Privacy Policy

Last updated: 20 August 2026

Information we collect

When you submit a contact form, Brand Health Check, quote request, or support request, CtrlBox may collect your name, phone number, email address, business name, service interest, message, IP address, browser information, and related communication details.

When you buy a digital product, ebook, mini-course, template, or paid resource through CtrlBox, we may collect order details such as customer name, email, phone, product name, amount, payment status, Razorpay order ID, Razorpay payment ID, receipt number, and private delivery token details.

Payment data

Payments are processed through Razorpay. CtrlBox does not store card numbers, UPI PINs, net banking passwords, CVV, or full payment instrument details on this website. Razorpay may collect and process payment information as required to complete the transaction.

How we use it

We use the information to respond to inquiries, deliver paid digital products, send receipts and delivery links, provide support, maintain order records, improve services, prevent misuse, and comply with applicable legal, tax, accounting, and payment gateway requirements.

Marketing choices and source attribution

Marketing email or WhatsApp updates are sent only where the relevant consent has been recorded. Messages include an unsubscribe or preference route where applicable. We may retain campaign and source information so we can understand which CtrlBox or JTechAI content led to an inquiry or purchase. Unsubscribing stops marketing; essential security, receipt, purchase-access, or support messages may still be sent when needed.

Sharing

We do not sell personal information. We may share limited information with payment processors, hosting providers, email providers, support tools, professional advisors, or authorities when required for payment processing, service delivery, security, legal compliance, or dispute handling.

Data retention

We keep information only while it is needed for the relevant inquiry, service, learning access, employment, security, support, accounting, legal, tax, fraud-prevention, or dispute purpose. Unconverted lead and marketing records are reviewed periodically; payment and accounting evidence may need to be retained for a longer statutory period. Expired authentication and private-access tokens are not intended to provide continuing access.

Your requests

You may ask us to correct inaccurate details, stop eligible marketing, or delete eligible personal information. We will verify the requester and may retain limited records where a contract, transaction, security issue, legal obligation, dispute, or suppression record requires it.

Security

CtrlBox uses role-based access, protected storage, short-lived access links, hashed credentials or tokens, request validation, audit records, and transport/security controls appropriate to the service. No internet system can promise absolute security; please contact us promptly if you suspect misuse of your account or delivery link.

Contact

For privacy requests, contact connect@ctrlbox.co.in or call +91 91483 91386.