Privacy

Supercited respects your privacy. This notice covers how we handle the information you share with us when you visit supercited.ai or engage our services.

What we collect

We collect three categories of information.

Information you give us. When you submit our enquiry form, fill our intake form, reply to our emails, or otherwise communicate with us, we collect the information you choose to share. This typically includes business name, contact name, email address, phone number, suburb, website URL, business category, and any context you add about your situation.

Information we derive about your business. When we run an AI-search visibility audit for you, we collect publicly available information about your business profile (Google Business Profile signals, schema and structured data on your website, presence on third-party directories, citations and mentions on industry publications). We also collect the results we observe when we query AI assistants (ChatGPT, Claude, Perplexity, Gemini) about your business category. None of this information is private to you; we read what is already publicly available.

Information related to payment. If you engage our services, payment is processed by Stripe. We do not store card numbers or full bank details on our systems. Stripe may share with us the last four digits of your card, the card brand, the billing country, and your billing email, for the purpose of reconciling your subscription.

How we use it

We use your information to:

• Deliver the audit and ongoing services you have engaged us for.
• Contact you about your engagement, audit results, billing, and service updates.
• Improve the methodology and quality of audits we deliver to other clients.
• Comply with our legal obligations (tax records, contractual obligations, response to lawful requests).

We do not sell your information to third parties. We do not share it with advertisers or marketing networks.

How we store and protect it

Your information is stored in encrypted Airtable databases. Payment information is processed by Stripe under their PCI-compliant infrastructure; we hold only the references Stripe shares with us. Email correspondence is held in Google Workspace under their Australian data hosting.

We use industry-standard access controls, multi-factor authentication, and encryption-at-rest for all systems holding your information. Only authorised personnel at Supercited can access client records.

Third parties we share with

For the purpose of delivering our services we share specific information with:

• Stripe (payment processing) — billing email, last four digits of card, billing country.
• Airtable (operational database) — client records, audit data, project notes.
• Google Workspace (email and document handling) — email correspondence.
• Cloudflare and Vercel (hosting and content delivery) — IP addresses and standard web traffic data, retained per their respective policies.
• Fly.io (application hosting in Australian region) — audit-pipeline traffic.

Each of these providers operates under their own privacy policy and applicable data-protection regimes. We choose providers that meet recognised privacy standards.

We may also share information when required by law, court order, or other valid legal process.

How long we keep your information

We retain client records for the duration of your engagement plus seven years after the last contact, to comply with Australian tax and contractual record-keeping requirements. After that period, records are securely deleted or anonymised.

Information from enquiries that do not progress to engagement is retained for twelve months, then deleted.

Cookies and analytics

The Supercited website uses essential cookies for session and security. We do not run third-party advertising trackers. We may use standard analytics to understand how visitors interact with the site (page views, navigation paths). Analytics data is aggregated and not linked to individual identities.

You can clear cookies or refuse them through your browser settings; doing so may affect site functionality.

Your rights under Australian Privacy Principles

You can request, at any time:

• A copy of the personal information we hold about you (access).
• Correction of inaccurate or out-of-date information.
• Deletion of your information where we no longer have a lawful reason to retain it.
• Lodgement of a complaint about how we have handled your information, with us in the first instance, and with the Office of the Australian Information Commissioner (OAIC) if you are not satisfied with our response.

To exercise any of these rights, email hello@supercited.ai with "Privacy request" in the subject line.

Changes to this policy

We may update this notice from time to time. Material changes will be communicated to active clients via email at least thirty days before taking effect. The latest version will always be available at this URL with the "Last updated" date below.

Contact

Privacy queries: hello@supercited.ai

Supercited

Melbourne, Australia

ABN 66 611 895 197

Last updated: 2026-05-13