Privacy Policy

1. Information We Collect

• Account information: your name, email address, and profile picture provided through Google sign-in.
• Machine information: names, operating system, hostname, IP address, and online status of computers you register.
• Session data: remote screen frames and mouse/keyboard input are relayed in real time to enable control. We do not intentionally record or store the contents of remote sessions.
• Billing information: subscription plan and payment records. Card details are processed and stored by Stripe, not by us.
• Usage & technical data: log data, timestamps, and limited diagnostics used to operate and secure the service.

2. How We Use Information

• To provide, operate, and secure the Controlly service.
• To process payments and manage subscriptions.
• To send transactional emails (e.g., team invitations, PIN reset links, service notices).
• To prevent fraud, abuse, and unauthorized access.
• To comply with legal obligations.

3. Service Providers (Sub-processors)

We share personal information only with service providers that help us run Controlly, under appropriate safeguards:

• Google — authentication (sign-in).
• Stripe — payment processing and billing.
• Resend — transactional email delivery.
• Cloud hosting & database providers — to host the application and store account data.

4. Remote Session Data

Screen frames and control inputs are relayed between the agent and your browser to make remote control work. This data passes through our servers transiently to bridge the connection and is not intentionally persisted. You are responsible for the data visible on machines you control.

5. Data Retention

We retain account and billing information for as long as your account is active and as needed to comply with legal, tax, and accounting requirements. Deleted accounts are archived and recoverable for 30 days, after which they are permanently purged. You may request deletion of your account at any time.

6. Security

We use industry-standard measures including encrypted connections, one-time pairing tokens with a limited install window, device-key revocation, and an on-screen indicator shown on a machine while it is being viewed. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may withdraw consent. To exercise these rights, contact contact@getcontrolly.com. You also have the right to complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

8. International Transfers

Your information may be processed and stored by our service providers in countries outside Canada. Where this occurs, we take steps to ensure comparable protection consistent with PIPEDA and PIPA.

9. Children

Controlly is not directed to individuals under 18 and we do not knowingly collect their personal information.

10. Changes & Contact

We may update this Privacy Policy and will post changes with a new effective date. Privacy questions and requests can be sent to contact@getcontrolly.com.