Privacy Policy
This Privacy Policy explains how ITISWHATITIS LLC ("Control Freak," "we," "us," or "our") collects, uses, and shares information when you use the Control Freak platform at controlfreak.cloud (the "Service"). It applies to account holders and their authorized team members, and to visitors of our public pages.
1. Two Kinds of Information
The Service handles two different categories of information, and our role differs for each:
- Account Information is information about you, our customer: the account holder and team members who sign in to Control Freak. We are the business responsible for this information.
- Customer Data is information our customers enter about their own clients, borrowers, contacts, and referral partners. For Customer Data, the account holder is the responsible business and we act only as its service provider, processing that data on its behalf and at its direction. See Section 4.
2. Information We Collect
Information you give us
- Account and profile information: name, email address, role, team membership, profile photo, and sign in credentials (stored in encrypted form by our authentication provider).
- Settings and preferences: notification choices, booking links, and display preferences you configure.
- Customer Data you enter or import: contact records, loan information, notes, and communications history.
- Connection keys and integration settings you generate or provide so that tools you choose can file information into your account.
- Messages you send us, including support requests and feedback.
Information collected automatically
- Usage and log information: pages and features used, actions taken, dates and times, and error reports.
- Device and connection information: browser type, operating system, and IP address.
- Cookies and local storage as described in our Cookie Policy.
Information from integrations you connect
When you connect a third party service, such as scheduling, social media, analytics, or market data providers, we receive the information that integration is designed to share, for example scheduling details, follower counts, post statistics, and market prices. We receive this only because you or your team connected the integration, and you can disconnect it at any time.
3. How We Use Information
- To provide, operate, and secure the Service, including authenticating users and enforcing role based access.
- To store, organize, and display your information back to you and your authorized team.
- To provide support and respond to your requests.
- To maintain, troubleshoot, and improve the Service.
- To send service related messages, such as security notices and important product updates.
- To comply with legal obligations and to protect the rights, safety, and property of our users and our company.
We do not use Account Information or Customer Data for our own advertising, and we do not sell personal information.
4. Customer Data and Our Role as a Service Provider
- Account holders decide what Customer Data to collect from their clients and contacts, what notices and consents to obtain, and how that data is used in their business. Those duties belong to the account holder.
- We process Customer Data only to provide the Service to the account holder and as the account holder directs, including through integrations the account holder connects.
- If you are a client, borrower, or contact of one of our customers and you have a question or a request about your information, please contact that business directly. We will support the business in responding as the law requires.
- We do not sell Customer Data or share it for cross context behavioral advertising.
5. How We Share Information
We share information only as described here:
| Recipient | Why |
|---|---|
| Infrastructure providers (cloud hosting and database services, including Cloudflare and Supabase) | To host, deliver, and secure the Service and its data. |
| Integrations you connect | To exchange the data the integration exists to exchange, at your direction. |
| Your team | Account holders and team members see the account data their role permits. |
| Legal and safety | When required by law, legal process, or to protect rights, safety, and the integrity of the Service. |
| Business transfer | In connection with a merger, sale, or restructuring, subject to this Policy continuing to apply. |
We do not sell or rent personal information to third parties for their marketing.
6. Data Retention
We keep Account Information while your account is active and for a reasonable period afterward to comply with legal, accounting, and security obligations. Customer Data is retained as the account holder directs; when an account closes, we delete or de identify Customer Data within 90 days, except where retention is required by law or needed to resolve disputes. Backup copies are removed in the ordinary backup rotation.
7. Security
We protect information with encryption in transit, access controls that limit data by role and account, and authentication provided through our database provider. Each account holder is responsible for the credentials and access permissions of its team. No system is completely secure, and we cannot guarantee absolute security.
8. Your Choices and Privacy Rights
- Account Information. You can review and update most profile and settings information inside the Service, and you may request a copy or deletion of your Account Information by writing to [email protected].
- State privacy rights. Depending on your state of residence, you may have rights to know, access, correct, delete, or receive a portable copy of your personal information, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined in state privacy laws. We will not discriminate against you for exercising a privacy right.
- Customer Data. Requests about Customer Data should go to the business that collected it. We act on those requests only at that business direction or as the law requires of us directly.
- Marketing messages. The Service does not send our own marketing email to account users. Messages sent through the Service are sent by account holders to their own audiences, and those senders are responsible for opt outs.
9. Children
The Service is a business tool intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided us information, contact us and we will delete it.
10. Do Not Track
Our public pages and the Service do not respond to browser Do Not Track signals because there is no common standard for doing so. Our Cookie Policy explains the limited cookies and local storage we use.
11. Changes to This Policy
We may update this Policy from time to time. We will post the updated Policy on this page, change the date above, and, for material changes, notify account holders through the Service or by email before the changes take effect.
12. Contact
ITISWHATITIS LLC, doing business as Control Freak
Privacy questions: [email protected]
13. Text Messaging and Mobile Information
Control Freak includes a text messaging program operated by ITISWHATITIS LLC that lets our customers, who are licensed loan officers, send and receive text messages with their own clients and referral partners. When an end user opts in to receive messages, we collect and use their mobile phone number and message content to deliver and support those conversations.
Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, other than the messaging providers who transmit the messages on our behalf. Message frequency varies, and message and data rates may apply. End users can opt out at any time by replying STOP.