Effective July 2026
Cited checks whether AI assistants like ChatGPT, Perplexity and Google AI mention your Shopify store, and helps you get mentioned more. To do that job we handle some of your data. This page explains what we take, why, and what happens to it — in plain English.
Cited is built and run by AgentM (agentm.co.uk), based in the United Kingdom. We are the data controller for the app. Anything on this page, you can take up with us directly at hello@agentm.co.uk.
That’s the lot. We don’t touch your customers’ orders, payment details or checkout data — we never ask Shopify for them.
Four reasons: to ask AI assistants about your store and record what they say; to score your visibility and suggest improvements; to help you draft replies to reviews; and to send you the digest email you asked for. Nothing else. If we ever want to use your data for something new, we’ll ask you first.
We use a small number of services to run Cited, and some of your data passes through them: OpenAI, Perplexity and Google (Gemini) answer the questions we track; Google (Business Profile) powers the optional Google connection; SerpAPI checks local search rankings; Resend sends the digest emails; and our hosting provider stores the database. Each one only sees what it needs to do its part.
As long as you use the app, and no longer. When you uninstall Cited, Shopify sends us a deletion notice and we erase everything we hold about your shop — scans, scores, reviews, tokens, the lot — within 30 days at the outside, usually within a couple of days. There’s nothing you need to do.
Under GDPR, CCPA and similar laws you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Shopify’s mandatory privacy webhooks handle most of this automatically — customer data requests and deletions come straight through to us — but you can also just email hello@agentm.co.uk and we’ll sort it, normally within a few days and always within the legal deadline. The same goes for your customers: if one of them asks you about their data, pass it on to us and we’ll handle it (though as above, we hold almost nothing about them).
We use session cookies only — the kind that keep you signed in while you use the app. No tracking cookies, no analytics cookies, no third-party cookies.
If we change this policy in a way that matters, we’ll say so in the app before the change takes effect. Questions, complaints, requests: hello@agentm.co.uk. If you’re in the UK or EU and we can’t resolve something, you can complain to your local data protection authority — in the UK, that’s the ICO.
Cited, by AgentM — agentm.co.uk