Privacy Policy

Last updated: 8 October 2026

Information we collect

When you submit a contact form, Brand Health Check, quote request, or support request, CtrlBox may collect your name, phone number, email address, business name, service interest, message, IP address, browser information, and related communication details.

When you buy a digital product, ebook, mini-course, template, or paid resource through CtrlBox, we may collect order details such as customer name, email, phone, product name, amount, payment status, Razorpay order ID, Razorpay payment ID, receipt number, and private delivery token details.

Payment data

Payments are processed through Razorpay. CtrlBox does not store card numbers, UPI PINs, net banking passwords, CVV, or full payment instrument details on this website. Razorpay may collect and process payment information as required to complete the transaction.

How we use it

We use the information to respond to inquiries, deliver paid digital products, send receipts and delivery links, provide support, maintain order records, improve services, prevent misuse, and comply with applicable legal, tax, accounting, and payment gateway requirements.

Marketing choices and source attribution

Marketing email or WhatsApp updates are sent only where the relevant consent has been recorded. Messages include an unsubscribe or preference route where applicable. We may retain campaign and source information so we can understand which CtrlBox or JTechAI content led to an inquiry or purchase. Unsubscribing stops marketing; essential security, receipt, purchase-access, or support messages may still be sent when needed.

CtrlBox uses the Meta Pixel on public CtrlBox and JTechAI pages to measure page visits and understand advertising performance. Meta may receive browser, device, page URL, IP-derived and campaign information under its own privacy terms. The Pixel is not installed in CtrlBox admin, client or employee workspaces.

Sharing

We do not sell personal information. We may share limited information with payment processors, hosting providers, email providers, support tools, professional advisors, or authorities when required for payment processing, service delivery, security, legal compliance, or dispute handling.

CtrlBox AI guide

The optional AI guide uses OpenAI to answer questions from reviewed public CtrlBox information. When you send a message, its text, a limited amount of recent conversation from your current tab, and basic page context are sent to OpenAI. Please avoid sharing passwords, payment details or sensitive personal information. AI responses can be mistaken; prices, scope and availability should be checked on the linked page or with our team.

We request that OpenAI does not store API responses as application state. OpenAI may separately retain data for abuse monitoring under its API data policies. We do not save raw chat transcripts in our database. Recent messages remain in the current browser tab, while a short business brief can remain in the website session for up to 30 minutes.

The mascot companions offer optional voice questions. Recording starts only when you press Talk and allow microphone access, and stops after a pause, when you press Stop, or after 30 seconds. Audio is sent to OpenAI to turn it into text, then the question is handled like a typed message. We use temporary upload storage and do not save recordings in our database or attach them to enquiries. Cancel discards an unfinished recording. Your selected companion is remembered in this browser tab; the conversation is kept in memory. Optional spoken answers use your device or browser's available speech service.

Contact details belong in the guide's separate enquiry form. You can edit and review the request before consenting to submit it. That form is processed by CtrlBox and is not sent to OpenAI. Unsubmitted confirmation drafts expire after 15 minutes. Submitted guide enquiries are scheduled for deletion after 90 days, and technical usage records after 30 days. Bounded cleanup runs with guide traffic, so physical deletion can take longer on an inactive site. Technical records include daily-hashed IP and session identifiers, usage, timing and error categories, rather than message text. You can contact us to request earlier eligible deletion.

Data retention

We keep information only while it is needed for the relevant inquiry, service, learning access, employment, security, support, accounting, legal, tax, fraud-prevention, or dispute purpose. Unconverted lead and marketing records are reviewed periodically; payment and accounting evidence may need to be retained for a longer statutory period. Expired authentication and private-access tokens are not intended to provide continuing access.

Your requests

You may ask us to correct inaccurate details, stop eligible marketing, or delete eligible personal information. We will verify the requester and may retain limited records where a contract, transaction, security issue, legal obligation, dispute, or suppression record requires it.

Security

CtrlBox uses role-based access, protected storage, short-lived access links, hashed credentials or tokens, request validation, audit records, and transport/security controls appropriate to the service. No internet system can promise absolute security; please contact us promptly if you suspect misuse of your account or delivery link.

Contact

For privacy requests, contact connect@ctrlbox.co.in or call +91 91483 91386.