Privacy Policy

This Privacy Policy describes how CiteScreen, LLC (“CiteScreen,” “we,” “us”) collects, uses, and shares information when you use our websites, applications, and services (the “Service”). It is incorporated into our Terms of Service. For the documents and content you upload (“Customer Content”), we act on your behalf and at your direction to provide the Service.

Information you provide

• Account information — your name, email address, and password (stored as a salted cryptographic hash, never in plain text), and any workspace or organization details you set up (such as a firm name and the email addresses of teammates you invite).
• Customer Content — the documents you upload for analysis and the data derived from them to provide the Service, including extracted text, identified citations and their verification results, page thumbnails, and analysis reports. Legal documents can contain personal information about you or third parties; we process that content only as part of providing the Service.
• Assistant conversations — messages you exchange with the Sidebar assistant, which are stored with your account so your conversation history works.
• Communications — anything you send us directly, such as support requests.

Information collected automatically

• Session and log data — when you sign in we record session details including your IP address, browser user-agent, and sign-in times, and our servers keep standard operational logs used for security and debugging.
• Cookies — we use essential cookies to keep you signed in. We do not use advertising cookies or third-party analytics trackers on the Service. See Section 7.

Billing information

If you purchase a paid plan, payment is handled by a third-party payment processor, which collects your payment details under its own privacy policy. We receive limited billing records (such as plan, status, and receipts) but do not store full payment card numbers.

• to provide and operate the Service — including analyzing your documents, extracting and checking citations, generating reports, and powering the Sidebar assistant;
• to create and secure your account and workspaces;
• to process payments and manage subscriptions;
• to protect the Service — detecting, investigating, and preventing abuse, fraud, and security incidents;
• to support you and communicate with you about the Service, including transactional messages;
• to improve the Service using aggregated or de-identified usage information that does not identify you or reveal the contents of your documents; and
• to comply with law and enforce our terms.

Where laws such as the GDPR apply, our legal bases are performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where required, and compliance with legal obligations.

To analyze your documents, the Service sends relevant content to the AI and document-processing providers described in Section 6 — for example, document text is processed for OCR and citation extraction, individual citations and surrounding context are sent for verification against legal databases, and your Sidebar messages are processed by an AI model to generate responses.

We do not use your Customer Content to train generalized AI models, and we do not permit our AI providers to do so. Our providers process Customer Content under business and API terms under which that content is not used to train their models. Your documents are not shared with other CiteScreen customers.

We treat Customer Content as your confidential information. It is encrypted in transit and at rest, access is restricted, and our personnel do not review the contents of your documents except with your consent (for example, when you ask for support), as necessary to protect the Service or enforce our terms, or as required by law. If we receive a legal demand for your Customer Content, we will notify you before disclosure where legally permitted so you can seek protective measures. See our Terms of Service for our privilege non-waiver commitments.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only:

• With service providers (subprocessors) that process it on our behalf to run the Service, under agreements that limit their use of it. These include providers of AI models, document processing and OCR, cloud storage and hosting, legal-data and case-law lookup, and AI-writing detection. A current list of our subprocessors is available on request via the contact in Section 14.
• Within your workspace — if you join a team or organization, information such as your name, email, and role is visible to your workspace, subject to your plan’s sharing settings.
• For legal reasons — when required by law or legal process, or to protect the rights, safety, or property of CiteScreen, our users, or others (with the notification commitment in Section 5).
• In a business transfer — as part of a merger, acquisition, financing, or sale of assets, subject to this Policy’s commitments.

The Service uses essential cookies to authenticate you and keep your session active. We do not run third-party advertising or analytics trackers on the Service. Because we do not sell or share personal information for advertising, opt-out preference signals such as Global Privacy Control do not change how we process your data, though your browser may send them; we likewise do not respond differently to “Do Not Track” signals. You can control cookies in your browser settings, but the Service will not function without essential cookies.

We keep your information for as long as your account is active or as needed to provide the Service. You can delete individual documents and their analyses at any time from within the Service; deletion removes the stored file, extracted text, thumbnails, and associated analysis from our active systems, with residual copies removed from backups on our normal backup cycle. If you close your account or ask us to delete it, we will delete your personal information and Customer Content from active systems within a reasonable period, except where we must retain limited records for legal, security, or accounting purposes.

We use technical and organizational measures designed to protect your information, including encryption of data in transit and at rest, hashed passwords, scoped access controls, time-limited signed URLs for file transfers, and isolation of each account’s data. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and applicable regulators as required by law.

Depending on where you live, you may have rights to access, obtain a copy of, correct, delete, or restrict the processing of your personal information, to opt out of certain processing, and to non-discrimination for exercising those rights. We honor these requests for all users where practicable, regardless of location.

• You can access and update account information, and delete documents, directly in the Service.
• For anything else — including access, deletion, correction, or portability requests — email us at privacy@citescreen.com. We will verify your request (typically via your account email) and respond within the time required by applicable law. If we decline a request, you may appeal by replying to our response, and we will have it reviewed; you may also contact your state’s attorney general or data protection authority.
• An authorized agent may submit a request on your behalf with proof of authorization.

Note that most of the personal information in uploaded documents is processed on behalf of the account holder (for example, a law firm); where that is the case, we may direct requests to, or confirm them with, that account holder.

The Service is not directed to children and may not be used by anyone under 18. We do not knowingly collect personal information from children; if you believe a child has provided us information, contact us and we will delete it.

CiteScreen is operated from the United States, and your information is processed and stored in the United States and in the locations of the service providers described in Section 6. If you use the Service from outside the U.S., you understand your information will be transferred to and processed in the U.S. Where required, we rely on appropriate safeguards for international transfers.

We may update this Policy from time to time. If we make material changes, we will provide notice — for example, by email or a notice in the Service — before the changes take effect, and we will update the date at the top of this page.

Questions or requests about this Policy can be sent to privacy@citescreen.com.