ControlDrill · Privacy & Data
ControlDrill privacy & data
Read from ControlDrill's own page on 2026-11-09. 18 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.
Role
value: both
we act as a controller of that business-contact dataRead from ControlDrill's own page on 2026-11-09
Data categories
category: identifying
Name, email address, and authentication identifiers used when you sign in to buy or manage exercisesRead from ControlDrill's own page on 2026-11-09
category: financial
Purchase status, customer and payment identifiers, and payment metadata.Read from ControlDrill's own page on 2026-11-09
category: behavioral
Timed injects, messages, decisions, owners, timestamps, engagement signals, and related session stateRead from ControlDrill's own page on 2026-11-09
category: device
IP address, user agent, request paths, and similar logs needed to operate, secure, and debug the Service.Read from ControlDrill's own page on 2026-11-09
category: communication
Messages you send to support (for example via hello@controldrill.com).Read from ControlDrill's own page on 2026-11-09
Purposes
purpose: Authenticate buyers and manage purchases
Authenticate buyers and manage purchasesRead from ControlDrill's own page on 2026-11-09
purpose: Process payments and prevent fraud
Process one-time payments and prevent fraudRead from ControlDrill's own page on 2026-11-09
purpose: Run the facilitated exercise
Run the facilitated exercise (magic-link access, injects, decision capture)Read from ControlDrill's own page on 2026-11-09
purpose: Model training
We do not use customer content to train models.Read from ControlDrill's own page on 2026-11-09
Retention
scope: Uploaded documents and extracted plan corpusperiod: 12 months
retained for up to 12 months from upload under our stated retention policyRead from ControlDrill's own page on 2026-11-09
scope: Account and billing records
retained as long as your account relationship is active and as needed for tax, fraud prevention, and dispute purposesRead from ControlDrill's own page on 2026-11-09
Residency
region: United States and other countries
They may process data in the United States and other countries where they operate.Read from ControlDrill's own page on 2026-11-09
International transfers
The page states nothing on this.
Subprocessors
Data processing agreement
available: true
We process that data only to provide the Service under our Data Processing Agreement .Read from ControlDrill's own page on 2026-11-09
Deletion
route: Email hello@controldrill.com or in-product delete controls for uploaded plans
You may request deletion or export of personal data and customer content we hold by emailing hello@controldrill.comRead from ControlDrill's own page on 2026-11-09
Data subject rights
right: deletion
You may request deletion or export of personal data and customer content we holdRead from ControlDrill's own page on 2026-11-09
right: export
You may request deletion or export of personal data and customer content we holdRead from ControlDrill's own page on 2026-11-09
Sale or sharing
stance: prohibited
We do not sell personal information.Read from ControlDrill's own page on 2026-11-09
Document
Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page