ControlDrill · Privacy & Data

ControlDrill privacy & data

Read from ControlDrill's own page on 2026-11-09. 18 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.

Role

value: both
we act as a controller of that business-contact data
Read from ControlDrill's own page on 2026-11-09

Data categories

category: identifying
Name, email address, and authentication identifiers used when you sign in to buy or manage exercises
Read from ControlDrill's own page on 2026-11-09
category: financial
Purchase status, customer and payment identifiers, and payment metadata.
Read from ControlDrill's own page on 2026-11-09
category: behavioral
Timed injects, messages, decisions, owners, timestamps, engagement signals, and related session state
Read from ControlDrill's own page on 2026-11-09
category: device
IP address, user agent, request paths, and similar logs needed to operate, secure, and debug the Service.
Read from ControlDrill's own page on 2026-11-09
category: communication
Messages you send to support (for example via hello@controldrill.com).
Read from ControlDrill's own page on 2026-11-09

Purposes

purpose: Authenticate buyers and manage purchases
Authenticate buyers and manage purchases
Read from ControlDrill's own page on 2026-11-09
purpose: Process payments and prevent fraud
Process one-time payments and prevent fraud
Read from ControlDrill's own page on 2026-11-09
purpose: Run the facilitated exercise
Run the facilitated exercise (magic-link access, injects, decision capture)
Read from ControlDrill's own page on 2026-11-09
purpose: Model training
We do not use customer content to train models.
Read from ControlDrill's own page on 2026-11-09

Retention

scope: Uploaded documents and extracted plan corpusperiod: 12 months
retained for up to 12 months from upload under our stated retention policy
Read from ControlDrill's own page on 2026-11-09
scope: Account and billing records
retained as long as your account relationship is active and as needed for tax, fraud prevention, and dispute purposes
Read from ControlDrill's own page on 2026-11-09

Residency

region: United States and other countries
They may process data in the United States and other countries where they operate.
Read from ControlDrill's own page on 2026-11-09

International transfers

The page states nothing on this.

Subprocessors

Data processing agreement

available: true
We process that data only to provide the Service under our Data Processing Agreement .
Read from ControlDrill's own page on 2026-11-09

Deletion

route: Email hello@controldrill.com or in-product delete controls for uploaded plans
You may request deletion or export of personal data and customer content we hold by emailing hello@controldrill.com
Read from ControlDrill's own page on 2026-11-09

Data subject rights

right: deletion
You may request deletion or export of personal data and customer content we hold
Read from ControlDrill's own page on 2026-11-09
right: export
You may request deletion or export of personal data and customer content we hold
Read from ControlDrill's own page on 2026-11-09

Sale or sharing

stance: prohibited
We do not sell personal information.
Read from ControlDrill's own page on 2026-11-09

Document

Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page