Privacy Policy

This Privacy Policy explains how Control Harbour (“we”, “us”) collects, uses, discloses, and safeguards personal data when you visit our websites or use our platform. We are committed to protecting your privacy and handling data transparently, consistent with the standards we help our customers meet.

• Account data — name, work email, organization, and role when you register or request a demo.
• Usage data — how you interact with the Services, such as pages viewed and features used.
• Device data — IP address, browser type, and similar technical information.
• Customer Data — content your organization uploads to the platform, processed on your behalf.

We use personal data to:

• Provide, operate, secure, and improve the Services.
• Respond to demo requests, support inquiries, and account communications.
• Detect, prevent, and investigate security incidents and abuse.
• Comply with legal obligations and enforce our terms.

Where applicable law (such as the GDPR) requires it, we process personal data on the bases of performance of a contract, our legitimate interests in operating and securing the Services, your consent, and compliance with legal obligations.

We do not sell personal data. We share it only with service providers who process it on our behalf under appropriate safeguards, when required by law, or in connection with a corporate transaction. Sub-processors are bound by contractual confidentiality and security obligations.

We apply technical and organizational measures appropriate to the risk, including encryption in transit and at rest, role-based access control, and audit logging. No method of transmission or storage is completely secure, but we work continuously to protect your data.

We retain personal data for as long as needed to provide the Services and for legitimate business or legal purposes. Customer Data is retained according to your subscription and deleted or returned after termination as described in our agreement.

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict certain processing.
• Request data portability.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us using the details below.

We may process data in countries other than where you reside. Where required, we use appropriate transfer mechanisms, such as standard contractual clauses, to protect your data.

We use cookies and similar technologies to operate our websites, remember preferences, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.

We may update this Privacy Policy periodically. Material changes will be communicated through the Services or by email, and the effective date above will be revised accordingly.