Control TowerPrivacy policy
In short
- Control Tower runs on your servers. Your prompts, responses, credentials, call records and users never reach us.
- This website uses no cookies, no analytics and no tracking.
- We keep what we need to sell and renew a subscription: who you are, what you bought and, once a day, two numbers from your servers (the year's request count and how many people use seats).
- We don't sell personal information, and we don't use it for advertising.
This policy explains what personal information Agent Control Tower ("we") collects through this website, our license service and our sales and support, and what we do with it.
What this policy doesn't cover: the software you run
Control Tower is self-hosted, so what it processes stays on your infrastructure. That includes the prompts, responses, tool calls and call records passing through it, your provider credentials and the people who sign in to it. Nothing sends that to us, and there is no usage telemetry.
The only thing an installation sends us is its daily license renewal, described below. You can turn that off with CT_LICENSE_SERVER=off. For the data your installation processes, you're the controller, and your own policies apply.
What we collect, and why
| When | What | Why |
|---|---|---|
| You visit this website | Nothing is stored by us. Our hosting provider records requests (IP address, browser, page) in its logs. Your browser fetches fonts from Google Fonts, which receives your IP address. | Running and securing the site |
| You start a trial | Company name and work email. We email that address a link to your key, so we know it's real; both are written into your trial key and recorded in our license service's logs. | Checking the address, issuing the key; one follow-up about your trial, which you can opt out of |
| You buy a subscription | Name, email, billing address and payment details, collected on Stripe's checkout page. The payment is sold through Link, Stripe's merchant-of-record service, which handles the payment, taxes, receipts and invoices under its own privacy policy. We see your name, email, billing address and subscription, not your full card number. | Issuing and renewing your license, seat changes, and our records |
| Your servers renew their key (once a day) | The license key (which names your organisation, email and plan), the number of requests this license year and when that year began, how many people use seats, whether the server's clock was found set back (and by how much), and the server's IP address as part of the request. Nothing else. | Renewing your key; seeing whether your plan fits at renewal; not reducing seats below those in use |
| You write to us | Whatever you send | Answering you |
Our lawful bases, where the GDPR or UK GDPR applies:
- Performing our contract with you: trials, subscriptions and renewals.
- Legitimate interests: running and securing the service, and following up on a trial.
- Legal obligation: tax and accounting records.
Who we share it with
We don't sell personal information, and we don't share it for advertising. We use these providers to run the service:
- Stripe, and Link (Stripe's merchant of record): payments, taxes, subscriptions, receipts and invoices, and the customer portal.
- Railway: hosting of this website and the license service, including their logs.
- Resend: sending the email with your trial key.
- Google Fonts: fonts for this website and the license service.
- GitHub: the source code, documentation and container images.
- ImprovMX and Google (Gmail): receiving and answering our email.
We may also disclose information where the law requires it, or to a successor if the business is sold.
How long we keep it
- License service logs (trial sign-ups, renewals): kept by our hosting provider for up to 30 days.
- Subscription and billing records: kept in Stripe for as long as the law requires for tax and accounting, typically 7 years.
- Emails: kept for as long as they're useful for helping you, then deleted.
Where it's processed
Our providers process information in the United States and other countries. Where the law requires it for transfers from the EU, UK or Switzerland, they rely on safeguards such as standard contractual clauses.
Your rights
You can ask us to:
- tell you what we hold about you, and give you a copy;
- correct it;
- delete it, where we don't need to keep it for a subscription or by law;
- stop following up with you.
Write to privacy@agentcontroltower.app. We answer within 30 days. Depending on where you live, including the EU, UK and California, you may have further rights, and you can complain to your data protection authority.
We don't sell or share personal information as the California Consumer Privacy Act defines those terms.
Security
Everything is served over HTTPS. License keys are signed, so they can be checked without contacting us. We collect as little as we can, so there's little to protect.
Children
Control Tower is a product for organisations. It isn't directed at children, and we don't knowingly collect their information.
Changes
If we change this policy, we'll post the new version here with its effective date. If the change is material, we'll email subscribers.
Contact
Agent Control Tower · privacy@agentcontroltower.app