Privacy policy

Effective November 3, 2026

This policy explains how CitedTrue collects, uses, stores, protects, shares and deletes information. CitedTrue is a product of majiklTrust Market Intelligence, LLC ("we," "us"). It applies to citedtrue.com and to the CitedTrue application.

CitedTrue is in development. This website is running, but the CitedTrue application is not, so it holds no customer documents or information from Amazon. Where this policy describes the application, billing, AI processing, safeguards, retention and deletion, it describes how we will handle information when the application opens. We will update this policy if any of that changes before then.

Information we collect

Account information

Your name, email address, company name and login credentials. Sign-in is handled by Amazon Cognito, our authentication provider. Your password passes through our servers to Cognito when you sign in. We do not store passwords.

Billing information

Payments are processed by Stripe. We receive your billing name, address, plan and payment status. We do not receive or store full card numbers.

Information from Amazon

When you authorize CitedTrue in Seller Central, we receive information through Amazon's Selling Partner API about your listings, product types, listing compliance fields and listing issues. CitedTrue does not request restricted Amazon roles, so we do not receive buyer names, addresses, contact details or order information.

Documents and records you provide

Test reports, certificates, production records and supplier documents you upload, the text read from each page and the fields extracted from them, the confirmations and edits you make, and certificates you sign. These documents may include business contact details for your suppliers and testing labs.

Usage and security information

Logs of sign-ins and actions in the application, usage counts for plan limits, IP addresses, browser type and device information, used to operate, secure and troubleshoot CitedTrue.

This website

citedtrue.com does not use cookies, analytics or third-party tracking, and it loads no resources from other websites. If you email us or use the contact form, which opens your own email app, we receive the information you choose to send.

How we use information

• To provide CitedTrue: storing your evidence, extracting and checking certificate data, drafting certificates, preparing exports and sending listing alerts.
• To secure the service, prevent misuse and investigate incidents.
• To bill you, provide support and send service notices.
• To meet legal obligations.

We use information received from Amazon only to provide CitedTrue to the seller who authorized it. We do not sell personal information, use your information for advertising, or use information from Amazon or your documents to train AI models.

AI processing

CitedTrue uses AI models to read documents and extract certificate data. Documents are processed under terms that prohibit the model provider from retaining your content after processing or using it to train models. Extracted values remain drafts until you confirm them.

How we share information

We share information only as follows:

• Service providers that operate CitedTrue on our behalf under confidentiality and security obligations: Amazon Web Services (hosting, storage, sign-in and AI model processing), Stripe (payments), Cloudflare and our email inbox provider (email you send to support@citedtrue.com), our email delivery provider (service emails) and Slack, if you connect Slack alerts.
• At your direction, such as exports and evidence packs you download or send, and, once we release listing updates, the changes you approve.
• When required by law, such as a valid subpoena or court order, or to protect the rights and safety of our users or the public.
• In a business transfer, such as a merger or acquisition, where the recipient is bound by this policy for the information transferred.

How we store and protect information

CitedTrue is being built to follow Amazon's Data Protection Policy for Selling Partner API developers. These safeguards will be in place before the application handles any customer information:

• Hosting in Amazon Web Services data centers in the United States.
• Encryption in transit using TLS 1.2 or higher, and encryption at rest using keys managed in AWS Key Management Service.
• Encrypted storage of Amazon authorization credentials, which are never written to logs.
• Access limited to personnel who need it, protected by multi-factor authentication.
• Account lockout after repeated failed sign-in attempts.
• An audit log of uploads, confirmations, signatures and exports that cannot be edited, and of listing changes once we release them.
• A web application firewall, regular vulnerability scanning and independent security testing.

If we detect a security incident involving information received from Amazon, we notify Amazon within 24 hours, as Amazon's policies require. We notify affected customers without undue delay and describe what happened and what we are doing about it.

How long we keep information

• Information from Amazon is kept only as long as needed to provide CitedTrue, and no longer than 18 months, unless a longer period is required by law.
• Your documents and records are kept while your account is active. Certificate records often need to be kept for years, so you control when they are deleted.
• Billing records are kept as long as needed for tax and accounting purposes.
• Sign-in and security logs are kept for at least 12 months and no longer than 13 months, including after you close your account.

Deletion

• You can delete individual documents and records at any time in the application.
• If you revoke CitedTrue's authorization in Seller Central, we stop accessing your Amazon information immediately and delete information received from Amazon within 30 days.
• If you close your account, we delete your account data, documents and records within 30 days. Remaining copies in encrypted backups expire within 35 days after that.

Before closing your account, you can export your documents and records.

Your choices

You can ask us to give you a copy of your information, correct it, export it or delete it by emailing support@citedtrue.com. You can revoke CitedTrue's access to your Amazon account at any time from Seller Central. If the laws where you live give you additional privacy rights, contact us and we will honor them.

Children

CitedTrue is a service for businesses and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We will post any changes on this page and update the effective date. If a change materially affects how we handle your information, we will notify account holders by email before it takes effect.

Contact

majiklTrust Market Intelligence, LLC
Email: support@citedtrue.com