1. General
This Privacy Policy describes how Am I Cited processes the Users’ personal information to perform the Services offered on the website under the domain amicited.com and in the Am I Cited application, which runs on the FlowHunt platform at app.flowhunt.io (“Services”).
Users must read and expressly consent to the data treatment referred to in this Privacy Policy before using the Services.
If you connect a Google account, Section 10 (Google User Data) explains which Google data we access, how we use it, which AI service providers may process it, and how to disconnect and delete it. Section 11 (AI Service Providers) explains how Am I Cited uses AI services.
2. Data Controller
The Controller of the personal data collected through this Website and of the account data of Users of the Services is AiMingle, s.r.o., Čistovická 1729/60, 163 00 Praha 6, Czech Republic. AiMingle, s.r.o. is the provider of the Am I Cited Service under our Terms and Conditions. Quality Unit, s.r.o. acts as a sub-processor of AiMingle, s.r.o. for certain infrastructure, billing, and support services.
For data that Users submit to or connect with the Services on behalf of their organisation, Am I Cited acts as a Data Processor, as described in Section 8.
3. Purposes of the Processing and Legal Basis
Am I Cited will process the personal data of the User of this Website for the following purposes:
- Services and Business Relationship: Enable the maintenance, development, and management of the Services. This includes managing contracts, orders, deliveries, invoices, and disputes. Data processed for this purpose will be kept as long as the business relationship is maintained, and afterward, during legally established retention periods.
- Responding to User Requests: Respond to requests for information or queries made by the User. Data will be kept until the request has been answered and for the legally established retention period.
- Marketing Communications: Keep the User informed about Am I Cited products, services, and news via electronic means. This processing is based on the User’s consent, which can be withdrawn at any time by contacting support@flowhunt.io.
Failure to accept this Privacy Policy will imply that Am I Cited’s Services and content will not be available.
4. Categories of Data
Depending on how you use the Services, we process the following categories of data:
- Account data: name, email address, login details (including the basic profile information returned by Google Sign-In, if you use it), workspace membership, and settings.
- Workspace content: the domains, brands, competitors, and prompts you track, monitoring results (AI-generated answers, citations, and detected brand mentions), site audits, generated articles, and similar content you create in the Services.
- Connected platform data: data imported from platforms you connect, as described in Sections 9 and 10.
- Billing data: personal data, including bank card details, is securely stored on Stripe. Refer to Stripe’s Privacy Policy for further details.
- Website and usage data: data collected through cookies and similar technologies, as described in Section 16.
5. Automated Decision-Making
Am I Cited informs Users that they may be subject to automated decision-making, including profiling, when using the Services.
6. Recipients and Personal Data Transfers
Data may be shared with third-party recipients, including the AI service providers described in Section 11 and Google. For a complete list of subprocessors that may have access to or process your data, please refer to our Subprocessors page. This page provides detailed information about our infrastructure subprocessors, vendor subprocessors, and service-specific subprocessors, including when and how they may process your data.
7. Rights of the Users
Users have the right to:
- Access, rectify, erase, or restrict processing of their data.
- Exercise data portability rights.
- Object to automated decision-making or profiling.
- Withdraw consent at any time without affecting the lawfulness of prior processing.
- File a complaint with a supervisory authority.
To exercise the above rights, Users must contact support@flowhunt.io with a valid ID attached for verification purposes.
8. Am I Cited as Data Processor
When Users purchase a license to use the Services, Am I Cited acts as a Data Processor on behalf of the User or the legal entity represented by the User (Data Controller). The processing relationship is governed by GDPR and related regulations.
8.1. Obligations of the Processor
Am I Cited commits to:
- Process data only as directed by the Controller.
- Maintain confidentiality.
- Notify the Controller of any breaches within 48 hours.
- Assist the Controller in responding to data subject rights.
- Implement robust security measures to protect data.
8.2. Obligations of the Data Controller
The Controller must ensure compliance with data protection laws, supervise processing activities, and provide necessary access to data.
9. Connected Platforms
You can connect third-party platforms to Am I Cited so that we can import data about your websites, search performance, advertising, and online stores into your workspace. We only access a platform after you connect it and grant access. The platforms currently available in Am I Cited are:
- Search and analytics: Google Search Console, Google Analytics 4, and Bing Webmaster Tools.
- Advertising: Google Ads, Microsoft Advertising, Meta Ads, LinkedIn Ads, and ChatGPT Ads (OpenAI).
- Online stores: Shopify, WooCommerce, Magento 2, Shoptet, and BiznisWeb. Customer email addresses from connected stores are stored only as a keyed hash, and customer location is limited to the city and the first digits of the postal code.
- Alerts: Slack and webhooks you configure to receive monitoring alerts.
Data from a connected platform is used to provide the reports and features you use in Am I Cited. Some features process connected platform data with AI service providers, as described in Sections 10 and 11. Disconnecting a platform in Am I Cited deletes the data imported from it for the affected domain, as described in Section 12.
10. Google User Data
Limited Use disclosure. Am I Cited’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use Google user data, including raw, aggregated, anonymized, or derived data, to develop, improve, or train generalized or foundational AI or machine learning models. We send Google user data only to AI service providers whose published terms state that they do not use data submitted through their API to train their models, and only to provide the feature you are using.
This section describes how Am I Cited handles data obtained through Google APIs when you connect a Google account (“Google user data”). It does not cover the website analytics we collect about visitors to amicited.com, which is described in Section 16.
10.1. Google integrations and access we request
| Integration | Access requested | Data we access | What we use it for |
|---|---|---|---|
| Google Sign-In | Basic profile and email address | Your name, email address, profile picture, and Google account identifier | Signing you in to your account |
| Google Search Console | Search Console (read and manage) and Indexing API | Search performance data (queries, pages, countries, devices, clicks, impressions, click-through rate, and position) for the properties you select, URL inspection results, and sitemaps | Search performance reports, keyword and prompt coverage analysis, and the sitemap and indexing actions you request (such as submitting a sitemap or requesting indexing of a URL) |
| Google Analytics 4 | Google Analytics (read and edit) and BigQuery | Reports and event-level data for the properties you select, including pages, traffic sources, campaign parameters, conversions, revenue, device and approximate location, and the pseudonymous visitor identifiers recorded by your Google Analytics property | Traffic, attribution, and AI-referral reports. The edit and BigQuery access is used to work with the BigQuery export of your Google Analytics property, including setting up and removing an export that we host at your request |
| Google Ads | Google Ads | Accounts, campaigns, keywords, search terms, and cost and performance metrics for the accounts you select | Paid search reports and comparisons between paid and organic search |
Each Google integration also requests your email address so that the Services can show which Google account is connected. We access Google user data only for the properties and accounts you select after you connect an integration. Requesting a permission does not mean that we import every type of data that the permission allows.
Am I Cited runs on the FlowHunt platform and uses the same Google connection for your workspace as FlowHunt. If you or another member of your workspace has already connected other Google services in FlowHunt, Google’s consent screen may also list those permissions when you connect a Google integration from Am I Cited. Am I Cited does not access Gmail, Google Drive, Google Docs, Google Sheets, Google Calendar, or Google Photos.
10.2. How Google user data is used
We use Google user data to provide the user-facing features of Am I Cited described above, including reports, analyses, and the actions you request. We do not use Google user data for advertising, and we do not transfer it to advertising platforms. The hashed email transmission described in Section 16 uses registration data that you give us directly, not Google user data.
10.3. AI processing of Google user data
Some features process Google user data with the AI service providers listed on our Subprocessors page:
- Search intent labelling: queries imported from Google Search Console and keywords and search terms imported from Google Ads are sent to an AI classification service (TypeSafe through OpenRouter, with another AI model served through OpenRouter as a fallback) to label their search intent. Only the query or keyword text is sent. The resulting labels are stored with the query text and may be reused when the same query text is labelled for another workspace.
- Reports chat: when you ask a question in the Am I Cited reports chat, the report data needed to answer it, which may include Google Search Console, Google Analytics, and Google Ads data, is sent to the AI model selected for the chat.
- MCP server: if you connect your own AI assistant to the Am I Cited MCP server, report data that your assistant requests, which may include Google user data, is sent to that assistant. That transfer happens at your direction, and the assistant’s provider is not our subprocessor.
10.4. Retention, disconnection, and deletion
- Data imported from Google Search Console and Google Ads is kept while the integration remains connected to the domain, and is deleted when you disconnect the platform in Am I Cited, delete the domain, or delete the workspace.
- Event-level Google Analytics data is kept for a retention period you can set per workspace, up to a maximum of 396 days (the default). It is also deleted when you disconnect the platform, delete the domain, or delete the workspace. If we host the BigQuery export of your Google Analytics property, the hosted export is deleted when you disconnect it.
- Disconnecting a platform in Am I Cited deletes the imported data but does not revoke our access to your Google account. To revoke access, remove the Google integration from your workspace’s integrations page, or remove the application from your Google Account connections. Deleting a workspace does not revoke access on its own, so remove the integration or revoke access in your Google Account as well. To make sure imported data is deleted, disconnect the platform in Am I Cited before removing the Google integration, or ask us to delete it.
- Google access and refresh tokens are stored encrypted.
- You can ask us to delete Google user data we hold about you at any time by contacting support@flowhunt.io.
Deleted data may remain for a limited period in the recovery and backup mechanisms of our infrastructure providers until those copies expire.
11. AI Service Providers
Am I Cited uses AI services to monitor how AI systems answer questions about your brand and to analyse the results. Depending on the feature and configuration, we send prompts, relevant context, and supported files to the AI service providers listed on our Subprocessors page to generate responses, labels, embeddings, or media. In particular:
- AI answer monitoring: the prompts you track are sent, together with the selected location and language, to the AI systems you monitor, either through data providers that collect AI answers on our behalf or directly to the AI provider, depending on the engine. Which engines are used depends on your plan and the engines you enable for each prompt.
- Analysis: AI-generated answers, the prompts you track, related search queries, page addresses and page text, and data from connected platforms are processed by AI models to detect brands and sentiment, classify queries and pages, group topics, and suggest prompts.
- Generated content: article generation, query fan-out, and similar features send your prompts, monitoring results, and instructions to AI models to generate text, and may send image prompts and reference images to image generation services.
- Reports chat: your questions and the report data needed to answer them are sent to the AI model selected for the chat.
A provider may be selected by you, by the defaults of a feature, or by routing rules, including fallback to another provider when the primary one is unavailable. Some providers act as intermediaries and route requests to model providers. The Subprocessors page lists the providers that receive data and the features that use them.
Provider retention and deletion conditions vary by service and configuration. Processing a request to produce a result is distinct from using its content for model training. Google user data is never used for model training, as described in Section 10. We do not claim that every provider deletes request data immediately or that no request contains personal data. Prompts you track are free text, so avoid including personal data in them.
AI-generated monitoring results, analyses, and generated content are stored in your workspace as described in Section 12.
12. Data Retention and Deletion Policies
- Monitoring results and workspace content: AI answers, citations, brand mentions, site audits, and other workspace content are kept while the domain and workspace they belong to exist, and are deleted when you delete the domain or the workspace.
- Connected platform data: kept while the platform is connected, and deleted when you disconnect the platform, delete the domain, or delete the workspace. Event-level Google Analytics data is also subject to the retention period described in Section 10.4.
- Operational logs and caches: technical logs of monitoring requests are kept for up to 60 days. Cached text embeddings are kept for up to 180 days after they were last used.
- User-initiated deletion: you can delete domains and workspaces in the Services. Deletion from our primary systems starts immediately and runs in the background. Deleted data may remain for a limited period in the recovery and backup mechanisms of our infrastructure providers until those copies expire. To delete your user account entirely, contact support@flowhunt.io.
- Backups: backups of Service Data are stored on Amazon AWS S3.
13. Explicit Use of User Data
Customer workspace data and content — including tracked prompts, monitoring results, connected platform data, and usage data generated within the Am I Cited platform — are used to provide, secure, and improve Am I Cited’s Services. Such data is not used for targeted advertising or shared with third parties for commercial purposes. Google user data is additionally subject to the restrictions in Section 10.
Registration data (such as your email address) may be used for advertising measurement purposes as described in Section 16 (Cookies and Tracking Technologies), including transmission in hashed form to advertising platforms solely to measure the effectiveness of our campaigns.
14. Data Access and Control
Users can manage data access via:
- Role-Based Permissions:
- Administrator: Full access.
- Editor: Can modify flows and data.
- Member: View-only access.
- Guest: Limited read-only access.
- API Key-Based Access: Users can define API key validity for programmatic access.
Requests to manage data should be submitted via the support portal or emailed to support@flowhunt.io.
15. Security and Protection of Data
Am I Cited employs encryption, access controls, and regular security assessments to ensure user data remains secure.
16. Cookies and Tracking Technologies
What are cookies
Cookies are small text files stored in your browser when you visit a website. We use cookies and similar tracking technologies to operate our website, measure the effectiveness of our marketing campaigns, and improve your experience.
Cookie categories we use
| Category | Purpose | Default state (EU/EEA/UK/CH/BR/CA-QC) | Can you disable? |
|---|---|---|---|
| Strictly necessary | Session management, security, crmsor attribution cookie (60-day first-party cookie for marketing attribution) | Always on | No |
| Analytics | Understanding how visitors interact with the website (e.g. Google Analytics) | Off until consent granted | Yes — via cookie banner |
| Marketing | Measuring advertising effectiveness and supporting relevant advertising on third-party platforms (e.g. Google Ads, Meta) | Off until consent granted | Yes — via cookie banner |
| Functional | Remembering your preferences and settings | Off until consent granted | Yes — via cookie banner |
Managing your preferences
You can manage your cookie preferences at any time:
- On your first visit via the cookie consent banner
- At any time via the “Cookie settings” link in the website footer
- By adjusting your browser settings (note: this may affect website functionality)
Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
Server-side tracking and analytics
In addition to browser-based cookies, AiMingle, s.r.o. uses server-side tracking infrastructure to collect analytics and attribution data. This processing occurs on AiMingle’s servers before being forwarded to authorised analytics and advertising platforms. Data is stored in a data warehouse for internal analytics purposes and is subject to the same consent controls as browser-based tracking where applicable.
Enhanced conversions — hashed email transmission
When you register for a free trial or complete a purchase, AiMingle, s.r.o. may transmit your email address in hashed (SHA-256 encrypted) form to Google LLC and Meta Platforms, Inc. for advertising measurement purposes. The hashing process is one-way — the original email address cannot be reconstructed. This data is used solely for conversion measurement. The legal basis is AiMingle’s legitimate interest in measuring marketing effectiveness.
Third-party processors involved in tracking
| Processor | Service | Transfer mechanism |
|---|---|---|
| Google LLC | Google Analytics, Google Ads Enhanced Conversions, Google BigQuery | EU–US Data Privacy Framework (DPF) |
| Meta Platforms, Inc. | Meta Conversions API | EU–US Data Privacy Framework (DPF) |
| Stape, Inc. | Server-side tag management | Data Processing Agreement in place |
| Quality Unit, s.r.o. | Infrastructure sub-processor (server-side tracking and analytics infrastructure) | Data Processing Agreement in place |
Geographic scope of consent requirements
| Tier | Regions | Mechanism |
|---|---|---|
| Opt-in required | EU/EEA, UK, Switzerland, Brazil, Quebec (Canada) | Cookie consent banner on first visit |
| Opt-out available | United States | “Your Privacy Choices” link in footer |
| No banner required | All other regions | Standard tracking applies |
Analytics and attribution data retention
Data collected via Google Analytics is retained for 14 months from the date of collection, in accordance with Google Analytics default retention settings. Data stored in AiMingle’s data warehouse for internal attribution purposes is retained for no longer than necessary for the purposes for which it was collected, subject to legal counsel confirmation. Hashed email data transmitted for Enhanced Conversions purposes is subject to the data retention policies of Google LLC and Meta Platforms, Inc. and is not stored by AiMingle beyond the transmission event.
Your Privacy Choices (US residents)
If you are a resident of California or another US state with applicable privacy legislation, you have the right to opt out of the sale or sharing of your personal data for cross-contextual behavioural advertising purposes. To exercise this right, use the “Your Privacy Choices” link available in the website footer, or contact us at privacy@flowhunt.io.
17. Changes to this Privacy Policy
Am I Cited may amend this policy to reflect new regulations or practices. Changes will be posted on this page.
Updated: 11/05/2026