Last updated: October 1, 2026
This Privacy Policy explains how [OPERATOR NAME -- e.g. "[Your Legal Name], an individual operating under the name CitationRadar, based in Taiwan" or a registered company name once one exists] ("we," "us," or "our") collects, uses, and discloses information in connection with CitationRadar (citationradar.pro, the "Service").
This Policy applies to information about you as a subscriber or visitor to the Service. It does not apply to the restaurant establishments, inspection records, or violation data made available through the Service -- see Section 3 below.
Account information: when you sign up, we collect your email address and, if you sign in with a third-party provider, the basic profile information that provider shares with us.
Billing information: if you subscribe to a paid plan, payment card details are collected and processed directly by Paddle.com Market Limited, our payment processor and merchant of record -- we do not receive or store your full card number. We receive limited billing metadata from Paddle (such as subscription status, plan, and transaction history) needed to administer your account.
Saved searches and alert preferences: the filters you configure (such as city, area, or violation type) so the Service can send you matching alerts.
Usage and log data: standard technical information such as IP address, browser type, and pages visited, collected automatically through our hosting and analytics infrastructure.
Communications: if you email us for support, we keep that correspondence to respond to you and improve the Service.
The core content of the Service -- restaurant names, addresses, inspection results, and violation records -- is drawn from publicly published government open-data sources (currently NYC DOHMH and Toronto Public Health/DineSafe). That data concerns establishments, not individual subscribers, and is not "your" personal data under this Policy merely because you searched for it or saved an alert referencing it.
If a government source discloses the name of an individual (for example, an establishment owner or manager) as part of a public inspection record, that disclosure originates from and is governed by the originating government agency’s own publication practices, not by us.
We use the information described in Section 2 to: operate and provide the Service, including sending the email alerts you configure; process payments and manage your subscription; respond to support requests; maintain the security and integrity of the Service; and comply with legal obligations.
We do not sell your personal information, and we do not use your account or billing information to serve you advertising.
The Service uses a session cookie set by our authentication provider (NextAuth) solely to keep you signed in. We do not currently use third-party advertising or cross-site tracking cookies. If that changes, we will update this Policy.
We rely on third-party providers to operate the Service, including: Paddle.com Market Limited (payment processing and billing, acting as merchant of record); Resend (transactional and alert email delivery); Vercel (application hosting); and Neon (database hosting). Each provider processes information only as needed to perform its function for us and is bound by its own privacy and security commitments.
We are based in Taiwan, and our hosting and service providers listed in Section 6 operate infrastructure primarily in the United States. If you are located in the United States, Canada, or elsewhere, using the Service means your account and billing information will be transferred to and processed in Taiwan and in the jurisdictions where our providers operate. We take reasonable steps to keep information secure during this processing regardless of location.
We retain account and billing information for as long as your account is active and for a reasonable period afterward to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. You may request deletion of your account as described in Section 9.
Depending on where you are located, you may have rights to access, correct, or request deletion of your personal information, or to object to certain processing. To exercise any of these rights, contact us at support@citationradar.pro. We will respond within a reasonable time and consistent with applicable law.
Nothing in this Policy limits any right you may have under mandatory data-protection law of your own jurisdiction that cannot lawfully be waived.
Section 3 explains that the establishment, inspection, and violation data on the Service is drawn from public government sources and is not personal data about you as a subscriber. Separately, a business named in that data -- or someone authorized to represent it -- may ask us to correct or suppress how we display a specific record. We provide a request form for this at /data-removal.
Because we republish rather than originate this data, we verify a request by matching the business name and address you provide against our records and then reviewing the request manually before taking any action; we do not act on a request automatically. An approved request causes the matched establishment to stop appearing in future search results and alerts going forward -- it does not retroactively recall alerts, exports, or reports already delivered, and it has no effect on the underlying record at the originating government agency, which only that agency can correct or remove.
We may decline a request where the business name and address cannot be matched to a record, where we cannot reasonably confirm the requester is authorized to act for the business, or where suppressing the record would conflict with our obligations to subscribers relying on accurate public-safety information.
The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us at the address above and we will delete it.
We use reasonable technical and organizational measures to protect information in our control, including relying on providers listed in Section 6 for their own security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We may update this Policy from time to time. If we make a material change, we will post the revised Policy on this page with an updated "Last updated" date and, where practical, notify active subscribers. Continued use of the Service after a change takes effect constitutes acceptance of the revised Policy.
Questions about this Policy, or requests regarding your information, can be sent to support@citationradar.pro.