Privacy Policy
Last updated: January 2026
What We Collect
When you use Citador, we collect:
- Email address — for your account
- Documents you upload — PDFs and legal briefs for citation analysis
- Citations and verification results — extracted from your documents
Your password is handled by Supabase and is cryptographically hashed — we never see or store it in readable form.
How We Use Your Data
- Process your documents and verify citations
- Store your analysis history so you can access it later
- Improve the service based on usage patterns
We don't sell your data or show you ads.
Third-Party Services
We use the following services to run Citador:
- Supabase — handles authentication and stores your data
- Vercel — hosts the website
- CourtListener — public court records for citation verification
- AI providers (Groq, Cerebras) — analyze documents for citation checking
- PostHog — analytics to understand how the service is used (pageviews, feature usage)
When you use citation analysis features, document text is sent to AI providers. This data is processed in real-time and not retained by these providers after your request completes.
Data Storage
Your data is stored in Supabase's secure, encrypted databases. Data may be processed in the United States. You can only access your own data — we use row-level security to enforce this.
Your Rights
You can request a copy of your data or ask us to delete your account at any time. When you delete your account, all your documents, citations, and verification results are permanently removed.
Contact
Questions? Reach out at hp@citador.lol