Privacy Policy

1. Who We Are

Citronetic Limited (operating under the brand name "Citronetic") is an AI-native story company. This Privacy Policy applies to our corporate marketing website located at https://citronetic.com (the "Site").

The Site exists to share information about who we are and what we build. It does not offer user accounts, logins, payments, or purchases. If you have any questions about this policy or how we handle your information, you can reach us at gan.liu@citronetic.com.

2. Scope: This Marketing Site vs. Our Products

This Privacy Policy covers only the Citronetic corporate marketing website at https://citronetic.com. It does not cover our products, which are separate services with their own terms of service and privacy policies.

Our products include Chat Sights (chatsights.com), Ockine, Swipi, and Citron Script. If you use any of these products, please refer to that product's own terms and privacy policy to understand how your information is handled there. This policy does not govern your use of, or the data practices of, those products.

3. Information You Provide to Us

The Site does not include forms, accounts, or checkout flows. The main way you provide personal information to us is by choosing to contact us directly — for example, by sending an email to an address listed on the Site.

When you email us, we receive the information you choose to include, which may consist of your name, your email address, and the contents of your message. We use this information only to read and respond to your inquiry and to keep a record of our correspondence.

4. Information Collected Automatically

Like most websites, when you visit the Site certain technical information is collected automatically by our hosting and infrastructure provider. This helps us keep the Site secure and reliable and understand aggregate usage.

This automatically collected data may include your IP address, your browser and device type, the pages you view, and the referring URL that brought you to the Site. We treat this as standard technical and log data and use it for the limited purposes described in this policy.

• IP address
• Browser and device type
• Pages viewed on the Site
• Referring URL (the page or source you arrived from)

5. How We Use Information

We use the information described above for a small number of clearly defined purposes. We do not use it to build advertising profiles or to track you across other websites.

• To respond to messages and inquiries you send to us by email
• To operate, maintain, and secure the Site and protect against fraud, abuse, and technical threats
• To understand aggregate, non-identifying usage trends so we can improve the Site
• To comply with applicable legal obligations and enforce our terms

6. Cookies & Analytics

The Site uses essential cookies only — those needed to make the Site function and to keep it secure. We do not run advertising trackers, and we do not use cookies to follow you across other sites for behavioral advertising.

Any analytics we use are privacy-respecting and report information in aggregate rather than identifying individual visitors. Most web browsers let you block or delete cookies through their settings; because we rely only on essential cookies, the Site is designed to remain functional and lightweight.

7. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal information only where we have a valid legal basis to do so under the General Data Protection Regulation (GDPR) and the UK GDPR. The relevant bases are:

• Legitimate interests — to operate, secure, and improve the Site, to understand aggregate usage, and to respond to inquiries you send us, where these interests are not overridden by your rights and freedoms.
• Consent — where required, for example for any non-essential cookies; you may withdraw consent at any time.
• Legal obligation — where we must process information to comply with applicable law.

8. How We Share Information

We do not sell your personal information. We share information only where necessary to operate the Site and provide the services described in this policy, and only with providers who process it on our behalf under appropriate confidentiality and data protection obligations.

These service providers act as our processors and are permitted to use the information only to provide services to us — not for their own independent purposes. We may also disclose information where required by law, to respond to lawful requests, or to protect the rights, safety, and security of Citronetic, our visitors, or the public.

• Hosting and content delivery — the Site is served through Cloudflare (including Cloudflare Workers), which processes technical and log data to deliver and secure the Site.
• Analytics — privacy-respecting, aggregate analytics used to understand overall Site usage.
• Email — the email provider we use to receive and respond to messages you send us.

9. International Data Transfers

Because the Site is delivered through global infrastructure, information collected through the Site may be processed in, or transferred to, countries other than the one in which you are located. Data protection laws in those countries may differ from those in your home jurisdiction.

Where we transfer personal information internationally, we take steps to ensure it remains protected, including by relying on providers that offer appropriate safeguards and, where required, by using recognized transfer mechanisms such as standard contractual clauses.

10. Data Retention

We keep personal information only for as long as we need it for the purposes described in this policy, and then delete or de-identify it.

Correspondence you send us by email is retained for as long as needed to handle your inquiry and to maintain a reasonable record of our communications. Automatically collected technical and log data is retained for a limited period for security and aggregate analytics purposes, unless a longer period is required by law.

11. Your Privacy Rights

Depending on where you live, you may have specific rights over your personal information. We honor these rights regardless of where you are located, to the extent applicable law allows. To exercise any right, contact us at gan.liu@citronetic.com; we may need to verify your identity before responding.

If you are in the EEA or the UK, you have rights under the GDPR and UK GDPR, including:

• The right to access the personal information we hold about you
• The right to rectification of inaccurate or incomplete information
• The right to erasure of your personal information (the "right to be forgotten")
• The right to restrict or object to our processing, including processing based on legitimate interests
• The right to data portability
• The right to withdraw consent at any time, where processing is based on consent
• The right to lodge a complaint with your local data protection authority
• California residents (CCPA/CPRA): the right to know what personal information we collect and how we use it, the right to request deletion of your personal information, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right to be free from discrimination for exercising these rights
• California residents (CCPA/CPRA): we do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law, so there is no sale or sharing for you to opt out of

12. Children's Privacy

The Site is a corporate marketing website intended for a general, professional audience. It is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16.

If you believe a child under 16 has provided us with personal information, please contact us at gan.liu@citronetic.com so we can take appropriate steps to delete it.

13. Security

We take reasonable technical and organizational measures to protect the limited information handled through the Site, including delivering the Site over secure infrastructure and restricting access to the information we hold.

No method of transmission over the internet or method of electronic storage is completely secure, so while we work to protect your information, we cannot guarantee its absolute security. Please avoid sending us sensitive information by email.

14. Links to Third-Party Sites and Products

The Site may link to third-party websites and to our own separate products, including Chat Sights (chatsights.com), Ockine, Swipi, and Citron Script. These are governed by their own terms and privacy policies, not by this one.

We are not responsible for the content or privacy practices of third-party sites or of our separate products. We encourage you to review the applicable privacy policy of any site or product before providing personal information to it.

15. Governing Law

This Privacy Policy and any matters relating to it are governed by the laws of the jurisdiction in which Citronetic Limited is incorporated, without regard to conflict-of-law principles, except where mandatory local data protection laws that apply to you provide otherwise.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the Site, our practices, or applicable law. When we do, we will revise the "last updated" date at the top of this policy.

We encourage you to review this page periodically. Your continued use of the Site after an update takes effect means you acknowledge the revised policy.

17. How to Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or how we handle information, please contact us by email.

Email: gan.liu@citronetic.com. We will do our best to respond to your inquiry and to help you exercise any applicable privacy rights.