Legal
Privacy Policy
Last updated: May 27, 2025
This Privacy Policy explains how Ctrl ("we," "us," or "our") collects, uses, and shares information when you use our web application and related services (the "Service"), including when you connect QuickBooks and Stripe.
Information we collect
Account information. When you sign up or sign in, we collect your email address and basic account details needed to operate the Service (for example, role and session data).
QuickBooks data. If you connect QuickBooks through Intuit, we receive OAuth tokens and identifiers (such as realm ID) and may access accounting data you authorize (for example, company profile, customers, invoices, or transactions) solely to provide the features you request.
Stripe data. If you use payment features, Stripe may process payment method and billing information on our behalf. We typically receive limited payment metadata (such as customer ID, subscription status, and transaction references), not full card numbers.
Usage and communications. We may collect log data, device/browser information, and analytics events. If you contact us, we collect the information you submit in your message.
How we use information
We use information to:
- Provide, secure, and improve the Service
- Authenticate you and maintain your session
- Sync and display data from connected QuickBooks accounts
- Process subscriptions and payments through Stripe
- Send service emails (such as magic sign-in links and account notices)
- Respond to support requests and comply with legal obligations
How we share information
We share information with service providers that help us run the Service, such as hosting, email delivery, analytics, Intuit (QuickBooks), and Stripe. These providers process data under contractual obligations appropriate to their role.
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets, with notice where required.
We do not sell your personal information.
Data retention
We retain information for as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal requirements. You may disconnect QuickBooks or close your account to stop new collection from that source; some data may remain in backups for a limited period.
Security
We use administrative, technical, and organizational measures designed to protect information, including encrypted transport (HTTPS), secure session cookies, and restricted access to production systems. No method of transmission or storage is completely secure.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To make a request, contact us through the homepage contact form. We may need to verify your identity before responding.
You can revoke QuickBooks access from your Intuit account settings and manage payment methods in Stripe where applicable.
Cookies and analytics
We use cookies and similar technologies for authentication and, where enabled, analytics (such as Google Analytics) to understand how the Service is used. You can control cookies through your browser settings; disabling them may affect sign-in and certain features.
International transfers
We may process information in the United States and other countries where we or our providers operate. Those locations may have different data protection laws than your jurisdiction.
Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version with a new "Last updated" date. Material changes may also be communicated by email or in-product notice where appropriate.
Contact
For privacy questions, use the contact form on our homepage.
This document is provided for informational purposes and does not constitute legal advice. Have counsel review before production use, especially for Intuit and Stripe partner requirements.
Questions? Contact us.