Citruss Privacy Policy

Last updated: July 15, 2026

Effective for all visitors to the Citruss waitlist site worldwide

This Privacy Policy explains how Citruss ("Citruss," "we," "us," or "our") collects, uses, and protects information when you visit this waitlist site (the "Site") or join the Citruss waitlist. The Site exists for one purpose: to let you sign up for early access to Citruss and to help us measure how well our marketing brings people here. This policy covers only the Site; when the full Citruss platform launches, it will have its own privacy policy.

Visitors come to the Site from around the world. Depending on where you're located, you may have specific rights under laws such as the EU/UK General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA"), and other applicable data protection laws. Section 8 below explains these rights.

1. Who We Are

The Site is operated by Citruss. For the purposes of GDPR, Citruss is the data controller for the personal data described in this policy.

Contact us: usecitruss@gmail.com for any privacy question, data rights request, or concern about how we handle your information.

2. Information We Collect

2.1 Information you provide directly

  • Email address: the only information we ask for when you join the waitlist. Waitlist submissions are processed by our form provider, Formspree.

2.2 Information collected automatically

  • Device and usage data: IP address, browser type, device type, operating system, pages visited, referring URLs, and timestamps.
  • Cookies and similar technologies: as described in Section 4, used to remember your cookie choice and, only where you've consented, for analytics and advertising measurement through Google, Meta, and TikTok.
  • Approximate location: inferred from IP address by our analytics and advertising partners.

3. How We Use Information

We use this information to:

  • Add you to the waitlist and contact you about early access to Citruss.
  • Understand how people find and use the Site.
  • Measure and improve the performance of our ad campaigns on Google, Meta (Facebook/Instagram), and TikTok.

Where GDPR or UK GDPR applies, we rely on consent for analytics and advertising cookies (which you can withdraw at any time, see Section 4), on taking steps at your request to add you to the waitlist and contact you about early access, and on our legitimate interest in keeping the Site secure and functioning.

4. Cookies and Tracking Technologies

When you first visit the Site, a cookie banner asks for your consent before any non-essential cookie is set, with equally clear options to accept or decline. The only cookies that don't require consent are the strictly necessary ones that store your cookie choice itself, since the Site can't remember your decision without them.

If you accept, the following tools are loaded:

  • Google Analytics and Google Ads measurement: to understand how visitors use the Site and how our Google ad campaigns perform.
  • Meta Pixel (Facebook/Instagram): to measure and improve our ad campaigns, including recording when a visitor joins the waitlist.
  • TikTok Pixel: to measure and improve our ad campaigns, including recording when a visitor joins the waitlist.

If you decline, none of these tools are loaded and no analytics or advertising cookies are set. You can change or withdraw your choice at any time.

5. How We Share Information

We do not sell personal data. We share information only with the service providers that run the Site and its campaigns:

We may also disclose information where required by law, legal process, or to protect the rights, property, or safety of Citruss, our users, or the public.

6. International Data Transfers

The providers listed above operate globally, so your information may be transferred to and processed in countries other than your own, including the United States. Where data is transferred out of the EU/UK, these providers rely on safeguards such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

7. Data Retention

  • Waitlist email addresses: kept for as long as needed to run the waitlist and contact you about early access, or until you ask us to delete them.
  • Analytics and advertising data: retained according to each provider's own retention settings.
  • Cookie consent choice: stored in your browser until you clear it or change your preference.

8. Your Rights

8.1 If you're in the EU/UK/EEA (GDPR)

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request erasure of your data.
  • Restrict or object to certain processing.
  • Data portability, for data you provided to us.
  • Withdraw consent at any time, without affecting processing carried out before withdrawal.
  • Lodge a complaint with your local data protection authority.

8.2 If you're a California resident (CCPA/CPRA)

You have the right to:

  • Know what personal information we collect, use, and disclose.
  • Delete personal information we hold about you.
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of personal information: Citruss does not sell personal data, and does not share it for cross-context behavioral advertising except where you've consented to advertising cookies (see Section 4).
  • Non-discrimination for exercising any of these rights.

8.3 Other jurisdictions

If you're located elsewhere, you may have similar rights under your local data protection law. Contact us and we'll address your request under the applicable framework.

To exercise any of these rights, email usecitruss@gmail.com. We will verify your identity before fulfilling requests and respond within the timeframe required by applicable law. You can also manage tracking yourself: decline or withdraw cookie consent using the button in Section 4, use the Google Analytics Opt-out Browser Add-on, or adjust your Meta ad settings and TikTok ad settings.

9. Data Security

We use industry-standard measures to protect the information we handle, including encryption in transit and reliance on reputable providers for form processing and hosting. No system is completely secure, and we cannot guarantee absolute security; if we become aware of a breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.

10. Children's Privacy

The Site is not directed to children under 13 (or 16 where the EU requires a higher age), and we do not knowingly collect personal data from children below that age. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date.

12. Contact Us

Questions, concerns, or rights requests: usecitruss@gmail.com

Citruss does not currently maintain a public postal address. All privacy inquiries, including formal data rights requests, are handled through the email above.

Some cookies run Citruss. Others help us understand usage and show relevant ads. See our Privacy Policy for more details.