Privacy Policy
Last updated: 7 October 2026
Introduction
Agentcites is a service run by Holgrex LLC (“we”, “us” or “our”). This policy explains what personal information we collect, why we collect it, who we share it with and what you can do about it.
Agentcites asks AI assistants questions about your market and shows you what they answer. To do that, it reads your website, sends questions to AI providers and stores their answers. This policy covers the Agentcites website and the Agentcites app.
By using Agentcites, you agree to the collection and use of information as this policy describes. If you do not agree, please do not use the service.
Information we collect
Information you give us
- Account details. We store your email address and your name. There is no password. You sign in with a six-digit code that we email to you.
- Team details. An account belongs to an organisation. We store who is a member and their role (owner, admin, member or viewer). When an owner invites someone, we store the email address they invited.
- Your website and market. We store the address of the website you add, the questions we generate about your market, and any changes you make to them. Questions can name your brand and your competitors.
- Billing details. Payments are handled by Stripe. Stripe collects your card details. We never see or store your full card number. We store your Stripe customer and subscription identifiers and the state of your subscription.
- Messages to us. If you email us, we keep the email and our reply.
Information the service creates
- Pages from your website. Our crawler, which identifies itself as AgentcitesBot, reads the public pages of your website and stores their text.
- Answers from AI assistants. We store each answer word for word, along with the web pages the answer cites.
- Cited pages. When an answer cites a page, our crawler may read that page and store its text, so we can show you why it was chosen. These pages belong to other people and can contain personal information, such as an author’s name.
- Drafted pages. We store the pages an AI model drafts for you, and whether you marked them as published.
Information collected automatically
- Sign-in sessions. When you sign in, we store your IP address and your browser’s user agent (a short text that names your browser and operating system) with the session.
- Server logs. Our servers keep technical logs and error reports so we can run and fix the service.
On the website, we use Google Analytics to count visits and see which pages people read. It records the pages you view, roughly where you are, your browser and device, and how you arrived. We do not use it for advertising, and we do not use analytics or tracking scripts in the app.
People who are not customers
This section is for people who have never signed up to Agentcites, but whose details appear on a public web page that an AI assistant cited.
- What we collect. We may show a customer the author name and email address written on a public web page. We only take an address that is written on the page. We never guess one.
- Where it comes from. It comes from the text of a public web page that an AI assistant cited in an answer, which our crawler then read.
- Why. A customer may want to contact the author of a page that AI assistants rely on, for example to suggest a correction or offer information. We show who wrote the page so they can do that.
- Who sees it. Only the members of the customer’s organisation whose questions led to that page.
- How long we keep it. We keep the page text for as long as the customer’s account exists.
- How to object. Email us at [email protected] with the address of the page and your email address. We will stop showing your details and delete them from the stored page text.
We do not email you ourselves. A customer who contacts you is responsible for doing so lawfully, and our Terms of Service require it.
How we use information
We use the information above to:
- Run the service, including scans, analysis and drafted pages.
- Sign you in and keep your account secure.
- Manage your organisation, its members and their roles.
- Take payments and manage your subscription.
- Send the emails listed under “Emails we send” below.
- Answer your questions and give support.
- Find and fix faults, and prevent abuse and fraud.
- Meet our legal obligations and enforce our Terms of Service.
We do not sell personal information. We do not use your data to train AI models.
Legal basis
If you are in the European Economic Area or the United Kingdom, the law asks us to name the reason we are allowed to use your information.
- Contract. We need your account, website and billing details to provide the service you signed up for.
- Legitimate interests. We keep the service secure, fix faults and prevent abuse. We show customers the author details from cited public pages, as described above, because it helps them act on what AI assistants say. You can object to this at any time.
- Legal obligation. We keep billing records where tax and accounting law requires it.
Who we share it with
We share information only with the service providers below, and only what each one needs to do its job.
AI providers
The questions about your market are sent to AI assistants, and so are the pages of your website when we generate questions or draft pages. A question can name your brand and your competitors. We send these requests through OpenRouter, a service that passes requests on to AI models. The AI providers that may receive them are:
- OpenAI (ChatGPT).
- Google (Gemini).
- Perplexity.
- Anthropic (Claude).
- DeepSeek.
- Exa, a search index that supplies web search results for DeepSeek’s answers.
Each provider handles the requests under its own terms and privacy policy. Please do not put personal information into a question.
Other service providers
- Stripe takes payments, holds card details and issues invoices.
- Resend sends our emails, so it receives your email address and the text of each email.
- Cloudflare runs the network in front of our servers, so your traffic to the website and the app passes through it.
- Hetzner hosts the server that runs the service and stores the database, in Germany.
- Google’s favicon service. To show company logos in the app, your browser asks Google for the small icon of a website. Google receives the website’s domain and your IP address.
Legal requirements
We may share information if the law, a court order or a government regulation requires it, or if we believe it is necessary to:
- Meet a legal obligation.
- Protect our rights, property or safety.
- Prevent fraud or security threats.
- Protect the rights and safety of our users.
Business transfers
If we merge, are bought, reorganise or sell assets, your information may be transferred as part of that deal. We will tell you before that happens and explain your options.
How long we keep it
We keep your information for as long as your account exists. That includes stored answers, cited pages, website pages and drafted pages. Nothing is deleted automatically on a timer.
To delete your account and its data, email us at [email protected] from the address you sign in with. There is no delete button in the app yet. We will confirm when the deletion is done.
Some records are kept after deletion where the law requires it, such as invoices. Stripe keeps its own payment records under its own policy.
Security
We take these steps to protect your information:
- Traffic to the website and the app is encrypted in transit.
- There are no passwords to steal. Sign-in codes expire after ten minutes, allow three tries, and are stored scrambled (hashed).
- Every action in the app checks who you are and which organisation you belong to, so one customer cannot see another’s data.
- Roles limit what each member can do. Only owners manage billing.
- Card details are held by Stripe, never by us.
No method of sending or storing data over the internet is completely secure. We work to protect your data, but we cannot guarantee absolute security.
Your rights
Depending on where you live, you may have these rights over your personal information:
- Access. You can ask for a copy of the information we hold about you.
- Correction. You can ask us to fix information that is wrong or incomplete.
- Deletion. You can ask us to delete your information, unless the law requires us to keep it.
- Portability. You can ask for your data in a structured, machine-readable format.
- Restriction. You can ask us to limit how we use your information in some circumstances.
- Objection. You can object to how we use your information, including the use described under “People who are not customers”.
- Complaint. You can complain to the data protection authority where you live.
To use any of these rights, email us at [email protected]. We will reply within 30 days.
International transfers
The server and the database are in Germany, in the European Union. Holgrex LLC is based in the United States, and several of our service providers are too. Your information may be moved to, stored in and processed in countries other than your own.
Where the law requires it, we rely on safeguards for these transfers, such as the Standard Contractual Clauses approved by the European Commission, or an adequacy decision for the destination country.
Emails we send
We only send emails that the service needs. They are:
- Your six-digit sign-in code.
- An invitation, when an owner invites you to a team.
- One email when a scan finishes.
- One email the first time a page you published is cited.
We do not send marketing email.
Children
Agentcites is not meant for children under 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has given us personal information, please email us at [email protected] and we will delete it.
Changes to this policy
We may update this policy when our practices, technology or the law change. If a change is significant, we will tell you by:
- Posting a notice on our website.
- Emailing the address you sign in with.
The date at the top of this page shows when the policy last changed. If you keep using the service after a change, you accept the updated policy.
Contact us
If you have a question or a request about this policy or your data, please contact us.
- Email: [email protected]
- Post: Holgrex LLC (Agentcites), 30 N Gould St Ste R, Sheridan, WY 82801, USA