Security
Your data, handled with care
How GoGetCited protects your account, your workspace and the data you collect with it.
Your account
Sign-in protections and controls over who can do what in your workspace.
Two-factor authentication
Protect your account with an authenticator app, with backup codes for when your phone isn't at hand.
Roles and permissions
Owner, admin, member and viewer. Every action checks the role on the server, not just in the interface.
Sessions you control
See where you're signed in and sign out other sessions, also when you change your password. A password reset signs out everywhere.
Audit log
Sensitive changes, like roles, ownership, API keys and billing, are recorded with who made them and when.
Your data
What we store, how it's protected, and how long we keep it.
Encrypted secrets
Keys and webhook addresses you connect, such as your own AI provider or a Slack channel, are encrypted at rest.
Hashed tokens
API keys and shared-report links are shown once and stored only as hashes, so a copy of our database can't be used to sign in.
No raw visitor IPs
For the free check and AI traffic, IP addresses are turned into a salted hash that changes daily. The address itself is never stored.
Deleted on a schedule
Single AI-traffic events are kept 90 days, free-check emails two days, and database backups 14 days. See the Privacy Policy for the full list.
Infrastructure
How the service runs, and what it sends to others.
HTTPS everywhere
All traffic is encrypted, with strict transport security and headers that stop other sites from framing ours.
Hosting
Servers and the database run on Tencent Cloud in Singapore. Database backups are kept for 14 days.
Payments by Polar
Polar, our merchant of record, handles checkout and invoices. Card numbers never reach our servers.
Signed webhooks
Outgoing webhooks are signed, and only go to public HTTPS addresses, never to private networks.
Found a security issue?
Please tell us privately at ardhika@futureleaderleague.com, with the steps to reproduce it. We'll confirm we received it and keep you posted while we fix it.
Questions about security?
We're happy to walk your team through how GoGetCited handles data.