Privacy Policy
Last updated: September 23, 2026
This policy explains what personal data Dicitur ("Dicitur", "we", "us") collects when you use dicitur.io (the "Service"), why, and what you can do about it.
Who we are
The Service is operated under the name Dicitur. For anything about your data, write to privacy@dicitur.io.
What we collect
Account data. You sign in with Google. We receive your name, your email address and, if Google provides it, your profile picture. We never see your Google password.
What you give us. The domains you analyze, the questions or keywords you enter or paste, and the messages you write in the strategy chat.
What the Service produces. The answers AI assistants give to your questions, the sources they cite, your reports, your free check results and the chat replies.
Billing data. Payments are handled by Stripe. We receive your subscription status, your plan and a customer reference. We never receive or store your card details.
Technical data. Our hosting and database providers keep standard server logs (such as IP address, time of request and browser type) for security and to keep the Service running.
Why we use it
- To provide the Service you signed up for: running free checks and audits, writing reports, answering in the chat, and keeping your history. Legal basis: performance of our contract with you.
- To bill you for paid plans and extra audits. Legal basis: contract, and our legal obligations on accounting and tax.
- To keep the Service safe and fair, for example enforcing free check and usage limits and preventing abuse. Legal basis: our legitimate interest in protecting the Service and its users.
- To contact you about your account, for example to tell you an audit is ready or to answer a support request. Legal basis: contract.
We do not sell your data. We do not use it for advertising. We do not send you marketing emails unless you ask for them.
How AI processing works
To measure which pages AI assistants cite, we send the questions of your audit or free check to those assistants through DataForSEO, and store their answers. These questions describe what a business sells and do not need to contain personal data. Your chat messages and audit data are sent to Anthropic to generate reports, questions and chat replies.
Please do not enter personal data about yourself or others in your questions, keywords or chat messages. The Service does not need it.
Who processes data for us
We use the following providers, each only for its part of the Service:
- Supabase: database and sign-in (data stored in the EU, Ireland)
- Vercel: hosting (our functions run in the EU, Ireland)
- Google: sign-in
- Stripe: payments. For some purchases Stripe, or its affiliate Link, acts as the reseller of the purchase.
- Anthropic: AI processing for reports, questions and chat (United States)
- DataForSEO: collecting the answers AI assistants give to audit and free check questions
- Resend: sending account emails such as "your audit is ready" (company based in the United States, emails sent from the EU, Ireland)
Transfers outside the EU
Some providers are located, or process data, outside the European Economic Area, for example in the United States. When that happens, the transfer relies on the safeguards the GDPR allows, such as an adequacy decision (including the EU-US Data Privacy Framework, where the provider is certified) or the European Commission's Standard Contractual Clauses.
How long we keep it
- Account data, audits, free checks and chat history are kept for as long as your account exists.
- If you ask us to delete your account, we delete your personal data within 30 days of your request.
- Billing records are kept by Stripe for as long as the law requires.
- Server logs are kept by our providers for a limited time, according to their own policies.
Your rights
Under the GDPR you can ask us to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format. Write to privacy@dicitur.io and we will answer within one month.
You also have the right to complain to a data protection authority, in particular the one in the EU country where you live or work.
Cookies
We only use cookies that are strictly necessary to keep you signed in and to run the Service. We do not use analytics, advertising or tracking cookies. For this reason we do not show a cookie banner.
Age
The Service is not meant for anyone under 18.
Security
We protect your data with access controls, encryption in transit, and database rules that let each user read only their own data. No system is perfectly secure, but we take reasonable measures and review them as the Service grows.
Changes
If we change this policy, we will update this page and the date at the top. If a change is significant, we will also tell you by email.