, CiteSilo requests access to Gmail (gmail.readonly to read and ingest your email, and gmail.send so an automation you configure can send email on your behalf), Google Drive (drive.file, which limits our access to only the files and folders you explicitly choose through the Google Picker, not your entire Drive), plus your basic profile (email address and name). We use this access only to provide CiteSilo's features: ingesting your content into your private workspace index so you can search it and ask questions about it, and sending email only when a workspace admin sets up an automation that does so.
CiteSilo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Google data is used only to provide user-facing features of CiteSilo, search and cited answers inside your workspace.
- We do not use Google data for advertising, and we do not sell it.
- Humans do not read your Google data except with your explicit permission (e.g. support), where required for security or abuse investigation, or where required by law.
- OAuth tokens are encrypted at rest (AES-256-GCM). Disconnecting Google deletes the stored tokens and purges the ingested content from your workspace.
5. Service providers (subprocessors)
6. Storage, security, and data location
CiteSilo runs on European infrastructure. Your workspace content is stored in the EU (Supabase, Ireland), and the AI processing that answers your questions and embeds your text runs in the EU (Google Cloud Vertex AI, Netherlands). Your content is not used to train AI models.
Data is encrypted in transit (TLS) and at rest. Source credentials and OAuth tokens are additionally encrypted with AES-256-GCM application-layer encryption. Workspaces are isolated with row-level security; access within a workspace is controlled by roles (admin, member, viewer) and per-source visibility settings. All sensitive actions are written to an audit log visible to your workspace admins.