Privacy policy
What we collect, what happens to the documents you give us, and what you can ask us to do about it.
Last updated: 29 July 2026
The short version
- Your documents are yours. We do not sell them and we do not publish them.
- To check a claim we send it, and the text of the pages we fetched to check it, to an automated language model. That is how the product works.
- We keep the content you submit and use it to make our checks better.
- You can ask for a copy of your data or ask us to delete it.
The rest of this page is the detail behind those four points. If anything here is unclear, ask us at info@citationcheck.ai and we will explain it in plain words.
Who we are
Keywordee, a sole proprietorship registered in British Columbia, registered at Burnaby, British Columbia in Canada, is the controller of the personal data described here. Reach our privacy contact at info@citationcheck.ai.
What happens to your draft
This is the part most people want answered first, so here it is in order.
- You paste or upload a document. It is sent to our servers so we can read it.
- We split it into claims. For each claim we search for candidate sources and fetch those pages from the public web.
- We send the claim and the text of those fetched pages to an automated language model, which judges whether the page supports the claim and returns the passage it relied on.
- We send back the results. If you choose to insert citations or export a file, your document is processed again to place the citations and build the reference list.
Two things follow from that, and both are worth being explicit about. Parts of your text leave our servers, because judging a claim requires a language model to read it. And the sites you cite will see a request from us for the page, though they do not see your document.
We keep your document for as long as we need it to provide and improve the service, and your results as long as we need them to provide and improve the service, and in your browser for as long as you keep them there. You can ask us to delete yours at any time and we will.
We may use the content you submit, and what you do with the results we show you, to operate, develop and improve our products and services. We do not sell your content and we do not publish it.
When you act on something we show you — accepting, editing or rejecting a suggested change, or keeping or replacing a source — we keep the content you submit and what you do with the results we show you — to measure how often our checks are right, and to make them better. We keep what the decision applied to along with the sentences around it, because a suggestion read apart from its context tells us very little about whether we were right. If you would rather we did not, email us and we will exclude your account.
We may use and share information that has been de-identified so it can no longer reasonably be used to identify you, and we will not attempt to re-identify it.
What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Content you submit | Drafts, pasted text, uploaded files, URLs you ask us to check | You |
| Results we produce | Claims, verdicts, quoted passages, the sources we found | Generated by the service |
| Decisions you make | Whether you accepted, edited, rejected, kept or replaced something, and the part of your text it applied to | You, by acting on it |
| Account data | Email address, name, sign-in method, session records | You, or your Google account if you sign in that way |
| Billing data | Plan, billing history. Card details are handled by our payment provider, not by us | You, via the payment provider |
| Technical data | IP address, browser type, pages viewed, timestamps, error reports | Collected automatically |
| Messages | What you send us by email or through a form | You |
Why we use it
- To run the service. Reading your draft, finding and checking sources, and building your exported document.
- To keep an account working. Signing you in, remembering settings, applying your plan.
- To take payment and to keep the records the law requires us to keep.
- To keep the service up and safe. Diagnosing faults, preventing abuse, enforcing usage limits.
- To improve it. Understanding which parts are used and where they fail, in aggregate.
- To talk to you about your account, and about the product if you have asked us to.
Where the UK or EU GDPR applies, our legal bases are performance of a contract for running the service and billing, legitimate interests for security, diagnostics, and improvement, consent for optional cookies and marketing email, and legal obligation for records we must keep.
Who we share it with
We share data with the service providers we need to run the product: hosting, our database, the crawler that fetches cited pages, and the automated model that reads them. They act on our instructions and may not use your data for their own purposes. Write to us for the current list of providers and what each one receives.
We also disclose data where the law requires it, and we would transfer it as part of a merger or acquisition, in which case we would tell you before it happened. We do not sell personal data, and we do not share it for cross-context behavioural advertising.
How long we keep it
| Data | Kept for |
|---|---|
| Documents you submit | as long as we need it to provide and improve the service |
| Verification results | as long as we need them to provide and improve the service, and in your browser for as long as you keep them there |
| What a decision of yours applied to | what a decision applied to, what we suggested and what you chose, for as long as we need it to improve our checks |
| Account data after you delete your account | 30 days after you ask us to close your account |
| Operational and security logs | 30 days |
| A waitlist email address | until you ask us to remove you, or until we launch and email you |
| Billing records | As long as tax and accounting law requires |
Where your data is processed
We and our providers process data in more than one country. Where data leaves the UK or the EEA, we rely on the safeguards the law provides for that transfer, such as standard contractual clauses or an adequacy decision.
Your rights
Depending on where you live, you can ask us to do the following.
- Give you a copy of the personal data we hold about you.
- Correct it if it is wrong.
- Delete it.
- Restrict or object to how we use it.
- Send it to you, or to someone else, in a portable form.
- Withdraw consent you gave earlier, without affecting what we did before you withdrew it.
Write to info@citationcheck.ai and we will respond within the time the law allows. We will not charge you or treat you differently for asking. If you are unhappy with our answer you can complain to your data protection regulator.
Cookies
We keep what we store in your browser to a minimum, and the detail is on the cookie policy page.
Children
The service is not for children under 13. We do not knowingly collect their data, and we delete it if we find we have. If you believe a child has given us data, tell us at info@citationcheck.ai.
Security
How we protect what you send us, and how to report a vulnerability, is on the security page. No system is perfectly secure, and we will tell you and the relevant regulator if a breach affects you, within the time the law requires.
Changes to this policy
We update this page as the product changes. When a change is significant we will say so here and, if you have an account, email you before it takes effect.
Contact
Keywordee, a sole proprietorship registered in British Columbia, Burnaby, British Columbia. Privacy questions and requests: info@citationcheck.ai.