Privacy Policy

Information we collect

We collect information you provide, information generated through use of the services, and limited information from connected services. The categories may include:

• Account information such as your name, email address, password credentials, workspace memberships, and authentication details.
• Billing information such as plan, billing cycle, subscription status, invoices, and transaction identifiers. Payment card details are handled by our payment provider and are not stored by Cyted.
• Workspace and brand information such as websites, domains, brand profiles, prompts, competitors, content drafts, publishing records, reports, and team activity.
• Connected-service information from services you authorize, including Google Search Console, Google Analytics 4, and WordPress.
• AI workflow information such as prompts, generated drafts, analysis results, citations, recommendations, and related usage or quota records.
• Technical information such as IP address, device and browser information, request logs, approximate country, timestamps, and security events.
• Support and communications information when you contact us or respond to service messages.

How we use information

We use information to provide, maintain, secure, and improve Cyted. This includes using it to:

• Create and authenticate accounts, operate workspaces, and provide requested features.
• Run AI visibility tracking, content workflows, analytics, reports, and connected WordPress publishing actions.
• Process subscriptions, enforce plan limits, reconcile billing events, and provide customer support.
• Detect fraud, abuse, security incidents, and attempts to bypass quotas or access controls.
• Understand service performance, troubleshoot errors, and improve reliability and product design.
• Communicate with you about your account, transactions, security, service changes, and support requests.

Connected services and third parties

Cyted uses service providers to host, secure, analyze, process payments for, and operate the platform. We share information with providers only as reasonably necessary for those purposes and under appropriate contractual or technical controls.

• Payment processing and billing services, including Polar, receive the information needed to create and manage purchases and subscriptions.
• AI and data providers may process prompts, website content, or related request data to return the service output you request.
• Cloud hosting, database, email, security, monitoring, and storage providers may process service data on our behalf.
• Connected providers receive data only when you authorize a connection or when required to complete a requested workflow.

WordPress credentials and connected data

When you connect WordPress or an analytics property, Cyted processes the credentials, tokens, URLs, and data required for the permissions you approve. Sensitive connection credentials are encrypted at rest and access is limited to the workflows that require them. You can disconnect a service from the platform, but information already processed may remain in backups, logs, reports, or records retained for legitimate business and security purposes.

Retention and deletion

We retain information for as long as needed to provide the services, maintain business and security records, resolve disputes, enforce agreements, and comply with legal obligations. When an account or workspace is deleted, we take reasonable steps to delete or de-identify associated information, subject to backups, legal retention, fraud prevention, and operational records.

International processing

Cyted is based in Sri Lanka and may use providers or process information in other countries. Those countries may have data-protection rules different from the country where you live. By using the services, you understand that information may be transferred and processed internationally, subject to applicable legal requirements.

Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or information about processing. You may also withdraw consent where processing is based on consent. To make a request, contact us at support@cyted.app. We may need to verify your identity and may retain information where the law permits or requires it.

Security

We use administrative, technical, and organizational safeguards designed to protect information. No internet transmission or storage system is completely secure. Please see our Security page for a high-level description of our security practices.

Children

Cyted is a business service and is not directed to children. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided information to us, contact support@cyted.app.

Changes and contact

We may update this Privacy Policy when our services or legal obligations change. We will post the updated version with a new last-updated date. Questions and privacy requests can be sent to support@cyted.app or mailed to Cyted, Ratnapura, Sri Lanka.