< Back

Privacy Policy

Last updated: 14 July 2026

Your privacy is important to us. It is CTRLpotato's policy to respect your privacy regarding any personal information we may collect through our software and website.

What We Collect and Why

We collect and process information needed to provide, secure, and improve the CTRLpotato service. This includes:

• Account Information: Your email address or third-party login (e.g. Google Sign-In) is used to create and manage your account.
• Subscription & Payment Info: Subscription payments are securely processed via Stripe. CTRLpotato does not store or handle your full payment card details. We only store the metadata required to manage your subscription (e.g. plan, status, billing history).
• Local App Content: Documents and interaction history that you add to the CTRLpotato desktop app can be stored on your device. When you invoke an AI feature, the context needed for that request may be transmitted for processing as described below.
• AI Request Content: When you use an AI feature—including the website Tell Me About Yourself generator—the text, job context, selected content, screenshots, or transcriptions you submit is sent through CTRLpotato's service to an external AI provider to generate the requested result. We process this content to provide the feature. The submitted content and generated answer are not intentionally included in analytics event properties.
• Interaction History (Stored Locally): A local history of your previous interactions is stored on your device to support features like the history view. You can delete this history at any time from within the app.
• Website Generator Security and Allowance Data: The free website generator does not require an account. To enforce its three-run rolling 24-hour network allowance and prevent automated abuse, we may process an IP address, browser and security signals, a Cloudflare Turnstile token, and limited request metadata such as time, result status, and remaining allowance.
• Website Analytics: We may collect page views, broad device and location information, referral or campaign parameters, and product events such as starting or completing a tool. We do not intentionally place résumé text, job descriptions, generated answers, or practice audio in website analytics.
• Local Voice Practice: Audio recorded by the current website generator's voice-practice control is used for local playback in your browser and is not sent to the answer-generation service. When live transcription is supported, your browser may process speech through its own speech service. CTRLpotato receives neither the practice recording nor the resulting transcript; the transcript is only shown and editable in the current tab.

AI request content is transmitted only when you ask an AI feature to generate a result. AI output can be inaccurate, so you should review it before using it. An external AI provider's handling and retention of request content is governed by the applicable provider terms and the service configuration CTRLpotato uses.

Third-Party Services

We use trusted third-party services to operate core parts of CTRLpotato, including:

• Stripe for subscription payments and billing
• Supabase for account and authentication services
• AI service providers for processing AI requests and generating responses
• Cloudflare for network delivery, security, and Turnstile abuse prevention
• Umami for website analytics

These providers receive information needed to perform their function and handle it under their applicable terms, privacy commitments, and our service configuration.

We may introduce additional services over time to improve or maintain the product. Any such services will follow the same privacy principles.

Your Control and Rights

You may decline to use specific features of CTRLpotato, such as submitting documents or text for an AI response, though some functionality may be limited. The free website generator can be used without creating an account.

You may request deletion of your account and associated metadata by contacting us at [email protected].

Locally stored app data can be deleted from within the app. Resetting or closing the website generator clears its current in-browser form and local practice recording.

External Links

CTRLpotato may include links to third-party websites not operated by us. We are not responsible for their content or privacy practices.

Acceptance

Your continued use of CTRLpotato constitutes acceptance of this privacy policy and how your data is handled.

This policy is effective as of 14 July 2026.