Privacy policy
Last updated: 19 September 2026
Who we are
Citedly (“we”, “us”) is a free, deterministic SEO and GEO toolkit operated by devcrafthouse.co.za. We help businesses check how well AI engines and search crawlers can find, read and cite their website. This policy explains what personal data we process, why, and the rights you have under the Protection of Personal Information Act (POPIA, South Africa) and the General Data Protection Regulation (GDPR).
What we collect
Citedly is a free, no-signup service. We do not collect, store or process any personal data. When you use a tool, you submit a domain name. We fetch that domain's public resources (homepage, robots.txt, sitemap, DNS records) and compute a deterministic report. The domain and the report exist only for the lifetime of the HTTP request — they are not written to a database, not logged, and not retained after the response is sent.
Why we process it
We process the domain you submit solely to generate the deterministic report you requested. We do not profile you, we do not build user accounts, we do not sell data, and we do not train on it.
AI engines
Citedly does not call any AI engines. Every tool is a pure server-side fetch, parse and compute operation. We do not send your data to OpenAI, Perplexity, Google, Anthropic or any other third-party AI provider.
Sharing
We do not share personal data with any third party. The only data that leaves our server is the outbound fetch to the domain you submitted (and its public resources), which is the same request any browser or crawler would make.
Retention
We do not retain any data. The domain and the computed report exist only in memory for the duration of the HTTP request. When the response is sent, the data is discarded. There is no database, no log file, and no backup.
Lawful basis
Because we do not collect or store personal data, no lawful basis is required under POPIA or GDPR. The only processing that occurs is the transient, in-memory computation of a deterministic report for the domain you submitted.
Cross-border transfers
Our infrastructure is hosted in South Africa. Because we do not collect or store personal data, no cross-border data transfer occurs.
Cookies
Citedly sets no cookies. There is no session, no sign-in, and no tracking. The only cookies on the site are those set by Google Analytics (GA4), which you can opt out of in your browser settings.
Your rights
Because we do not collect or store personal data, there is no personal data to access, correct, delete or port. If you believe we have inadvertently retained personal data, contact us and we will investigate and delete it within 30 days.
Security
We use industry-standard safeguards: all traffic is encrypted in transit (TLS), and the server is configured with least-privilege access. Because we do not store personal data, the attack surface for data breach is minimal.
Contact
Questions about this policy? Email our Information Officer (designated under POPIA s.14) at privacy@citedly.tech. You may also lodge a complaint with the Information Regulator (iopo.org.za) or your local supervisory authority.
Want to see how well AI engines can find your site?
Browse the free tools