Privacy Policy
Last updated: June 18, 2026
1. Who we are
NiceCite is operated by Cerious Productions ("we", "us", "our"). Cerious Productions is the data controller responsible for personal data processed in connection with the NiceCite service at nicecite.com. You can reach us via the contact page.
2. Personal data we collect
- Account data: name, email address, login credentials, authentication identifiers.
- Usage data: audits run, URLs submitted, reports generated, generation credits consumed, in-app actions.
- Technical data: IP address, browser type, device identifiers, log timestamps, error reports.
- Support data: messages, attachments, and metadata you send when contacting us.
- Billing data: collected and processed by our reseller Paddle (see Section 4). We receive limited order metadata (transaction ID, plan, country, last four digits where applicable) but not your full payment card details.
3. Purposes and legal bases
- Providing the service, creating and maintaining your account, running audits, generating reports — performance of a contract.
- Security, fraud prevention, abuse detection, rate limiting — legitimate interests.
- Product analytics and improvement — legitimate interests.
- Customer support and service communications — performance of a contract and legitimate interests.
- Marketing communications (where used) — consent, which you may withdraw at any time.
- Compliance with legal obligations (tax, accounting, lawful requests) — legal obligation.
4. How we share data
We share personal data only with the following categories of recipients:
- Merchant of Record — Paddle. Our order process is conducted by our online reseller Paddle.com. Paddle is the Merchant of Record for all our orders and handles payments, subscription management, billing, tax compliance, invoicing, and refund processing. See Paddle's privacy notice.
- Service providers / subprocessors for hosting, database, authentication, email delivery, analytics, error monitoring, and customer support tooling, acting under written instructions.
- Professional advisers (legal, accounting, insurance) where reasonably necessary.
- Authorities where required by applicable law or to protect our rights.
5. International transfers
Personal data may be processed outside your country, including in the United States and the United Kingdom. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Retention
We retain account, audit, and report data for as long as your account is active and as needed to provide the service. Billing records are retained for the period required by applicable tax and accounting laws (typically up to 7 years). When data is no longer needed, we delete or anonymise it. You may request deletion at any time (see Section 8); we process such requests within 30 days, subject to legal retention obligations.
7. Security
We apply appropriate technical and organisational measures, including encryption in transit, access controls, audit logging, and least-privilege administration. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
8. Your rights
Depending on where you live, you may have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent. EU/UK residents may lodge a complaint with their local supervisory authority. To exercise any right, contact us via the contact page. We will respond within one month.
9. Cookies
We use strictly necessary cookies for authentication and session management. We may use limited first-party analytics to understand aggregate usage. Where required by law, we will request consent for non-essential cookies and provide controls to manage your preferences.
10. Changes
We may update this notice from time to time. Material changes will be highlighted in-product or by email. The "Last updated" date above reflects the current version.
11. Contact
Cerious Productions — reach us via the contact page for any privacy question or rights request.