CtrlSite provides AI-assisted tools for managing authorized WordPress websites. This Privacy Policy explains how CtrlSite collects, uses, stores, and shares information when you access or use the platform.
Information We Collect
We collect information needed to provide and secure the service, including:
- account information such as name, email address, and profile image when provided through Google or Apple sign-in;
- conversation history, prompts, AI responses, operational logs, tool results, usage records, and support-related records;
- information about remote websites connected to CtrlSite, such as site URLs, display names, connection status, technical configuration, and authentication data required to provide the service;
- files or media uploaded by users for actions on connected remote websites;
- billing, usage, security, and audit records where applicable.
We do not currently use user analytics, advertising trackers, or behavioral profiling tools.
How We Use Information
We use information to:
- create and manage user accounts;
- authenticate access through Google and Apple;
- process user instructions and AI-assisted conversations;
- connect to authorized remote websites and perform requested actions;
- transmit uploaded files to connected remote websites when instructed by the user;
- maintain logs, security records, usage records, and service reliability;
- provide support, prevent abuse, and comply with legal obligations.
AI Processing
CtrlSite uses AI models provided by Anthropic, OpenAI, and Google Gemini. To process user requests, relevant conversation content, instructions, technical context, remote website information, files, images, or tool outputs may be sent to these providers. We use these services only to deliver platform functionality, not for advertising or user analytics.
Authentication Providers
When you sign in with Google or Apple, CtrlSite receives limited account information such as your name, email address, and profile image if provided by that provider. This information is used for authentication, account creation, security, and account management.
Remote Websites and Uploaded Files
Users may connect CtrlSite to remote websites they own or are authorized to manage. Information from those websites may be processed to complete user-requested actions. Files uploaded by users for remote website operations are sent to the relevant connected website as part of those actions. Remote websites may separately store or process that information according to their own configuration and policies.
Logs and Conversation Retention
CtrlSite preserves conversations, logs, site metadata, usage records, and related operational records while an account is active. After account deletion, these records are retained for up to 30 days unless a longer period is required for legal, security, billing, or dispute-resolution purposes.
Sharing of Information
We share information only as needed to provide and protect the service, including with:
- AI model providers used to process requests;
- Google and Apple for authentication;
- connected remote websites selected by the user;
- infrastructure, hosting, security, billing, or support providers;
- authorities or third parties where required by law or necessary to protect rights, security, or prevent abuse.
We do not sell personal data.
Data Security
We use reasonable technical and organizational measures designed to protect account information, service records, logs, and connection data. No online service can guarantee absolute security, and users are responsible for ensuring they only connect websites they are authorized to manage.
International Transfers
CtrlSite is operated from Romania and may use providers located in other countries, including outside the European Economic Area. Where required, we rely on appropriate safeguards for international data transfers.
User Rights
Depending on applicable law, users may request access, correction, export, restriction, or deletion of their personal data. Requests can be sent to privacy@ctrlsite.io. We may need to verify identity before processing a request.
Children
CtrlSite is not intended for children under 16. We do not knowingly collect personal data from children under 16.
Changes to This Policy
We may update this Privacy Policy as the platform changes or legal requirements evolve. Updated versions will be posted through the service or website.
Contact
CtrlSite is the controller responsible for this policy. For privacy questions or requests, contact privacy@ctrlsite.io.