Privacy Policy

Effective date: June 11, 2026

This policy describes how VerityWorks LLC handles data submitted to CitationPack.

Data we collect

We collect the email address, citation text or uploaded file, employer profile answers, parsed citation fields, generated report metadata, and payment status needed to produce and deliver a Citation Triage Report.

How we use data

• Generate deadline, penalty, comparable-case, and report outputs.
• Deliver report links and respond to support requests.
• Maintain order, payment, audit, and operational records.
• Improve the product using aggregate operational events.

Payments and providers

Stripe processes payments and may receive payment, receipt, and checkout metadata. Email and infrastructure providers may process data needed for delivery, hosting, monitoring, and support. We do not sell or share personal information for advertising.

Analytics, cookies, and local storage

We use product analytics (Amplitude, proxied through our own servers) to measure aggregate feature usage. Analytics events use a random device identifier stored in your browser’s local storage and exclude citation text, employer names, email addresses, file names, and report identifiers. We honor the browser’s Do Not Track signal, and you can opt out at any time by adding ?analytics_opt_out=1 to any CitationPack URL. We do not use advertising cookies or third-party advertising trackers.

Security

Data is encrypted in transit over HTTPS, and report downloads use expiring tokenized links. No method of transmission or storage is completely secure, which is one reason we ask you not to upload data that is not needed for citation triage.

Retention

Report download links expire after seven days by default. Uploaded files, generated reports, and report records are retained for up to 90 days for delivery and support, then scheduled for purge. Payment processor records may follow the processor’s own retention rules.

Document handling

Customer citation documents are used to generate reports and are not used to train AI models. Avoid uploading sensitive personal data that is not needed for OSHA citation triage.

Your requests

For access, deletion, correction, or privacy questions, email support@citationpack.com. We honor these requests regardless of where you live, including rights under California privacy law. Some data may need to be retained for fraud prevention, tax, payment, support, or legal reasons.

Children

CitationPack is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16; if you believe a child has provided us personal information, contact support@citationpack.com and we will delete it.