Live on AppSumo: from $79 (opens AppSumo in a new tab)

Legal

Privacy Policy

Last updated: October 7, 2026

At Contral ("we", "us", "our"), we respect your privacy. This policy explains how we collect, use, and protect your information when you use the Contral IDE, the Contral editor extension, our websites (contral.ai and docs.contral.ai), and related services.

1. Information We Collect

Account Information

When you sign up, we collect your email address, display name, profile photo (if your sign-in provider shares one), and authentication data via Firebase Authentication (Google, GitHub, or email/password).

Usage Telemetry

With your consent, the Contral IDE collects anonymized usage analytics to help us improve the product. This includes:

  • Feature usage counts (e.g., number of build messages, explanations, deep dives)
  • LLM API call metadata (model used, duration, and success or failure, but never your code or prompts)
  • Session lifecycle events (create, delete, switch)
  • Mode changes (Fast, Plan, Deep)
  • Error events (error type only, no stack traces containing user data)

If you decline consent, we only track aggregate feature counts with no metadata, device identifiers, or session information.

Device Identification

For fraud prevention and abuse detection, we generate a device identifier based on hardware characteristics (a one-way hash, so we cannot reverse it to identify your hardware). This is used solely to detect multi-account abuse under our legitimate interest basis (GDPR Art. 6(1)(f)).

Billing Information

Subscription payments on contral.ai are processed by Razorpay. We do not store your card, bank or UPI details. We retain your subscription status, plan, billing interval, amount and payment history to manage your plan and handle refunds.

If you buy a lifetime license on AppSumo, AppSumo processes the payment. AppSumo shares your license key, license status and tier with us (not your payment details), and we link that license to your Contral account.

Website Analytics and Advertising

When you visit contral.ai we record page visits (page, referrer, browser and device information, IP address and approximate location) and, for some visits, an anonymized session replay of page interactions such as clicks and scrolling, to understand how the site is used and fix problems. Session replays mask everything typed into form fields. We also use the X (Twitter) advertising pixel to measure our ads.

Support Conversations

When you contact support, we store your email address, name, the messages in your ticket, any AppSumo license key you provide, and related account details (such as your plan) so we can help you. Conversations with our help assistant are stored with a hashed (non-reversible) version of your IP address so we can improve our documentation, and your questions are sent to our AI provider to generate answers.

2. How We Use Your Information

  • Product improvement: Usage telemetry helps us identify which features are valuable and where users encounter issues
  • Tier enforcement: We track usage counts to enforce free/Pro/Pro+ quota limits
  • Abuse prevention: Device IDs and IP addresses help us detect multi-account abuse and quota gaming
  • Billing and licenses: Subscription management, payment processing, and AppSumo license activation
  • Support: Answering your questions and resolving issues
  • Communication: Account notifications, billing alerts, onboarding emails, and product updates and offers (you can unsubscribe from marketing emails at any time using the link in every email)
  • Website improvement and marketing: Visit analytics, session replays and ad measurement

3. What We Never Collect

  • Your source code or project files
  • Your prompts or conversations with the AI agent (requests to hosted AI are passed to our AI provider to generate a response and are not stored by us)
  • File contents, file names, or directory structures
  • Clipboard contents or screenshots
  • Keystrokes, or text you type into forms on our website

4. Data Storage & Retention

  • Account, usage and support data is stored in Google Cloud Firestore (Firebase) with encryption at rest; files you attach to feedback are stored with Bunny.net
  • Telemetry events: retained for 90 days, then automatically deleted
  • Usage snapshots: retained for 2 years for analytics
  • Account data: retained until you delete your account
  • Support tickets: retained while needed to support you, and deleted on request
  • Payment records: retained as required by law (typically 7 years)

5. Your Rights

Depending on your jurisdiction, you have the following rights:

All Users

  • Access: Request a copy of all data we hold about you
  • Deletion: Delete your account and associated data
  • Export: Download your data in JSON format (data portability)
  • Consent withdrawal: Decline or revoke telemetry consent at any time in the IDE settings

GDPR (European Union)

Legal bases: consent (Art. 6(1)(a)) for telemetry, legitimate interest (Art. 6(1)(f)) for device fingerprinting and abuse prevention, contract performance (Art. 6(1)(b)) for billing and account management. You may exercise your right to object under Art. 21.

CCPA (California)

We do not sell your personal information. You have the right to know what data we collect, request deletion, and opt out of any future data sales (though we have no plans to sell data).

DPDP Act (India)

You have the right to access, correct, and erase your personal data. You may nominate another person to exercise your rights. We will respond to requests within 30 days.

6. How to Exercise Your Rights

You can manage your data directly:

  • Delete your account: Use Delete Account on the Account page. This deletes your account and usage data, cancels any active subscription, and releases any AppSumo license so it can be redeemed again.
  • Export your data: Email us and we will send you a copy in JSON format.
  • Unsubscribe from emails: Use the unsubscribe link at the bottom of any marketing email.
  • Revoke consent: Click "Decline" on the consent banner in the IDE, or clear contral-privacy-consent from localStorage

Or email us at contact@contral.ai and we will respond within 30 days.

7. Third-Party Services

  • Firebase (Google): Authentication and database. Privacy policy
  • Cloudflare: Website and API hosting, content delivery, and security. Privacy policy
  • Razorpay: Subscription payment processing. Privacy policy
  • AppSumo: Lifetime license sales and license management. Privacy policy
  • NVIDIA NIM / OpenAI / OpenRouter: AI inference for the IDE, the extension, and our help assistant. Prompts are sent to these providers to generate responses. We use API-only access (no training on your data).
  • Tavily: Web search results for the extension's web search feature. Your search queries are sent to Tavily.
  • Purelymail: Delivery of account, support and product emails.
  • Bunny.net: Storage and delivery of app downloads and feedback attachments.
  • X (Twitter): Advertising measurement pixel on contral.ai. Privacy policy
  • Cal.com: Scheduling, if you book a call with our team. Privacy policy

8. Contact

If you have questions about this privacy policy or want to exercise your data rights: