Privacy Policy

• Account and profile data: your name, email address, and the account identifiers created when you register. If you sign in with Google, we receive basic profile information (such as your name, email address, and Google account identifier) from Google so we can create and authenticate your account. We never receive your Google password.
• Learning data: program enrollment and access, module and task progress, task attempts and submitted answers, saved drafts, grades and scores, feedback you receive, certificates issued to you, and your interactions with in-app AI features such as the Ask Billy coach, Resume Rocketship, and Interview Buddy.
• Content you submit: text you type into practice tasks and AI features, including any resume text or practice answers you choose to provide.
• Support and correspondence: messages, feedback, and bug reports you send us from inside the app or by email.

Purchases are processed by Stripe, our payment processor. Stripe collects and handles your card details directly. Controller Lab does not receive or store full payment-card numbers. We do store order records associated with your account — for example the program purchased, amount, currency, status, timestamps, and the payment-processor reference identifiers we need to grant access, support you, and keep accurate records.

We store your email preferences, including whether you have opted out of non-essential marketing emails, and records of lifecycle and marketing emails we send you (such as the template used, recipient address, send time, and delivery outcome). Essential service emails — for example invitations, password resets, and purchase confirmations — are part of the service and are sent regardless of marketing preferences.

Like most web applications, our hosting, database, and authentication infrastructure produce server and security logs. These logs can include IP address, browser and device information, request paths, timestamps, and error details. We use them to operate the service, diagnose problems, and detect abuse. We do not use advertising trackers or sell this information.

• to create your account, authenticate you, and keep your session secure;
• to fulfill purchases and grant the program access you paid for;
• to run the learning experience: save progress and drafts, grade attempts, show feedback, and issue certificates;
• to provide AI-assisted coaching, resume, and interview-practice features;
• to respond to support requests and investigate reported problems;
• to protect the service against fraud, abuse, and security incidents;
• to improve curriculum, grading, and product quality;
• to send service emails, and lifecycle or marketing emails subject to your preferences.

We share information only with providers that help us run Controller Lab, and only as needed for that purpose. Current categories are:

• cloud hosting, database, and authentication infrastructure;
• Stripe, for payment processing;
• Google, if you choose to sign in with Google;
• an email delivery provider, for sending service and lifecycle email;
• AI model providers, for processing the prompts and content of AI features you use.

We may also disclose information if required by law, to enforce our Terms, or in connection with a corporate transaction affecting the service. We do not sell your personal information.

We keep account, learning, certificate, and order records for as long as your account is active and afterwards as needed for legitimate business purposes such as record keeping, dispute resolution, security, and legal compliance. Logs and email activity records are kept for shorter, operational periods. Some AI features process content transiently and do not retain a permanent copy of audio or transcripts.

• Marketing email: you can opt out of non-essential marketing email in your in-app settings at any time.
• Profile: you can update your name and account details in settings.
• Access, correction, deletion: depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to certain processing. Contact us at help@thecontrollerlab.com and we will respond as applicable law requires. Deleting your account may remove your progress and revoke access to issued certificates.

We use access controls, row-level database permissions, encrypted transport, and third-party providers with their own security programs. No online service can guarantee absolute security, so please use a strong, unique password and keep your credentials private.

Controller Lab may link to third-party websites or services. Their privacy practices are their own, and this policy does not cover them.

Controller Lab is intended for adult learners and working professionals. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will remove it.

We may update this policy as the product changes. We will revise the "Last updated" date above, and significant changes may also be communicated by email or in the app.

Questions about privacy? Email help@thecontrollerlab.com.