Privacy Policy

Account information: name, email address, and password (stored as a secure hash).

Payment information: processed by Paddle. We do not store full credit card numbers on our servers.

Usage data: feature usage, conversation metadata, generated assets, subscription status, and technical logs (IP address, browser type, timestamps) for security and analytics.

OAuth tokens: if you connect Meta or Google Ads accounts, encrypted tokens are stored to enable integrations.

We use your information to provide and improve the Service, process subscriptions, enforce usage limits, respond to support requests, and comply with legal obligations.

AI prompts and outputs may be processed by third-party AI providers to deliver the Service. We do not sell your personal data.

We share data with service providers who help us operate the Service, including Paddle (payments), Google (AI and optional OAuth), and cloud infrastructure providers. These partners are bound by contractual obligations to protect your data.

We may disclose information if required by law or to protect our rights, users, or the public.

We retain account and usage data while your account is active and for a reasonable period afterward to comply with legal and operational requirements. You may request account deletion by contacting oguz@ctrlwe.net.

We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, and encrypted storage for sensitive OAuth tokens. No method of transmission or storage is 100% secure.

Depending on your location, you may have rights to access, correct, delete, or export your personal data. Contact oguz@ctrlwe.net to exercise these rights.

If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.

We use essential cookies for authentication, session management, and locale preferences. We do not use third-party advertising cookies.

Privacy inquiries: oguz@ctrlwe.net