Who is responsible
Cited Leadership is operated by TOO Bagdarly Kadam, BIN 241040038701, Akbugy 2/2, Astana, Kazakhstan 010000. Contact hello@citedleadership.com for account or privacy questions. Cited Leadership is an independent publication and product, separate from Miras and the organisations we cite.
Accounts and Google sign-in
Accounts are optional. Published reading is available without an account. Clerk provides account registration, email sign-in, Google sign-in, profile controls and session management on our behalf.
When you choose Google sign-in, Google shares your Google account identifier, email address and verification status, and, when available, your name and profile-picture URL with Clerk for your Cited Leadership account. We use these details to create or link your account, authenticate you, display your profile and protect access. Clerk processes the authentication tokens and session records associated with sign-in. Our website checks your signed session and receives your account and session identifiers; this account flow does not copy your Google profile into our newsletter database.
We request only basic identity scopes: openid, email and profile. We do not request access to Gmail messages, Drive files, contacts or calendars. Google-provided data is used for the account functions described here. We do not sell it, use it for advertising, or use it to train AI models. Google-data transfers are limited to providers needed to operate these functions, security and legally required disclosures. See Google’s identity reference and Google’s API Services User Data Policy.
Signing in does not subscribe you to the newsletter or activate paid services. Signed-in accounts can save an optional profile, remembered context and an action list in a free private workspace, and view, export or remove their account-owned conversations, saved work and earlier challenges where present. The workspace shows whether AI replies are available. When enabled, signed-in adults can request one free completed reply per monthly account cycle. Paid memberships, checkout and document uploads remain Coming soon. School inquiries are not open.
Your workspace context and records
You can optionally save your own name and school, role, country, curriculum, phase and priorities, up to three leadership challenges, year and career goals, and actions you have tried. The workspace also stores remembered context, action lists and statuses, conversation titles and any existing questions, replies, saved work or feedback associated with your account. Earlier challenge titles, decision questions and short context may remain in the legacy workspace. A verified Clerk account identifier associates those records with you in the connected Cloudflare D1 database on Sites. Passwords are handled by Clerk and are not stored in the workspace database.
Workspace requests verify your Clerk session, and record access is restricted to the matching account. Records are not published as research examples or shared with other reader accounts. Authorised operators and providers may access records as needed to run, secure and support the service.
Your own name and school are optional; use broad, anonymous context for other people. Do not enter student or other staff names, health or safeguarding records, or confidential school material. Saving workspace context or actions alone does not send them to a model provider. Requested AI replies use the processing described below. Document uploads and paid memberships remain Coming soon.
Profile, remembered context, actions and saved work remain until deleted through workspace controls or an operator process. On authenticated workspace requests, and when an operator invokes the retention process, unsaved conversations inactive for more than 90 days are removed unless they contain a saved reply. An unattended conversation is not guaranteed to disappear at an exact deadline; a background schedule has not been verified for this deployment. Deployment-specific database, backup and log geography, administrative access locations, retention and international transfer arrangements remain unverified and under review. Provider statements linked below do not establish those deployment details. We do not promise Kazakhstan-only processing, immediate backup erasure or verified legal compliance.
AI replies
When you request an AI reply, we send your question, selected broad profile and remembered context, recent conversation text and relevant research passages to Google's paid Gemini API. Google processes this information to count input tokens, draft the reply and check whether its claims match the supplied passages. Saving your profile or actions alone does not call the model.
You can review, edit or exclude remembered context and exclude saved school context from a conversation before requesting a reply. We remove your saved name and school name from model context, but this does not reliably remove every name or personal detail. Use broad, anonymous context. Do not enter student or staff names, sensitive personal information, health or safeguarding records, or confidential school material.
Google's paid-service terms say paid prompts and replies are not used to improve its products. This restriction depends on active billing for our Google project; it is not a blanket promise that information can never be used by a model. Google's standard abuse-monitoring policy retains prompts, context and output for 55 days for security and policy purposes. Authorised Google personnel may review flagged content. Google may use this information to train models for policy enforcement despite the product-improvement restriction, and may make legally required disclosures. Google may process this information internationally.
Optional Google project logging and dataset sharing are separate from abuse monitoring. We do not submit private workspace content to optional shared datasets. These settings do not remove standard security retention; see Google's logging and sharing policy. A dated setting inspection is not an ongoing privacy guarantee.
Public research searches use fixed topic queries or validated public DOI identifiers, rather than your private school text. Your question and reply are stored in your account's workspace under the retention rules in this notice. Removing them here does not erase Google's separate security records or provider backups. Authorised operators and providers may access information for operations, support, security or legal duties. This is not end-to-end encryption or a promise of complete confidentiality.
We do not use private workspace content for publication, evaluation or model training, or share it for those purposes, without separate consent. Requested AI processing and provider security/legal uses described above are distinct from those additional uses. Newsletter consent does not authorise them.
Messages sent to us
If you email hello@citedleadership.com, Resend receives the message and forwards it to an owner-controlled Gmail inbox. This can include your sender details, subject, message text and supported attachments. We use correspondence to respond, handle requests and resolve issues. Our site database records message/event identifiers, processing status and timestamps for delivery and retries, rather than the body or attachments.
Please do not send student records, sensitive personal information or confidential school documents. The public service does not accept these as research inputs.
Optional anonymous reading counts
You can optionally enable anonymous reading counts on a public page. We count page loads and source, worksheet, print, newsletter-link, accepted or failed signup-submission and fixed-choice feedback actions in daily totals by canonical page, broad referral category and page language. We use no analytics cookies or visitor IDs, exclude URL queries and fragments and never link these counts to accounts or newsletter addresses. Counts are actions, not unique visitors or sessions; repeated use is optional self-report. Browser Do Not Track and Global Privacy Control disable these counts. Your choice applies only to the current loaded page and can be turned off there.
Aggregate reading counts cover the most recent 90 UTC days. Older counts are removed when the next count is recorded or an operator report is requested; they are excluded from reports after this window even if no request has triggered cleanup. Minute rate-limit counters contain no visitor information and are cleaned at the same time. Hosting and security logs have separate provider schedules.
Newsletter reporting separately uses non-test contact states (including pending registrations and withdrawals), confirmations and signed provider delivery events. A signup submission is not an address confirmation, and provider acceptance is not delivery. We do not infer a reading-to-newsletter conversion link from these separate totals.
Providers, sharing and international processing
We use Clerk for accounts; OpenAI Sites and Cloudflare infrastructure for the website, database and technical operations; Resend for email and newsletter contacts; Google/Gmail for Google sign-in and support correspondence; and Google's paid Gemini API for requested AI replies, input-token counting and support checks. Vercel provides domain DNS. Google Search Console and Bing Webmaster Tools provide search-indexing reports and are separate from the newsletter contact list.
Our providers operate internationally. Clerk states that its account data is hosted in the United States. Resend states that stored email data is held in the United States; selecting an email sending region does not change that storage location. OpenAI Sites does not offer region-specific data residency. Provider support, infrastructure, backups and security processing may involve international access. We do not promise Kazakhstan-only storage or a particular location for every copy. Contact us before submitting information that must stay in a particular country.
Providers process information to deliver their services under the applicable arrangements. See Clerk’s processing terms and subprocessors, Resend’s processing terms and subprocessors, and Google’s privacy information. Authorised operator personnel can access relevant records to operate the service, answer requests and investigate abuse. We may disclose information where required by law or necessary to protect rights and security. We do not sell personal information or share it for another party’s independent advertising.
How long information remains
Account records remain while the account is active and as needed to operate authentication, handle requests, investigate abuse or meet legal obligations. Newsletter consent, contact and operational records are not automatically deleted after unsubscribe. Unconfirmed registrations are not automatically deleted when their 48-hour confirmation link expires. Support correspondence remains in our support inbox until removed following a request or an operator retention review. The current application does not apply a fixed automatic purge period to these records.
You can ask us to close an account or remove information. We will assess the request, remove information where required and permitted, and explain any lawful reason for retaining limited records, such as suppression, security, a dispute or a legal obligation. Provider backups and security logs follow separate schedules and may not disappear immediately. Resend publishes its own email/log retention information; that provider schedule is not a deletion deadline for the whole Cited Leadership service.
Your choices and privacy requests
Depending on the law that applies, you may request information or a copy of your data, correction, account closure, deletion, restriction, objection, or withdrawal of consent, and may complain to the relevant supervisory authority. Email hello@citedleadership.com with the subject “Privacy request”. We may ask for reasonable evidence that you control the relevant account or address and will respond within applicable legal deadlines. We will explain if a request cannot be fully fulfilled and why.
Use Clerk’s account profile controls to review and update identity information. In My workspace, you can edit your profile and remembered context, manage actions, remove individual conversations or earlier challenges, download your workspace data as JSON, or remove your workspace content. Removing a remembered detail does not erase text you separately saved in another record; remove that record or clear workspace content too. Conversation deletion clears its question and reply text, but separately saved actions remain until removed. Workspace-content deletion clears the corresponding private content and active records while preserving limited account and metering controls: your account identifier and verified account-anniversary anchor, and any content-free allowance records until their recorded reset and a later cleanup. Operational cost and rate records, if present, are eligible for removal by the retention process after 30 days. The account anchor has no automatic purge deadline. These controls do not delete your Clerk sign-in account, independently confirmed newsletter subscription, provider backups or security logs. Delete workspace data before deleting the Clerk account, or contact us if you have already deleted that sign-in account. Contact us for a service-wide export or deletion request. Signing out ends browser account access rather than deleting stored information.
You can also remove the Google connection in your Google Account. This stops that connection; it does not itself delete information already held in Cited Leadership or Clerk. See Google’s connection guidance.
We use information for the services you request and for the purposes explained here. Where applicable law requires consent, optional processing depends on that consent; legal duties and permitted security or dispute-handling uses may provide a separate basis. Withdrawing newsletter consent does not close an account, and closing an account does not by itself unsubscribe an independently confirmed newsletter address.
Security, audience and changes
The website uses HTTPS and verifies signed account sessions. Runtime secrets stay in server configuration. No service can guarantee absolute security. Report an account or security concern to hello@citedleadership.com.
The publication is intended for adult education professionals and is not directed at children. Do not submit children’s or students’ personal information. If you believe such information was provided, contact us so we can address it.
This notice is effective from 12 October 2026 Pacific time (13 October 2026 UTC). We will update the date when practices change and communicate material changes where required. New paid, school or upload features, and material changes to AI processing, require current disclosures before activation. Read the Terms of Use for the current service conditions.