Privacy Policy

Updated 17 October 2026. This policy explains how CitationOS handles information when you use its business listing dashboard.

Information used

We store your account email, password hash or Google sign-in identity, session records, business profiles, directory listing results and settings you provide. Directory account credentials and mailbox connection settings are used to perform the actions you request.

Google sign-in

Google sign-in requests only your basic account identity (openid, email and profile) to authenticate dashboard access. It does not grant Gmail access. Mailbox verification is configured separately and requires your authorization.

Use and sharing

We use information to authenticate you, manage your workspace, operate requested listing jobs, show results and protect the service. Business information is sent to the directories you choose when you request signup or publication. Connected mailbox credentials are used for verification workflows. Cloudflare Turnstile processes technical browser signals to detect automated abuse; Google processes sign-in requests. These providers and selected directory websites have their own privacy policies.

Storage and access

Account, workflow and credential information is retained to operate your account and resume requested work. Administrators manage service access and may inspect operational information for support and abuse prevention. We do not use Google sign-in data for advertising.

Your choices and requests

You can edit business information, disconnect mailbox access, stop using Google sign-in and request account or stored-data deletion by contacting hassnainbaloch233@gmail.com. Deleting data from CitationOS does not automatically remove listings already published to third-party directories; those must be managed separately.

Contact

For privacy or data requests: hassnainbaloch233@gmail.com.

Signup abuse prevention

We store a keyed fingerprint of the signup network with the account to enforce new-account limits. IPv4 addresses are grouped by public address and IPv6 addresses by /64 network. This applies to both email and Google account creation. Existing accounts may still sign in.