Legal
Privacy Policy
We collect only what you send us through our contact form. We set no analytics, advertising, or personalization cookies, and we run no trackers of our own.
Last updated September 4, 2026
Who we are
Citigen Solutions LLC, trading as Citigen Labs (“Citigen Labs,” “we,” “us,” or “our”), is a digital product studio based in Newark, Delaware, United States. We operate this website at citigenlabs.com.
For any privacy question or request, contact us at info@citigenlabs.com. For the purposes of the UK and EU General Data Protection Regulation, Citigen Solutions LLC is the data controller for the information described here.
What this policy covers
This policy explains how we handle personal information collected through this website. It does not cover information we process on behalf of a client under a signed services agreement. In those engagements the client is the data controller and their own privacy policy applies; our obligations are set out in that agreement.
Information you give us
The only way this website collects personal information is through the project inquiry form. When you submit it, we receive:
- Your name
- Your email address
- Your company name, if you choose to provide it
- The project type you select
- An estimated budget range, if you choose to provide one
- The description of your project that you write
Name, email, project type, and project description are required to submit the form. Company and budget are optional. Please do not send confidential, sensitive, or regulated information through this form. If your inquiry involves health information, financial account details, or anything similar, email us first and we will arrange a secure channel.
Cookies and tracking
We set no analytics, advertising, or personalization cookies of our own. We run no analytics product, no advertising pixels, no session recording, and no social media trackers, and we write nothing to local storage or session storage. Our fonts are served from our own domain rather than loaded from an external font provider.
One cookie can still be set that we do not control. Our site is delivered through Cloudflare, and Cloudflare may set a short-lived __cf_bm cookie to tell human visitors from bots. It exists for security and bot management, expires within about half an hour, and is not used by us for advertising, profiling, or measuring your behaviour. Cloudflare may also set similar security cookies when it challenges suspicious traffic.
Because we set no cookies of our own for tracking, there is no cookie banner and nothing to opt out of. If we ever add analytics, we will update this policy before turning it on.
Information collected automatically
Like all websites, ours is delivered by a hosting provider that processes basic technical information to serve pages and protect against abuse. This typically includes your IP address, browser type, requested page, and the time of the request. This data is handled by our hosting provider as part of delivering and securing the site. We do not use it to build a profile of you and we do not combine it with the information you send through the form.
The agent demo on our homepage
The interactive agent demo on our homepage runs entirely in your browser against fixed sample data. Whatever you type into it is matched against a short list of example workflows and never leaves your device: it is not sent to us, not sent to a language model, not sent to any third party, and not stored anywhere. Closing the tab discards it. The names, appointments, shifts, and work orders it shows you are invented examples, not real records.
How we use your information
We use what you send us to:
- Read and respond to your inquiry
- Send you an automated confirmation that we received it
- Discuss and scope a possible engagement
- Keep a record of our business correspondence
We do not sell your personal information. We do not share it with advertisers. We do not use it to send marketing newsletters unless you separately ask to receive them.
Legal bases for processing
If you are in the United Kingdom or the European Economic Area, we rely on these legal bases under the UK GDPR and EU GDPR:
- Your consent. You choose to submit the form and send us your details. You may withdraw consent at any time by emailing us.
- Steps prior to entering a contract. Where your inquiry is about engaging us for work, processing it is necessary to respond and prepare a proposal.
- Our legitimate interests. Keeping records of business correspondence, and keeping our site secure and available.
Who we share it with
We share your information only with the service providers that make this site and our correspondence work:
- FormSubmit processes the contact form and forwards its contents to our email address. Your submission passes through their systems. Their handling of that data is governed by their own privacy policy at formsubmit.co/privacy.
- Our email provider, which receives and stores our correspondence with you.
- Our hosting provider, which serves this website.
We may also disclose information where we are required to by law, or where necessary to establish, exercise, or defend a legal claim.
International transfers
We are based in the United States and our service providers may store or process data there or in other countries. If you contact us from the United Kingdom or the European Economic Area, your information will be transferred to the United States. Data protection law in the United States differs from that in the UK and EEA. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. You may ask us for details of the safeguards that apply.
How long we keep it
We keep project inquiries for up to 24 months after our last contact with you, then delete them, unless we have entered into an engagement together or we need to retain the records longer for legal, tax, or accounting reasons. If you ask us to delete your inquiry sooner, we will.
Your rights
Depending on where you live, you may have the right to:
- Ask what personal information we hold about you and get a copy of it
- Have inaccurate information corrected
- Have your information deleted
- Object to or restrict how we use it
- Receive your information in a portable format
- Withdraw consent you previously gave
To exercise any of these, email info@citigenlabs.com. We will respond within 30 days. We will not charge you or treat you differently for making a request.
If you are in the UK, you may complain to the Information Commissioner's Office. If you are in the EEA, you may complain to your national supervisory authority. We would appreciate the chance to address your concern first.
Security
This site is served over HTTPS. We limit access to inquiries to the people who need to read them. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable measures appropriate to the small volume and low sensitivity of the data we handle.
Children
This website is intended for businesses and adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes to how we handle your information will be reflected here before they take effect.
Contact us
Citigen Solutions LLC
Newark, Delaware, United States
info@citigenlabs.com