Scope
This Privacy Policy applies to your use of ctrlc.ai. We operate from the Republic of Korea for a global audience.
This policy covers our service and providers processing data for us. Other websites you visit have their own policies. Contact hello@ctrlc.ai with privacy questions.
What we collect
Information you give us
- Account details from your sign-in provider (name, email, profile image).
- Profile details you add, including your bio, location, public contact information, website, and social links.
- Public and private uploads: images, prompts, titles, descriptions, source links, and collection information.
- Messages or feedback you send to our support team.
Information generated automatically
- How you use the site: views, searches, prompt copies, saves, and likes.
- Device details: IP address, browser type, and rough location data.
- Security and error logs to keep the site running safely.
- AI-generated titles, tags, and similarity information for public and private refs.
How we use it
We use this information to:
- Run the platform and provide features like search, collections, and prompt copying.
- Analyze public and private images and prompts to organize refs and find similar content.
- Remember your preferences (like dark mode or grid layout).
- Understand how people use the site so we can improve it.
- Keep the platform secure, prevent spam, and enforce our rules.
- Send you important account updates or support replies.
- Comply with legal requirements.
Depending on the purpose and applicable law, we rely on providing the service you request, legitimate interests such as security and improvement, legal obligations, or consent. Where consent is required, we obtain it separately and you may withdraw it.
AI processing
We use Google Gemini to analyze public and private images and prompts for organization and similarity features. Choosing Private limits publication, but does not disable AI processing.
AI providers may retain or process inputs under their applicable service terms. Do not upload confidential material or sensitive personal data. Contact hello@ctrlc.ai with questions or requests about this processing.
What is public
Public profiles, refs, prompts, and collections can be viewed, copied, and indexed by search engines. Private refs are restricted in the site interface, but anyone with a direct media link can access the file. Avoid uploading content that requires confidential storage.
Public images are offered under CC0 to the extent of the uploader's rights. Deletion does not revoke that dedication or remove copies held by others. Privacy and other third-party rights still apply.
How we share data
We may share data:
- With service providers: Convex for database and authentication, Cloudflare for media storage and delivery, Google Gemini for AI analysis, and Umami hosted on Vercel for analytics.
- With the public, for the content you intentionally publish.
- When necessary and legally permitted to comply with legal obligations, respond to valid requests, or protect rights and safety.
- In connection with a merger, acquisition, or sale of the business, subject to applicable privacy requirements.
- With your direct consent.
We do not sell your personal data. We also do not use your uploaded private information for third-party targeted advertising.
Cookies and analytics
We use cookies and similar storage for sign-in and preferences, and Umami analytics to understand page views and interactions with the service.
You can manage browser storage in your browser settings, although some features may stop working. Where required by law, non-essential analytics requires separate consent.
International data
Most service data is stored in the United States. Our providers may also process data in other countries. Contact hello@ctrlc.ai with questions about international processing or to exercise applicable privacy rights.
Data retention
We keep data as needed to provide the service and meet legal obligations. After account deletion, your account and profile information, including your profile image, is kept for 30 days and then deleted. Records of deleted refs without their image files, files uploaded but never added to a ref, and backups may be kept longer.
When you delete a ref, it is removed from the site right away. Its image files are kept for 30 days for security and operational purposes. They are then deleted from our storage, and direct media links stop working. The same applies to private refs deleted with your account and to profile images you replace or remove. Contact hello@ctrlc.ai to request deletion of retained personal data.
Public images and copies saved by others may remain available after deletion. Your rights to request removal of personal data still apply.
Your rights
Depending on applicable law, you may access, correct, delete, or obtain a copy of your data, restrict or object to processing, and withdraw consent. Some controls are available in account settings.
Send requests to hello@ctrlc.ai. We may verify your identity and will respond within applicable legal deadlines. You may also complain to Korea's Personal Information Protection Commission or your local privacy authority.
Security
We take measures to protect your data, but no online service is completely secure. Keep your login secure and report suspected unauthorized access to hello@ctrlc.ai.
Children
Our service is for users aged 18 and older. We do not knowingly collect personal information from children under 14. If we learn that an account belongs to someone under 18, we will restrict access and take appropriate steps, including deletion of personal information, as required by law. Contact hello@ctrlc.ai to report an underage account or request deletion.
Changes
We will update this page and give advance notice of material changes where practicable. We will obtain separate consent before new processing where required by law.
Questions? Contact us at hello@ctrlc.ai.
Last updated October 12, 2026