The controller responsible for data processing is: Antom Media UG Am BioPark 1 93053 Regensburg Germany Represented by Managing Director: Andreas Ehret Email: info@antom.media

A statutory data protection officer is currently not designated. For data protection requests, contact: Email: info@antom.media Subject: Data Protection

We process in particular: - master data (name, email address, account data) - contract data (selected plan, billing cycle, status) - payment and transaction data (via payment providers) - usage data (feature usage, limits, logs) - technical data (IP address, browser info, timestamps) - communication data from support requests

Data is processed for: - operation and provision of the App - registration, authentication, and account management - contract execution and billing - support and customer communication - fraud prevention and security - product analytics and improvement Legal bases include: - Art. 6(1)(b) GDPR (contract performance) - Art. 6(1)(c) GDPR (legal obligation) - Art. 6(1)(f) GDPR (legitimate interests) - Art. 6(1)(a) GDPR (consent, where requested)

To provide our services, we use processors and service providers, especially in the areas of: - hosting and infrastructure - payment processing (e.g. Stripe) - email delivery/SMTP - AI API services for analytics features (e.g. OpenRouter, Google models) - database and integration services (e.g. NocoDB) Such recipients process data only under appropriate contractual safeguards.

If providers outside the EU/EEA are involved, transfers take place only where appropriate safeguards exist, especially EU Standard Contractual Clauses or equivalent mechanisms.

Personal data is stored only as long as necessary for the purposes described. Key criteria include: - contract term and follow-up processing - statutory retention obligations (e.g. tax and commercial law) - legitimate interests in IT security and abuse prevention

In the "Search Analytics" section you can voluntarily connect your own Google Search Console account to CiteBoost. To do so, you sign in with Google and explicitly grant CiteBoost read-only access (Google OAuth scope "webmasters.readonly"). Data we process: - the list of your Search Console properties - search queries, clicks, impressions, click-through rate and average position for the property and date range you select - the access tokens issued by Google Purpose: solely to display this data to you inside your CiteBoost account. Search Console data is fetched live from Google on each request and is not stored permanently on our side. We do not change any settings in your Search Console, do not share the data with third parties, and do not use it for advertising or for training AI models. Storage: we only store the access tokens, and we store them encrypted. "Disconnect" revokes the access at Google and deletes the tokens. You can also remove the access at any time at https://myaccount.google.com/permissions. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. CiteBoost's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use technically necessary storage mechanisms (e.g. session data, local storage, security and server logs) to operate the App securely and reliably. You can manage or delete cookies via browser settings. Disabling technically required functions may limit usability.

You have, in particular, the right to: - access (Art. 15 GDPR) - rectification (Art. 16 GDPR) - erasure (Art. 17 GDPR) - restriction of processing (Art. 18 GDPR) - data portability (Art. 20 GDPR) - object to processing based on legitimate interests (Art. 21 GDPR) - withdraw consent with future effect You also have the right to lodge a complaint with a supervisory authority.

For privacy-related requests, contact: info@antom.media For faster processing, please include subject "Data Protection" and, if available, your account email.