Privacy Policy

1. Who this policy applies to

This policy covers visitors to our website and operators who use the CtrlOne admin console. It explains how we handle personal data for which UQuick is the data fiduciary (controller).

Where CtrlOne collects data from your managed endpoints on your behalf, your organization - not UQuick - decides how that data is used. In that context, your organization is the data fiduciary and UQuick acts as a data processor. See section 5.

2. Information we collect

We collect the following categories of information:

• Account and contact details, such as name, work email, organization, and role, when you sign up, request a demo, or contact us.
• Billing information needed to manage your subscription.
• Usage and log data about how you interact with our website and console, such as pages viewed, actions taken, IP address, and device or browser information.
• Cookies and similar technologies, as described in our Cookie Policy.
• Communications you send to us, such as support requests and enquiries.

3. How we use your information

We use personal data to:

• Provide, operate, and maintain the Services.
• Process subscriptions, payments, and account administration.
• Provide customer support and respond to your enquiries.
• Secure the Services, prevent fraud, and troubleshoot problems.
• Improve and develop our products and communicate important updates.
• Comply with legal obligations and enforce our terms.

4. Your rights

Subject to applicable law, you may have the right to access the personal data we hold about you, to request correction or erasure, to withdraw consent where processing is based on consent, and to raise a grievance. To exercise these rights, contact us using the details in section 12. We will respond within the timeframes required by law.

5. Data collected from managed devices

When you use CtrlOne to manage endpoints, the agent may collect operational data such as device inventory, policy and compliance state, activity logs, and other telemetry that you configure. For this data, your organization is the data fiduciary and determines the purposes and means of processing.

UQuick processes this data only to provide the Services to you and on your documented instructions. You are responsible for having a lawful basis to collect it and for giving any notices required to the individuals who use those devices.

6. How we share information

We do not sell personal data. We may share personal data with:

• Service providers who process data on our behalf (for example, hosting, payments, and analytics) under appropriate confidentiality and security obligations.
• Authorities or third parties where required by law or to protect our rights, users, or the public.
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.

7. Data retention

We retain personal data for as long as needed to provide the Services and for the purposes described in this policy, and thereafter as required to meet legal, accounting, or reporting obligations. When data is no longer needed, we delete or anonymize it.

8. Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, or misuse, including encryption in transit, access controls, and tamper-evident audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

We are based in India. Where personal data is transferred to or processed in other countries, we take steps to ensure it remains protected consistent with this policy and applicable law.

10. Children's privacy

Our Services are intended for organizations and their authorized operators and are not directed to children. We do not knowingly collect personal data directly from children through the website or console.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice.

12. Contact and grievances

If you have questions about this policy or wish to exercise your rights or raise a grievance about how we handle personal data, contact us at support@ctrlone.online. We will acknowledge and address your request in accordance with applicable law.