Privacy Policy
Last updated: 22 May 2026
1. Who we are
Citebility is a service provided by Go-Virtual (a sole proprietorship, registered with the Dutch Chamber of Commerce under number 77601262, VAT ID NL003213469B81), also trading under the name Artificial Studio. We are the data controller for the personal data processed through Citebility. Questions about this privacy policy? Email [email protected].
2. What data we process
- Email address
- The submitted website URL and brand name
- IP address and technical log data
- Scan results, scores and report data
- Payment and transaction data when a paid Report is purchased
3. What we use this data for
- running the scan and making the Report available or sending it
- processing payments
- rate limiting, security and abuse prevention
- improving the service and contacting you about your request or order
4. Legal bases
We process personal data on the following bases:
- performance of the contract — for the scan and the Report;
- legitimate interest — for security, rate limiting, abuse prevention and improving the service;
- legal obligation — for administration and tax retention duties.
5. Third parties
To operate Citebility we use external providers: Supabase (database, EU), Stripe (payments) and AI providers (OpenAI, Google, Anthropic, Perplexity, Mistral) for the analyses. To carry out the scan we share the submitted URL, brand name and scan questions with these AI providers. We do not share directly identifying personal data with them, but a URL or brand name can in some cases contain personal data — for example for a sole proprietorship or personal brand. Some of these providers process data outside the European Economic Area; in that case appropriate safeguards apply, such as standard contractual clauses. We do not sell personal data.
6. Retention
We keep scan results, report data and email addresses for a maximum of 24 months. We keep IP addresses and technical log data as briefly as possible, only as long as needed for security and abuse prevention. We keep administrative and tax data for as long as we are legally required to (typically 7 years). You can request deletion by email.
7. Your rights
You have, to the extent legally applicable, the right to access, correction, deletion, restriction of processing, data portability and objection to processing. Send your request to [email protected]; we respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Changes
We may amend this privacy policy. The most recent version is always on this website.