1. Who is responsible
Jorge Archivaldo Villa Aceves, an individual based in Guadalajara, Jalisco, Mexico, is the controller of your personal data on Citalia.ai.
For any question or request about your data, write to hola@archilogic.mx.
2. What data we collect
- Account: your name, email and password (stored hashed, never in plain text). If you sign in with Google, the name, email and profile image Google shares with us.
- Session: the IP address and browser you sign in from, to keep the session secure.
- Your brand: the name, website, category, aliases, language and competitors you enter.
- Results: the questions we ask the AI assistants, their answers, the pages they cite, and the audit results for your public website.
- Subscription: your plan, subscription status and period, and a Stripe customer identifier. Stripe processes your card details; they never pass through our servers.
- Usage and security: counters for scans and sign-in attempts. To limit abuse we store irreversible hashed versions of your IP and email, which are deleted within hours.
3. What we use your data for
- Creating and managing your account and keeping it secure.
- Running your scans and audits and showing you the results.
- Billing and managing your subscription.
- Sending you service messages, such as email verification or password reset.
- Preventing abuse and meeting legal obligations.
We do not sell your data. We do not send marketing emails today; if we ever do, we will ask for your consent first.
4. Who we share it with
We use providers that process data on our behalf. Some are outside Mexico, mainly in the United States:
- Vercel: hosting and aggregate web analytics.
- Meta: receives browsing data from the public pages (see Cookies and similar technologies).
- Neon: database, with servers in the United States.
- Stripe: payments and billing.
- Resend: sending service emails.
- Google: Sign in with Google and the Gemini assistant.
- OpenAI, Perplexity and xAI: receive the questions and brand details you set up (name, website, category and competitors) to produce answers. We do not send them your email or password.
By using the service you accept this processing. We may also disclose data if a competent authority requires it by law.
5. Cookies and similar technologies
- A session cookie, needed to keep you signed in.
- A language cookie, which remembers whether you prefer Spanish or English.
- Aggregate web analytics from Vercel, which does not use cookies to track you across sites.
Meta Pixel: on the public pages (home, pricing, guides, sign-in and sign-up) we use the Meta pixel, which sets cookies and sends Meta the page visited and browser details to measure and improve our advertising. It is not loaded inside your account or on the password reset page. You can block it with your browser settings, a blocking extension or your Meta ad settings, or object by writing to hola@archilogic.mx.
6. How long we keep it
We keep your data while your account is active and as long as needed to meet legal obligations and resolve disputes. If you ask us to close your account, we delete your data, except what the law requires us to keep.
7. Your rights
You have the right to access, rectify, cancel or object to the processing of your data (ARCO rights), and to withdraw your consent and limit how your data is used.
To exercise them, write to hola@archilogic.mx from your account email, with your name and what you are asking for. We will reply within 20 business days. If you believe your rights were not honored, you can go to the competent data protection authority in Mexico.
8. Minors
Citalia.ai is not directed at people under 18 and we do not knowingly collect their data.
9. Changes to this notice
If we change this notice, we will publish the new version on this page with its update date.